This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa
File:                     33f7bbe6-9997-3a80-85e2-40e243874534.roa (raw, json)
Hash identifier:          OTm1+Sbw+VFuBrORd6/q/Vv7C1GSsA18S5f4TWV4Kik=
Subject key identifier:   D2:EC:11:32:0B:C5:32:B9:9A:AB:A0:1B:D8:43:46:00:9E:9E:3B:DC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584C45A735DD80B1CB79CBF33A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     396982
IP address blocks:        34.103.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a7:35:dd:80:b1:cb:79:cb:f3:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=1e7df685-8bec-496f-9dd0-3eb168445537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cf:be:ec:81:2b:23:08:d0:fc:f6:ec:6d:51:
                    64:70:97:4b:2e:a1:ef:bf:b0:77:37:de:b9:ac:89:
                    a0:50:13:bc:bf:f9:3e:9d:3c:2e:10:61:05:80:96:
                    70:a0:72:0a:66:f1:86:a1:be:7b:99:95:a5:ff:78:
                    16:6f:e6:53:5a:5e:03:6d:a6:1e:1f:e8:c2:f8:66:
                    49:6c:ef:aa:f7:7d:d6:fb:2b:e9:1d:2c:9d:48:9d:
                    6e:33:07:65:a1:7c:09:76:dd:7b:03:ba:d4:fa:6a:
                    37:f1:ba:87:d0:1c:79:0c:35:be:69:61:1b:c7:48:
                    61:27:b1:fe:bc:f9:1c:69:99:43:d8:9c:9c:60:40:
                    bc:39:c3:fb:fa:d9:97:ab:30:65:54:63:12:23:36:
                    df:cb:6b:46:d8:20:47:f2:a9:cf:7b:fc:f7:78:4e:
                    77:8f:36:ae:9b:7f:20:b7:9d:64:1c:cc:0e:fa:76:
                    b7:0a:52:6d:0d:ce:f2:04:d3:32:9a:98:72:ec:71:
                    1d:63:e6:00:28:b5:a3:da:47:29:e4:84:9d:a4:e5:
                    ee:cb:86:87:11:ac:f2:4d:4f:0a:27:5c:c7:a5:8c:
                    50:4d:b3:6f:d6:d1:8c:80:2a:9e:57:19:23:16:ac:
                    ff:a0:be:e6:b5:81:e7:fd:9d:71:9e:43:04:44:f9:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EC:11:32:0B:C5:32:B9:9A:AB:A0:1B:D8:43:46:00:9E:9E:3B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.103.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:00:a7:b0:c5:3d:f8:34:06:fb:70:d1:eb:15:fc:d6:f1:
         bf:f3:9a:7d:6e:d3:55:cf:86:98:5d:c1:79:2b:c0:f6:6b:c5:
         ef:35:c2:d4:ef:02:1d:a3:28:c9:ba:ba:02:3d:38:c0:1d:d3:
         11:19:7e:97:69:1d:38:ab:43:e9:14:d7:7c:e5:41:bd:ba:8e:
         70:01:ee:87:9f:ac:fc:b4:f0:16:89:5a:63:59:c3:6c:ca:df:
         07:bd:92:bc:1c:20:e4:db:1c:58:2c:a3:60:e5:9d:8c:bc:a2:
         80:5b:cf:02:e1:dd:5c:62:ff:88:f9:1b:20:4f:56:77:38:18:
         12:d5:c3:7a:a6:07:43:89:a2:0b:f4:3c:98:f9:88:51:fc:d1:
         b5:61:36:0e:a0:3e:fb:38:50:44:ba:21:e3:06:98:e5:d5:35:
         3f:21:81:30:f5:df:34:e8:ec:6a:9b:83:4d:aa:5c:d1:82:b2:
         69:f8:2a:ce:f0:cd:b6:34:aa:5e:c0:83:4e:67:1d:be:34:34:
         2b:75:f8:a6:cf:a8:66:f9:0c:d7:f4:6c:30:2b:ae:0e:2f:89:
         b6:af:3f:2b:26:c7:6b:e6:95:56:a6:8d:aa:cf:d7:80:70:aa:
         a4:b5:84:18:63:e6:ad:7d:d5:e5:c0:23:e8:13:ab:bc:1e:25:
         b3:f5:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:42:54 2025 by rpki-client