This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa
File:                     8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa (raw, json)
Hash identifier:          7TgVSUnePvUfv6DYuK8mTjz1TVwNlT2i1OXuv1Pa7e4=
Subject key identifier:   8B:0B:61:6A:95:D7:E0:3F:11:82:21:38:4A:C9:AA:26:1B:9D:FD:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584C41766648E07D8C8D25E737C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa
Signing time:             Sun 21 Dec 2025 02:00:30 +0000
ROA not before:           Sun 21 Dec 2025 02:00:30 +0000
ROA not after:            Sat 21 Mar 2026 01:00:30 +0000
asID:                     6167
IP address blocks:        174.218.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:76:66:48:e0:7d:8c:8d:25:e7:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 21 02:00:30 2025 GMT
            Not After : Mar 21 01:00:30 2026 GMT
        Subject: CN=a17b7470-c4c7-49c1-b647-a1ccc7d67886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0b:7e:ab:a4:53:3c:d1:95:1a:03:06:38:28:
                    96:f1:e5:2c:54:0b:35:29:09:43:17:48:2e:02:02:
                    a5:96:b4:f4:87:99:fb:2b:6a:a0:1b:56:cc:0e:6e:
                    80:9b:77:d8:c2:a1:f2:fa:2f:03:f0:18:8a:7e:04:
                    86:27:05:41:9b:78:8a:be:48:cb:2f:7c:51:dd:c8:
                    f7:cd:52:ba:ff:6e:1d:4e:0c:3d:cf:e0:d6:df:e6:
                    81:35:9b:f8:73:a2:6d:bd:1a:e8:94:88:11:bd:92:
                    d0:ef:6d:1d:71:68:6e:da:28:69:3b:38:15:90:1b:
                    db:34:58:35:7c:12:fe:9d:92:7d:3a:99:4d:e9:ca:
                    08:6c:97:67:01:af:f5:7a:21:89:6e:16:03:e4:b4:
                    3e:cb:d5:6a:4b:af:53:6f:61:01:6d:62:4e:31:af:
                    1f:85:30:8b:ff:6c:57:7a:d3:75:63:02:59:ac:75:
                    1e:5a:bc:32:8e:6f:d2:33:08:25:92:12:d0:23:4f:
                    35:fa:be:d4:1e:ce:fb:33:7f:e0:93:9b:e5:6b:16:
                    96:12:02:01:0d:7e:c3:17:87:7d:78:91:3a:84:75:
                    63:36:cd:00:0c:c8:15:54:a7:6e:79:a6:1c:20:65:
                    e8:d4:12:8a:a6:7b:15:ac:e6:a1:0d:21:8c:14:41:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0B:61:6A:95:D7:E0:3F:11:82:21:38:4A:C9:AA:26:1B:9D:FD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:02:4f:b9:f4:39:6c:6c:c1:8c:63:13:6f:fe:ff:c0:e7:d6:
         96:40:05:4b:93:b1:20:e7:8c:0a:2c:f8:ac:48:b1:64:6c:93:
         b3:db:0c:99:b0:2f:0e:86:72:76:ba:30:99:1d:ed:08:09:e7:
         e1:79:09:cc:98:eb:8f:ee:a5:a6:3d:8f:e6:f1:a7:af:ae:f3:
         06:25:65:93:55:1d:df:0a:1e:e2:31:72:88:49:9b:65:43:43:
         24:09:1e:31:ee:78:75:f3:55:43:fb:90:3d:56:d4:19:05:5c:
         e2:8c:d2:95:fb:6d:17:56:f6:b3:5d:20:6e:6f:d6:12:b3:e5:
         90:26:5f:99:4b:2c:88:23:35:b2:fb:3d:e3:be:de:6b:ea:a0:
         f2:98:05:08:38:ea:a2:e6:19:0a:ad:eb:7f:d4:e8:22:41:4c:
         da:0c:84:7c:aa:0e:75:64:b6:59:81:f9:71:19:05:c0:f2:51:
         e7:6d:b2:05:50:25:25:4f:ee:e6:ae:e4:06:67:1b:69:11:00:
         3d:ec:8a:8b:a1:11:e2:0b:da:91:4b:be:c0:a3:77:93:ad:e1:
         f0:d2:f4:73:24:d6:db:30:2d:b2:40:33:e8:48:87:1b:ba:39:
         39:80:02:a4:e5:2c:9f:bf:7e:7e:9e:40:2c:71:80:8b:6d:f6:
         bf:c7:5a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 19:41:59 2025 by rpki-client