This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa
File:                     9917fb74-f32d-3244-a63d-665f177752b1.roa (raw, json)
Hash identifier:          z3qeTvo3IjlB+smWkfa9HGl97I0YqQ1bN6KpkN5z0QQ=
Subject key identifier:   95:34:C9:7E:ED:D6:68:A0:5F:84:BB:8A:3E:14:03:87:04:3D:6B:86
Certificate issuer:       /CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
Certificate serial:       010D0C9F4328584C215B8EBA88F72BC721EAC160
Authority key identifier: F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa
Signing time:             Tue 09 Dec 2025 14:00:38 +0000
ROA not before:           Tue 09 Dec 2025 14:00:38 +0000
ROA not after:            Mon 09 Mar 2026 13:00:38 +0000
asID:                     14230
IP address blocks:        67.221.32.0/22 maxlen: 24
                          67.221.36.0/23 maxlen: 24
                          69.194.7.0/24 maxlen: 24
                          97.64.76.0/24 maxlen: 24
                          97.64.93.0/24 maxlen: 24
                          97.64.100.0/22 maxlen: 24
                          204.11.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:21:5b:8e:ba:88:f7:2b:c7:21:ea:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
        Validity
            Not Before: Dec  9 14:00:38 2025 GMT
            Not After : Mar  9 13:00:38 2026 GMT
        Subject: CN=640a1d91-37b9-4b56-b45e-ad53d5933e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:01:ff:36:f7:e8:04:08:4e:df:82:48:de:75:
                    d7:9b:30:6c:eb:96:34:7d:53:35:16:f5:7f:f8:fe:
                    62:0a:26:1f:b6:60:ee:dd:1d:9e:11:b1:47:73:d7:
                    62:35:78:f5:ba:ea:fe:2d:fe:b3:cf:ea:c4:2a:7c:
                    d7:aa:ad:ca:dd:00:b5:4d:7b:df:11:45:00:6d:95:
                    80:5a:ad:92:9d:1d:99:74:51:0a:ac:64:b7:1a:e2:
                    70:16:b9:4f:c2:f9:bb:b6:b1:ea:92:0d:81:6a:fb:
                    94:fb:89:cc:11:0b:34:95:21:c8:73:53:e8:0b:e6:
                    1f:b4:cc:34:13:b4:fc:e4:c4:26:c8:98:1e:f4:c7:
                    4a:0a:5b:47:cf:f8:ed:fc:f6:e9:4a:23:ba:10:bc:
                    07:6d:e9:f0:26:08:e7:14:47:85:bc:ca:2f:49:34:
                    b7:5f:78:70:9f:85:90:79:e8:f9:23:3f:b1:a5:2e:
                    6d:e8:da:ed:62:d0:43:08:41:74:31:09:05:e0:d6:
                    44:e8:8d:1c:35:32:dc:38:72:d9:c8:11:89:56:61:
                    e8:cf:6b:24:52:35:1e:d4:9e:bd:a7:52:b4:f3:c7:
                    44:2b:46:b7:11:4f:5d:0e:10:d2:b5:6b:a6:c3:04:
                    61:d3:7d:28:98:0e:3e:a0:4d:93:35:72:69:4a:22:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:34:C9:7E:ED:D6:68:A0:5F:84:BB:8A:3E:14:03:87:04:3D:6B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl

            X509v3 Authority Key Identifier:
                keyid:F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.32.0-67.221.37.255
                  69.194.7.0/24
                  97.64.76.0/24
                  97.64.93.0/24
                  97.64.100.0/22
                  204.11.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:9c:47:f7:58:38:27:f1:9d:f7:99:a7:df:67:b8:db:d6:63:
         be:f7:e4:ae:9d:6a:56:31:0c:88:58:96:b6:3b:38:ee:e6:eb:
         14:71:da:6a:a2:9d:db:21:d3:19:80:25:78:0b:ae:08:57:48:
         47:75:ed:fb:ef:bc:7f:75:34:97:8a:6f:a5:23:b8:14:b2:5a:
         74:f3:3a:41:79:a7:3f:2c:fc:0c:12:a0:b4:54:d8:e2:b8:1b:
         79:e2:7e:cc:79:84:60:87:49:70:55:92:5f:4c:cb:4a:51:7e:
         b6:be:14:da:53:17:4b:59:fb:d5:22:55:f6:38:24:70:8f:71:
         30:dd:e9:60:a9:e3:78:38:27:a8:08:2a:25:75:f5:f1:6b:23:
         b8:19:01:b8:7a:8e:0d:19:57:a3:39:2a:c5:e9:6e:78:5f:cd:
         56:2f:a6:06:72:93:fa:3f:5b:c3:3f:13:0f:8f:70:4c:a0:1f:
         c1:7a:52:26:b9:c4:91:c6:d6:95:84:93:78:9f:55:54:30:e5:
         0c:dd:dc:f0:8a:b2:f2:a1:d5:2b:0e:6d:3a:86:02:8d:0b:dc:
         1b:71:6c:00:a6:32:6d:cc:c2:73:b0:5c:27:81:b5:e6:b6:6e:
         cb:0b:b0:bb:47:02:b9:97:64:83:88:ff:ae:ce:3f:9e:3d:91:
         a7:5d:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:16:08 2025 by rpki-client