This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/6f421393-c698-3e4b-abfd-c83e9ab760dd.roa
File:                     6f421393-c698-3e4b-abfd-c83e9ab760dd.roa (raw, json)
Hash identifier:          wHD34sI5XGY3YwVxPasB+L6Wrz/GZYVnbh42mDYx+0U=
Subject key identifier:   C3:66:7A:54:77:B0:00:96:83:D8:06:C2:79:2E:79:8B:CA:A0:33:30
Certificate issuer:       /CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Certificate serial:       010D0C9F4328584C41767ACD4CEA678140F33E40
Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/6f421393-c698-3e4b-abfd-c83e9ab760dd.roa
Signing time:             Sun 21 Dec 2025 02:00:30 +0000
ROA not before:           Sun 21 Dec 2025 02:00:30 +0000
ROA not after:            Sat 21 Mar 2026 01:00:30 +0000
asID:                     6407
IP address blocks:        216.181.0.0/24 maxlen: 24
                          216.181.3.0/24 maxlen: 24
                          216.181.5.0/24 maxlen: 24
                          216.181.6.0/23 maxlen: 24
                          216.181.8.0/21 maxlen: 24
                          216.181.16.0/23 maxlen: 24
                          216.181.18.0/24 maxlen: 24
                          216.181.21.0/24 maxlen: 24
                          216.181.22.0/23 maxlen: 24
                          216.181.24.0/21 maxlen: 24
                          216.181.32.0/19 maxlen: 24
                          216.181.64.0/19 maxlen: 24
                          216.181.96.0/23 maxlen: 24
                          216.181.109.0/24 maxlen: 24
                          216.181.110.0/23 maxlen: 24
                          216.181.112.0/21 maxlen: 24
                          216.181.121.0/24 maxlen: 24
                          216.181.124.0/24 maxlen: 24
                          216.181.126.0/23 maxlen: 24
                          216.181.128.0/23 maxlen: 24
                          216.181.131.0/24 maxlen: 24
                          216.181.132.0/22 maxlen: 24
                          216.181.136.0/21 maxlen: 24
                          216.181.144.0/21 maxlen: 24
                          216.181.152.0/22 maxlen: 24
                          216.181.156.0/23 maxlen: 24
                          216.181.166.0/23 maxlen: 24
                          216.181.168.0/21 maxlen: 24
                          216.181.176.0/20 maxlen: 24
                          216.181.192.0/19 maxlen: 24
                          216.181.224.0/22 maxlen: 24
                          216.181.228.0/23 maxlen: 24
                          216.181.232.0/21 maxlen: 24
                          216.181.240.0/21 maxlen: 24
                          216.181.250.0/23 maxlen: 24
                          216.181.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:76:7a:cd:4c:ea:67:81:40:f3:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Validity
            Not Before: Dec 21 02:00:30 2025 GMT
            Not After : Mar 21 01:00:30 2026 GMT
        Subject: CN=067f87e6-3728-4fc6-bf0f-7150f3d42b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fa:e1:b0:65:95:db:4c:44:16:3f:be:d6:3d:
                    6e:49:cd:f8:51:ab:3e:22:3a:0b:54:6c:11:f1:bb:
                    e2:a0:55:7e:30:46:f9:52:91:25:93:73:1c:cb:b2:
                    08:de:b5:e4:24:79:58:ad:1b:8e:14:aa:f5:71:c1:
                    d9:b4:ff:bd:be:1c:e8:a1:12:3c:a4:50:e4:65:a1:
                    2b:ee:c4:f2:3e:5d:c1:0a:45:24:a1:5c:e2:6a:34:
                    65:d5:ab:44:44:e6:d8:47:b9:56:2e:44:18:e6:a6:
                    ad:d2:70:45:e4:84:4b:c2:eb:22:f1:25:c0:d4:64:
                    11:f7:42:04:b9:ad:96:5e:da:1a:77:0d:a4:13:3e:
                    09:82:ed:f6:4b:e6:53:20:22:f9:d7:49:f9:d4:9c:
                    25:11:47:78:21:c3:5e:15:13:87:e5:7e:3a:22:a3:
                    41:d8:e6:3e:fb:c9:d2:a4:f4:f8:17:0e:07:25:2f:
                    24:5f:45:6f:6c:d7:d0:b4:a5:b6:9d:d5:d5:3f:ee:
                    3d:42:a4:5f:c8:fb:96:69:98:32:f7:27:98:66:5e:
                    70:22:31:a3:19:be:3b:5f:9f:53:e4:93:78:9f:d1:
                    85:34:33:50:82:4a:5b:8e:ed:c5:81:67:83:18:00:
                    c5:0e:15:a3:23:da:6b:c7:5c:35:80:c8:56:fc:50:
                    fe:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:66:7A:54:77:B0:00:96:83:D8:06:C2:79:2E:79:8B:CA:A0:33:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/6f421393-c698-3e4b-abfd-c83e9ab760dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.0.0/24
                  216.181.3.0/24
                  216.181.5.0-216.181.18.255
                  216.181.21.0-216.181.97.255
                  216.181.109.0-216.181.119.255
                  216.181.121.0/24
                  216.181.124.0/24
                  216.181.126.0-216.181.129.255
                  216.181.131.0-216.181.157.255
                  216.181.166.0-216.181.229.255
                  216.181.232.0-216.181.247.255
                  216.181.250.0-216.181.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a7:8c:b7:95:8a:5a:fc:8e:d8:ed:e1:41:67:34:b5:82:f4:
         2a:e3:89:a1:4a:97:00:47:f3:ff:44:69:03:63:5b:08:5b:66:
         8e:8c:9e:90:3a:75:4b:66:0e:12:be:28:96:35:4a:81:80:b4:
         b5:cb:b3:0e:ea:4e:ec:87:a0:1b:82:56:6a:60:51:4f:76:84:
         d9:34:60:e8:72:ce:85:f7:ee:da:06:f3:9b:68:28:25:8d:73:
         e7:b9:32:a1:11:65:f7:1f:b7:93:0c:27:1a:13:90:46:e7:b8:
         4c:e7:8d:6c:0a:42:ff:98:26:9a:51:05:a5:59:46:4b:3a:f0:
         78:d5:25:2e:1e:d3:29:5f:98:f1:79:14:a5:80:67:00:79:07:
         c8:f0:c3:45:d7:21:cc:30:0d:7c:a0:df:ca:01:4f:5b:7f:e5:
         3d:e4:f8:80:c3:5f:12:54:1f:72:fd:a0:8a:70:16:4f:3d:25:
         90:50:72:59:c6:01:d7:47:19:bc:05:0b:eb:d1:5d:c2:2b:c0:
         97:1f:e8:e4:ee:79:bb:d4:fb:31:b5:20:d5:08:36:64:5e:14:
         a4:34:9c:0b:33:7d:f7:47:32:3f:b1:ba:4a:ba:9d:dd:f8:a1:
         12:30:0c:c4:fd:ea:c3:a1:e0:12:89:6e:c3:ff:92:66:d1:71:
         80:fe:91:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:18:52 2025 by rpki-client