This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c04fb9-12c3-3f06-81b7-081475aebdb1.roa
File:                     40c04fb9-12c3-3f06-81b7-081475aebdb1.roa (raw, json)
Hash identifier:          47gvkcdduIfSSxTXJZSzLQKFbxoO+cBuosabmZg0BQA=
Subject key identifier:   BF:3E:26:C8:7A:64:B0:FE:71:2E:32:A9:08:2E:32:6B:83:51:F3:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584C4176672134BA3169E9ACFC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c04fb9-12c3-3f06-81b7-081475aebdb1.roa
Signing time:             Sun 21 Dec 2025 02:00:30 +0000
ROA not before:           Sun 21 Dec 2025 02:00:30 +0000
ROA not after:            Sat 21 Mar 2026 01:00:30 +0000
asID:                     6167
IP address blocks:        174.218.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:76:67:21:34:ba:31:69:e9:ac:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 21 02:00:30 2025 GMT
            Not After : Mar 21 01:00:30 2026 GMT
        Subject: CN=281f195c-d6b7-4f7d-be88-951db4cd9ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c3:da:cf:fa:e0:f8:b8:60:7c:31:cc:0c:85:
                    d7:44:03:50:4c:f8:7f:e7:30:d7:ea:59:98:5f:3b:
                    da:60:10:0f:22:59:22:ca:68:d6:f7:fb:7d:23:6f:
                    91:46:89:89:aa:26:49:d6:4b:76:31:51:e3:34:c7:
                    b7:2f:f3:53:fe:6e:e8:c2:bb:78:85:32:73:32:58:
                    a7:71:11:2a:3c:f3:ce:7f:3f:4a:fb:c9:63:8e:c7:
                    b7:f4:71:25:35:13:59:b4:6d:f7:dd:07:c3:35:31:
                    45:a0:23:ee:09:60:17:87:7e:81:a9:e3:e5:26:bd:
                    cb:28:90:26:d1:eb:29:3a:47:21:e9:b1:d4:f6:06:
                    0b:e3:0b:9f:82:24:8c:2a:f2:c7:38:67:39:7a:e6:
                    8a:52:2d:1a:a4:84:b1:f8:7c:ab:b5:53:65:74:12:
                    03:08:51:f8:70:bd:9c:a6:38:0d:c7:5e:e7:4a:4f:
                    57:e1:44:62:3a:9d:f0:73:df:b3:49:fa:b5:c0:cc:
                    c7:8e:cc:b1:f2:a8:c0:3a:23:89:8e:16:20:bb:6a:
                    af:bc:a0:b0:79:10:43:a8:bf:f2:05:0b:4b:77:a0:
                    bf:b6:91:ee:38:ba:7c:40:0c:90:d1:fc:aa:ad:c3:
                    45:01:e5:27:c0:f9:84:36:5a:93:a9:ef:08:90:a6:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3E:26:C8:7A:64:B0:FE:71:2E:32:A9:08:2E:32:6B:83:51:F3:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c04fb9-12c3-3f06-81b7-081475aebdb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:82:63:fa:0b:ce:2f:ab:10:ef:41:a8:a9:34:d5:8f:1b:0b:
         0e:9d:9c:13:72:d6:50:61:f0:88:cb:43:24:d6:12:07:51:d6:
         4b:24:39:28:21:ae:5e:1d:51:7d:3d:3c:16:4f:b2:58:1b:cd:
         96:7a:aa:6b:3b:90:7c:82:10:25:15:26:3f:a5:03:01:26:14:
         99:16:73:74:55:e2:9c:4f:a2:21:c4:b3:95:87:96:9a:1a:f0:
         89:f1:ea:39:ce:ea:da:6d:06:e4:31:14:51:78:20:f7:ff:d2:
         ff:34:af:ce:a2:18:6f:b2:3f:83:f2:6d:4b:f1:09:83:09:37:
         18:c3:04:2b:97:21:e1:ed:ae:4a:fa:d7:49:dd:25:d4:6a:19:
         b8:ea:bf:59:82:95:97:09:14:84:0b:ba:40:cc:15:78:0a:19:
         3e:e6:57:bd:cf:1b:3a:d8:13:db:e5:e9:fc:05:36:fd:86:3b:
         bd:83:b6:5a:76:96:bc:8c:33:18:f5:70:39:74:4e:32:f9:e9:
         32:65:3b:f7:37:b8:d2:e5:32:bd:41:bf:50:79:9b:c1:66:e0:
         bc:30:e3:71:56:36:9c:32:dc:ce:cf:61:52:81:6f:fe:25:4c:
         16:f8:42:4c:52:a2:67:2f:70:fe:b0:17:28:c8:27:96:de:c8:
         22:8b:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:08:09 2025 by rpki-client