This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/95298c8b-74dc-3dfa-8bf2-4302a75a1d0f.roa
File:                     95298c8b-74dc-3dfa-8bf2-4302a75a1d0f.roa (raw, json)
Hash identifier:          YvZIipFVCHoMkRWk1ebicbOc3JDT2akAcHQvN6p+WQA=
Subject key identifier:   97:36:A8:28:B1:38:45:10:C9:65:5C:E4:FD:6F:37:2A:C9:9C:18:E5
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584C444118A429FA800BC8F15100
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/95298c8b-74dc-3dfa-8bf2-4302a75a1d0f.roa
Signing time:             Mon 22 Dec 2025 02:00:32 +0000
ROA not before:           Mon 22 Dec 2025 02:00:32 +0000
ROA not after:            Sun 22 Mar 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        104.145.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:44:41:18:a4:29:fa:80:0b:c8:f1:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Dec 22 02:00:32 2025 GMT
            Not After : Mar 22 01:00:32 2026 GMT
        Subject: CN=68c7944b-931f-4b9a-a850-240e4aba67be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:11:dc:5b:85:07:17:f5:97:6f:f9:54:32:
                    5f:e8:d2:f6:a9:5b:4b:2e:f0:54:13:cb:2d:88:6f:
                    05:5b:63:72:3c:28:9f:15:67:82:53:34:a7:3c:0f:
                    06:c0:1b:32:ad:22:33:d7:a1:95:32:26:95:89:65:
                    f6:df:27:44:67:9f:a3:34:b4:21:f0:92:9c:b3:0b:
                    ab:4a:84:70:bc:76:10:7f:2d:e1:35:90:91:44:98:
                    37:36:ac:fd:21:e8:15:28:35:cd:5a:f6:5b:9c:dd:
                    05:9a:cd:46:32:90:49:46:f2:08:47:89:c5:cc:2f:
                    3e:a3:c2:3c:84:ec:73:8b:e1:d3:8a:02:8c:d0:99:
                    45:95:6d:74:5d:b4:c4:76:2d:ce:20:0f:c4:ae:65:
                    79:0d:e3:ce:a0:82:4a:15:58:ae:b4:6f:da:41:1f:
                    de:bb:a4:2f:f8:03:ca:30:8e:8b:22:92:67:cf:aa:
                    ef:ec:c7:1b:8b:d9:9f:e9:23:91:9d:63:df:57:ed:
                    2f:61:8a:2f:b6:00:27:0f:30:57:74:fc:8e:8a:b7:
                    57:e4:d4:d0:17:b9:99:f9:9f:de:66:14:3b:83:1a:
                    5a:59:7c:44:46:f5:63:a6:a0:cc:db:ca:16:9e:fa:
                    48:98:ee:2a:68:eb:6f:ef:43:12:18:b6:f4:82:98:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:36:A8:28:B1:38:45:10:C9:65:5C:E4:FD:6F:37:2A:C9:9C:18:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/95298c8b-74dc-3dfa-8bf2-4302a75a1d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cf:94:90:e8:0d:7e:dd:80:87:3b:ec:93:c1:4c:e9:6f:b3:
         de:db:e7:e2:f0:11:3d:37:a9:dc:82:ab:a2:17:16:f9:a4:4e:
         4b:4a:0e:0c:6e:b0:5b:9e:2c:8f:b1:1c:17:41:56:2d:5a:ab:
         19:73:ff:59:2d:6a:52:b4:20:30:c1:96:80:fe:cb:27:27:04:
         53:4c:72:d0:0e:31:89:b9:87:3b:99:a1:fa:56:ed:75:94:22:
         e3:c6:78:f6:1c:fb:60:2d:61:f9:9b:32:ca:11:5a:5d:10:3a:
         c1:bd:58:d1:94:24:e5:95:a5:0c:f2:a2:cf:90:4c:bf:22:79:
         48:fd:73:9a:ba:ad:65:23:f2:5c:b2:e4:ba:94:9d:b7:1d:d4:
         a2:36:be:cd:e3:6a:66:ec:b7:53:60:26:91:8b:03:bd:d6:3c:
         b8:05:49:2a:aa:b4:50:e7:87:e7:3b:ad:ea:3f:ab:b2:c0:70:
         c0:41:cb:72:55:14:27:92:b4:53:be:3c:40:d0:30:41:3e:a1:
         30:31:42:db:a6:03:ac:51:9b:b3:5a:5b:f5:f6:57:a4:76:d3:
         1d:11:7d:95:aa:c9:02:09:be:81:5c:5d:cb:da:44:44:7b:94:
         c4:9e:53:60:bb:0e:f7:84:bc:09:b8:de:dd:fc:00:4d:6f:37:
         ba:26:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:17:26 2025 by rpki-client