This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa
File:                     376f1606-d35e-3cb6-b663-26b1e90c408b.roa (raw, json)
Hash identifier:          ZLPaq/864J9MSs9bN2Upkoh++0LvqZ2ZwuRZyY3XH48=
Subject key identifier:   BD:C4:B6:CB:0A:49:40:9D:0E:4B:90:83:AE:D6:CF:F4:BD:49:FF:80
Certificate issuer:       /CN=da733fda-b405-4eb1-adbe-811e8f7eacd4
Certificate serial:       010D0C9F4328584C364BA4BE0CC48AAF06C268A0
Authority key identifier: CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa
Signing time:             Wed 17 Dec 2025 02:00:31 +0000
ROA not before:           Wed 17 Dec 2025 02:00:31 +0000
ROA not after:            Tue 17 Mar 2026 01:00:31 +0000
asID:                     55159
IP address blocks:        64.89.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:36:4b:a4:be:0c:c4:8a:af:06:c2:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da733fda-b405-4eb1-adbe-811e8f7eacd4
        Validity
            Not Before: Dec 17 02:00:31 2025 GMT
            Not After : Mar 17 01:00:31 2026 GMT
        Subject: CN=37004e33-95c4-4f4e-ad52-db0ba3ee8662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:86:71:a1:ed:68:e6:4f:89:c9:a5:43:93:
                    32:35:04:8d:86:a9:07:31:33:86:33:35:aa:a1:13:
                    6b:28:89:7b:e7:42:82:5c:cb:c6:a3:eb:3a:a5:c2:
                    f4:64:6f:44:db:08:b1:45:56:75:a7:b8:32:2c:2b:
                    21:01:ca:71:84:a7:6a:ed:28:cb:70:a6:06:15:3a:
                    df:ef:23:67:f3:3b:1f:8a:16:74:dd:4b:b4:f3:bb:
                    4d:e0:a9:5a:8f:f0:f0:3c:8a:7b:11:8c:0a:9a:cf:
                    09:76:56:c5:ba:0a:9a:4c:f9:db:c6:82:a7:17:8e:
                    ff:5c:02:f0:f6:a5:c3:ad:3f:b0:3f:97:04:42:fb:
                    43:1a:17:bb:3f:27:36:26:f8:a9:d2:2f:b5:eb:67:
                    13:65:ae:c8:39:c6:aa:9f:b0:88:48:02:00:3b:ed:
                    18:b2:fb:9c:fc:1e:2c:ba:8c:44:0e:09:5a:e8:2f:
                    58:17:2f:7f:d3:3b:20:15:4e:e9:81:17:53:2e:04:
                    3c:19:02:ab:84:7d:82:c1:c6:bc:c3:5e:83:aa:a9:
                    83:a4:36:e7:0e:04:c4:74:6f:a5:a7:34:24:3a:85:
                    01:64:55:de:33:18:a5:54:78:8f:17:08:62:1c:6c:
                    70:af:41:8f:4e:ee:18:13:82:8d:1a:64:0a:84:47:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C4:B6:CB:0A:49:40:9D:0E:4B:90:83:AE:D6:CF:F4:BD:49:FF:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl

            X509v3 Authority Key Identifier:
                keyid:CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2b:db:49:a1:a6:67:a9:4a:d2:0a:50:b7:8b:74:86:15:f3:
         94:ca:bf:06:dc:a4:17:66:b0:96:96:c8:73:38:bb:14:a9:a1:
         27:78:81:ae:de:c8:a3:ef:a6:53:fd:2f:f7:05:31:aa:b8:01:
         d6:79:9a:59:3e:6b:f4:2f:89:18:07:51:5e:38:ff:9c:b1:5a:
         b3:da:c8:39:a6:1c:12:7b:bc:24:b5:b2:b9:d5:c4:c8:ce:15:
         79:68:e5:8c:05:03:80:9f:58:8f:cc:c0:62:a4:19:2f:38:5e:
         7d:83:22:e9:81:71:77:3f:59:83:40:0d:bb:45:08:2c:54:e3:
         86:2a:b4:d2:d7:fe:3b:b7:b2:f2:98:8b:c5:b9:df:18:41:84:
         57:1d:dd:f4:43:6f:ac:aa:94:12:29:2b:ad:5a:aa:2b:ea:a7:
         c8:58:62:39:5c:f6:a6:69:6a:e4:7f:3b:13:74:fb:a8:5e:95:
         6e:7a:4a:de:b4:e0:94:41:a2:80:bc:25:18:f2:d6:cc:02:9f:
         ce:3b:0a:6b:5d:f9:9b:bf:3e:19:83:ae:31:c6:59:76:70:ca:
         20:42:cd:1a:5f:cd:d9:c6:49:60:23:6f:c4:d2:1d:26:26:a4:
         e4:b1:b1:46:1f:0f:57:a5:b3:64:ca:ab:68:8b:84:86:fd:03:
         34:14:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:37:55 2025 by rpki-client