This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa
File:                     dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa (raw, json)
Hash identifier:          TSuJjbwJv8RKDZlqwiU/mq3JkCgg+0LNej7pC9M8axw=
Subject key identifier:   AA:7E:DF:75:98:36:E9:BF:AB:ED:1B:D0:A7:03:9B:64:6E:A2:55:CC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C42DC077703FE54FF26AFA1E0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     12041
IP address blocks:        65.22.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:dc:07:77:03:fe:54:ff:26:af:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=47269e76-2fa4-43c8-ae95-021480a4c43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:99:5d:1d:cd:77:bd:c5:ff:9b:96:00:25:f0:
                    59:32:3b:f0:af:84:4f:20:08:7c:6e:21:01:2c:31:
                    a3:4f:ca:d8:b5:44:1a:50:53:cb:c4:c4:3f:4c:3e:
                    7f:dc:58:e8:16:af:61:1b:e5:b6:eb:e9:d7:d6:42:
                    c6:91:61:89:6c:b0:dd:2d:d9:78:9f:fa:03:6a:9f:
                    cd:f2:43:e1:90:f2:06:03:0e:47:b7:65:23:7b:fa:
                    70:56:47:29:dd:74:a1:b7:f7:41:7f:ec:d2:89:70:
                    5f:4f:71:76:bc:88:fc:92:ae:5c:47:b1:cd:58:9c:
                    99:9f:b6:83:45:b5:21:0f:cc:6a:94:20:f2:9a:51:
                    31:b9:c8:b0:54:c1:79:70:15:e7:cc:c1:0c:5f:cf:
                    ac:2e:70:31:31:70:9f:79:d0:20:20:f9:82:49:a4:
                    c3:55:6e:63:0e:c0:73:69:b2:20:67:ef:be:54:e2:
                    9e:f5:b5:b7:ad:10:0a:dc:55:5a:6d:16:7b:01:52:
                    1b:2f:b0:0a:ec:f9:cb:02:27:b8:4e:03:88:68:22:
                    7e:5b:2c:68:94:96:0b:46:9b:d6:3d:2d:db:c4:65:
                    9d:09:68:7c:3d:a5:29:57:be:9d:db:f6:0c:39:8e:
                    13:28:df:a1:8c:50:30:7f:69:7c:57:c6:59:e5:70:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:DF:75:98:36:E9:BF:AB:ED:1B:D0:A7:03:9B:64:6E:A2:55:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:95:35:88:56:ac:8b:35:3f:1d:e5:ba:b8:fa:c1:5d:96:a1:
         13:77:58:0b:d8:70:b7:4c:37:02:36:b8:45:49:dd:e3:13:90:
         7e:c4:2b:5e:8b:79:81:6f:7d:a2:77:27:95:ec:ae:3c:b0:d6:
         a4:f9:58:1c:cf:8f:c3:95:af:28:76:0f:e0:f0:40:f8:5e:8f:
         e0:db:6f:bd:e6:f6:65:b1:ad:29:72:d4:1f:27:82:2d:d7:32:
         1d:e9:db:7d:58:b3:cb:f6:d4:5d:95:98:32:78:68:8c:aa:1e:
         67:25:14:90:5a:8f:56:f9:9e:74:04:dd:66:8a:d2:af:e3:0e:
         81:7d:6c:72:16:c7:f8:63:3d:24:77:cf:a7:8e:a1:c9:44:37:
         36:24:e0:48:0e:d7:19:69:af:dd:2f:08:70:1f:d1:a9:35:55:
         b3:ed:31:0e:5e:80:95:16:70:67:14:a3:4e:55:18:bf:e8:b9:
         58:2d:10:49:19:8f:e1:3a:36:1e:79:84:fd:2a:67:38:17:c8:
         10:a4:b0:5f:a0:09:59:57:74:7f:2f:3a:0e:79:16:39:da:3d:
         40:3e:b5:e0:e0:7b:bf:8a:f2:7c:8d:b3:2e:36:a3:ce:a1:d4:
         e9:8c:31:35:e4:05:9f:b1:85:1a:90:92:71:44:47:b5:e9:0b:
         7b:e0:aa:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3Ad3A/5U/yavoeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk
NDcyNjllNzYtMmZhNC00M2M4LWFlOTUtMDIxNDgwYTRjNDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpldHc13vcX/m5YAJfBZMjvwr4RPIAh8biEB
LDGjT8rYtUQaUFPLxMQ/TD5/3FjoFq9hG+W26+nX1kLGkWGJbLDdLdl4n/oDap/N
8kPhkPIGAw5Ht2Uje/pwVkcp3XSht/dBf+zSiXBfT3F2vIj8kq5cR7HNWJyZn7aD
RbUhD8xqlCDymlExuciwVMF5cBXnzMEMX8+sLnAxMXCfedAgIPmCSaTDVW5jDsBz
abIgZ+++VOKe9bW3rRAK3FVabRZ7AVIbL7AK7PnLAie4TgOIaCJ+WyxolJYLRpvW
PS3bxGWdCWh8PaUpV76d2/YMOY4TKN+hjFAwf2l8V8ZZ5XA+pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKp+33WYNum/q+0b0KcDm2RuolXMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGZmOTliYTgtY2IxZi0z
NDI3LWE4NDEtNmExMzYyY2QyNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRacMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCVNYhWrIs1Px3lurj6wV2WoRN3WAvYcLdMNwI2uEVJ3eMTkH7EK16L
eYFvfaJ3J5Xsrjyw1qT5WBzPj8OVryh2D+DwQPhej+Dbb73m9mWxrSly1B8ngi3X
Mh3p231Ys8v21F2VmDJ4aIyqHmclFJBaj1b5nnQE3WaK0q/jDoF9bHIWx/hjPSR3
z6eOoclENzYk4EgO1xlpr90vCHAf0ak1VbPtMQ5egJUWcGcUo05VGL/ouVgtEEkZ
j+E6Nh55hP0qZzgXyBCksF+gCVlXdH8vOg55FjnaPUA+teDge7+K8nyNsy42o86h
1OmMMTXkBZ+xhRqQknFER7XpC3vgqpk=
-----END CERTIFICATE-----
Generated at Sun Dec 21 23:17:40 2025 by rpki-client