This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
File:                     87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa (raw, json)
Hash identifier:          OxVWcU+xiUNC+rhlfQMqLa71wEDS2dWGYjHtDt4yCqg=
Subject key identifier:   0D:B9:E2:B6:68:87:88:78:45:86:19:03:70:41:AC:35:CC:00:14:26
Certificate issuer:       /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Certificate serial:       010D0C9F4328584C3D4EF2370895D6C2D0110780
Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
Signing time:             Tue 25 Nov 2025 02:00:31 +0000
ROA not before:           Tue 25 Nov 2025 02:00:31 +0000
ROA not after:            Mon 23 Feb 2026 02:00:31 +0000
asID:                     1299
IP address blocks:        72.251.128.0/19 maxlen: 24
                          158.62.224.0/19 maxlen: 24
                          167.254.96.0/20 maxlen: 24
                          209.25.224.0/21 maxlen: 24
                          2605:d2c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3d:4e:f2:37:08:95:d6:c2:d0:11:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
        Validity
            Not Before: Nov 25 02:00:31 2025 GMT
            Not After : Feb 23 02:00:31 2026 GMT
        Subject: CN=9693c6ab-3863-43a7-b01f-3b0b14945a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:ac:42:78:eb:33:6e:1b:ce:a4:b5:01:35:
                    f5:44:8c:3a:ab:5d:69:50:c5:0f:13:a5:e3:88:f4:
                    55:3f:da:5c:98:5d:3c:b2:7c:d4:c4:c4:a5:ca:ad:
                    be:05:2f:20:23:af:d4:82:74:ce:22:07:30:e9:43:
                    0a:68:bf:ec:b3:98:fa:5f:fd:ce:1a:7e:b3:d5:cb:
                    48:c2:9f:5e:a5:a8:2d:86:d4:65:34:51:55:c7:70:
                    56:1e:a5:0b:d8:1f:08:5f:db:48:80:d4:a9:57:e5:
                    ea:5a:25:bc:43:1a:bf:d4:dd:77:e7:ef:27:13:bd:
                    11:87:88:27:f2:e9:a0:7d:8d:5f:ce:88:f6:2c:f8:
                    e2:55:91:7b:3a:53:61:b7:04:65:4e:06:ca:db:68:
                    74:99:ec:74:9f:4a:c7:ed:94:ad:98:17:a8:c8:81:
                    c2:2e:75:97:1b:d3:65:31:c8:20:3f:75:8e:88:3f:
                    33:5a:d2:cd:09:f0:4f:d7:0e:68:5d:33:bb:71:d9:
                    97:ce:ea:98:e8:ef:58:2a:28:33:bb:4d:70:97:b8:
                    50:42:1c:eb:ad:97:d6:4e:34:23:83:88:06:71:c5:
                    ac:90:4f:67:7a:06:be:d1:01:51:4b:15:75:7d:2e:
                    39:5f:15:46:88:67:26:9e:8b:3c:02:bf:39:65:48:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:E2:B6:68:87:88:78:45:86:19:03:70:41:AC:35:CC:00:14:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl

            X509v3 Authority Key Identifier:
                keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.251.128.0/19
                  158.62.224.0/19
                  167.254.96.0/20
                  209.25.224.0/21
                IPv6:
                  2605:d2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:37:b2:7e:62:47:4d:3f:08:b0:cc:17:fb:0e:5d:34:cb:74:
         43:1f:e0:73:e2:3f:4b:11:76:b0:e3:1f:6d:f0:26:cb:3b:e6:
         9d:77:35:04:5e:8a:ad:56:45:b5:69:da:b3:4a:f8:a3:0b:cd:
         2f:35:a0:70:54:2d:6b:1b:5c:db:e6:e3:68:2c:a0:52:fb:01:
         4c:5d:e8:0c:33:0a:33:b6:4c:d4:2b:23:75:ae:62:92:d0:fa:
         ef:e4:e3:06:c1:71:9e:1d:8b:d4:8a:b9:84:ed:21:1a:6b:96:
         26:bd:b1:44:0d:df:79:fe:34:67:92:5a:cb:c1:ed:0e:2a:67:
         40:f8:65:15:2b:53:47:b7:08:88:8d:18:a2:d3:51:db:02:2c:
         a5:f2:4b:52:54:0c:73:dc:6a:72:cf:0d:a8:b4:ee:93:e8:8e:
         68:9d:e4:a5:b8:ee:a5:42:b9:37:c3:cb:ac:28:67:4a:4b:7d:
         80:7e:a2:a8:55:f9:85:b2:63:ae:02:f4:60:de:59:09:22:a8:
         cc:27:fb:04:77:14:e7:cc:e8:ee:db:af:59:fa:ba:d4:52:38:
         e0:47:dd:dc:5c:29:3c:ff:02:c3:fa:33:08:3b:b7:f7:ed:d5:
         22:cc:66:e2:27:db:28:57:1f:50:b4:a2:b2:c1:b0:7d:b3:ea:
         ae:f5:3d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:45:21 2025 by rpki-client