This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa
File:                     5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa (raw, json)
Hash identifier:          AJIP2Y7cknwVXZXJ4Cot8GMpicUUAFgr1BPJH7T5Ne0=
Subject key identifier:   86:2E:AA:BA:89:CF:9B:2D:C2:B7:4B:3F:5C:44:A9:0C:8B:27:9D:BF
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C42DC057C2BF6243C892EFF00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     12041
IP address blocks:        65.22.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:dc:05:7c:2b:f6:24:3c:89:2e:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=d2fc4a22-b42a-4d8c-b05c-40d8c9a10a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:49:f4:1b:d6:70:93:0a:91:50:90:16:bd:cd:
                    f6:b2:83:de:4c:49:b2:d2:7d:2b:ce:67:3c:a1:a5:
                    f8:aa:fd:a6:e5:a9:c4:37:ee:7e:07:f9:d3:93:11:
                    3b:5d:29:19:02:ce:ba:9f:95:e2:74:80:eb:cd:3b:
                    27:d3:52:77:1c:ab:4a:72:ff:d6:00:e2:60:97:93:
                    84:8a:8f:38:ef:98:24:08:f3:45:a7:35:a1:26:e3:
                    07:c8:cd:7d:e6:27:88:a8:0a:87:68:3b:73:18:97:
                    5f:77:08:29:f7:4e:ae:1b:1b:eb:b5:6c:27:22:a7:
                    44:89:3f:18:cf:76:23:35:2d:b4:8f:21:47:13:2a:
                    87:b8:fd:83:75:74:e1:ae:86:0c:63:38:83:42:83:
                    9f:e9:11:a4:de:80:45:83:59:2c:d4:7d:5b:3b:53:
                    5a:45:38:9d:67:81:2b:32:4d:08:22:e3:13:b1:6c:
                    8b:42:2e:cc:e8:5b:6d:af:58:47:34:69:4a:d7:66:
                    20:23:e3:26:bd:b3:fb:65:9c:20:92:3c:89:53:b3:
                    70:e2:21:22:6b:66:40:b0:ed:02:a0:69:ea:f0:96:
                    1b:23:c6:12:a1:ca:e5:88:02:90:00:c7:4d:c1:df:
                    44:12:3e:1b:31:7c:86:2b:4f:06:99:47:57:17:d7:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2E:AA:BA:89:CF:9B:2D:C2:B7:4B:3F:5C:44:A9:0C:8B:27:9D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9a:d2:ab:d3:cf:28:a4:05:84:5e:86:a5:6e:f1:04:15:d7:
         e5:32:c7:9b:21:6f:8e:f9:e2:c5:db:d5:4e:39:fc:e0:63:f5:
         5c:37:98:6a:f4:60:16:48:b6:56:29:d4:a1:8b:0e:58:11:ea:
         f2:3c:95:f4:f3:e0:04:94:6f:5f:33:8b:b7:ed:5c:cf:b1:ad:
         bc:88:e8:48:50:ff:aa:74:2c:40:7e:29:25:7c:5a:01:40:50:
         b8:59:05:fa:8e:b8:a5:89:6c:5d:3b:e8:b2:7c:1c:22:24:e7:
         25:82:81:2b:85:50:47:b8:03:a0:65:12:f7:ce:16:5a:63:b4:
         99:c5:98:2c:3c:be:8c:6e:a3:30:ca:bc:30:e5:96:b3:50:83:
         03:fb:2b:af:cb:ea:bb:ad:ce:9e:1e:71:62:5f:ec:3e:eb:aa:
         42:de:3c:70:62:65:e8:78:df:db:ae:22:02:3c:f9:29:5f:2a:
         7b:5e:02:02:ee:de:fb:d5:69:13:93:e3:e3:d2:86:31:3f:55:
         39:29:98:f5:a6:aa:8d:bd:a6:b8:ad:d4:51:82:d7:16:0f:a9:
         21:fb:59:47:1e:a4:6d:f5:29:7b:3d:0d:54:4d:cd:de:89:ed:
         7f:ac:53:53:28:7b:e9:d4:10:d6:d8:71:bf:a2:a4:94:f7:71:
         6a:8e:ad:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:38:55 2025 by rpki-client