This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa
File:                     ddc8d858-035c-3840-a15e-407ffbe6818e.roa (raw, json)
Hash identifier:          bQ+ezelkT17k2wJPFFTfES2fFQXMJQ3Zq0EB2Hp9cp4=
Subject key identifier:   91:21:30:70:98:63:E7:8B:84:83:A2:C6:76:DE:9A:C4:70:79:F1:AC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C42DC0B86C8425F53EED67440
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     12041
IP address blocks:        65.22.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:dc:0b:86:c8:42:5f:53:ee:d6:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=c8253324-6762-4bd2-90c8-96e8bce21bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:2f:b4:fd:c4:de:50:b8:0a:e3:bb:6c:a6:
                    ac:3f:4c:83:72:bc:2c:fc:da:b6:d9:96:a8:bb:26:
                    94:61:b9:28:d9:d4:48:49:f3:c7:c3:48:07:37:c0:
                    3b:78:51:17:d3:a3:11:4d:af:e0:3f:4c:42:79:83:
                    a5:a6:94:fb:6e:97:3f:97:19:e6:57:b4:d4:14:cd:
                    b6:71:cd:ee:0c:8c:b6:15:4e:d7:e4:76:e0:49:03:
                    5c:e3:30:2f:a1:5e:d2:87:43:e5:21:5a:f0:66:6e:
                    86:f5:84:76:01:10:d4:b1:82:9b:74:89:13:1a:f7:
                    05:5b:94:83:52:9b:c8:14:cd:16:54:1e:07:35:7c:
                    48:26:7b:99:4b:5b:4b:0e:b5:c1:c2:e9:3a:2e:d2:
                    9c:27:3f:3b:8d:1a:8e:4a:2a:87:85:c1:d8:6c:a8:
                    24:8a:eb:6d:5e:75:45:86:27:fe:48:71:3a:50:16:
                    06:40:51:c6:6c:a2:16:96:91:f3:1f:4b:b0:1b:1b:
                    eb:2a:86:fd:7c:59:1f:33:dc:25:07:54:e7:c8:4f:
                    61:ba:49:e6:9e:bf:d3:2e:3c:99:a9:9c:b8:cf:cf:
                    3c:60:4f:8f:10:56:a2:b5:25:a4:ed:a9:f0:9d:06:
                    2b:63:40:62:09:81:e2:d3:27:9f:c3:36:91:ba:fb:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:21:30:70:98:63:E7:8B:84:83:A2:C6:76:DE:9A:C4:70:79:F1:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:fc:22:33:ff:91:8b:26:70:9b:f9:29:90:05:6f:11:52:c8:
         41:05:a2:00:f6:97:cf:27:c1:8b:32:26:c7:d0:2a:91:aa:5a:
         8f:09:45:58:0c:8e:0c:85:ce:84:7a:7e:3a:69:36:8e:3b:b2:
         8a:aa:0c:df:37:ab:32:9e:9e:10:04:ba:78:26:7b:20:42:08:
         6c:6f:62:e4:1b:73:f6:a0:01:ed:89:b2:61:ea:4d:d5:9e:2f:
         9d:53:46:76:86:03:80:2f:eb:60:13:70:5d:82:2f:8d:4e:16:
         38:c5:72:59:a9:b8:50:ad:6e:7d:b7:59:41:77:94:4d:68:cc:
         18:f9:cb:0b:d0:6b:a2:84:81:aa:06:31:e5:8f:73:f2:f0:46:
         ec:7f:28:23:40:04:1f:a9:45:4d:22:c8:00:43:1f:09:61:d8:
         ef:a0:f3:cb:b7:83:df:71:b6:bc:63:93:ab:dc:4c:ee:e7:99:
         1e:89:e5:c1:50:7e:d5:cd:4b:93:d8:c9:3b:9e:7f:2a:68:49:
         f7:4f:44:45:d8:16:96:c3:98:15:f2:7a:2a:eb:fd:0c:cd:b7:
         17:f3:3e:5b:be:92:87:52:d3:2a:92:79:56:bb:d9:a3:f9:de:
         f8:7e:18:cf:78:00:b8:16:7e:5e:16:87:d9:98:fe:fb:5d:e8:
         26:c3:c0:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3AuGyEJfU+7WdEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk
YzgyNTMzMjQtNjc2Mi00YmQyLTkwYzgtOTZlOGJjZTIxYmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNYvtP3E3lC4CuO7bKasP0yDcrws/Nq22Zao
uyaUYbko2dRISfPHw0gHN8A7eFEX06MRTa/gP0xCeYOlppT7bpc/lxnmV7TUFM22
cc3uDIy2FU7X5HbgSQNc4zAvoV7Sh0PlIVrwZm6G9YR2ARDUsYKbdIkTGvcFW5SD
UpvIFM0WVB4HNXxIJnuZS1tLDrXBwuk6LtKcJz87jRqOSiqHhcHYbKgkiuttXnVF
hif+SHE6UBYGQFHGbKIWlpHzH0uwGxvrKob9fFkfM9wlB1TnyE9huknmnr/TLjyZ
qZy4z888YE+PEFaitSWk7anwnQYrY0BiCYHi0yefwzaRuvvnlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJEhMHCYY+eLhIOixnbemsRwefGsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGRjOGQ4NTgtMDM1Yy0z
ODQwLWExNWUtNDA3ZmZiZTY4MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJT8IjP/kYsmcJv5KZAFbxFSyEEFogD2l88nwYsyJsfQKpGqWo8JRVgM
jgyFzoR6fjppNo47soqqDN83qzKenhAEungmeyBCCGxvYuQbc/agAe2JsmHqTdWe
L51TRnaGA4Av62ATcF2CL41OFjjFclmpuFCtbn23WUF3lE1ozBj5ywvQa6KEgaoG
MeWPc/LwRux/KCNABB+pRU0iyABDHwlh2O+g88u3g99xtrxjk6vcTO7nmR6J5cFQ
ftXNS5PYyTuefypoSfdPREXYFpbDmBXyeirr/QzNtxfzPlu+kodS0yqSeVa72aP5
3vh+GM94ALgWfl4Wh9mY/vtd6CbDwLw=
-----END CERTIFICATE-----
Generated at Mon Dec 22 07:54:19 2025 by rpki-client