This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          S3g+3porBF7XXDcacQZ1eFifivpsZatDGy9RRDn0nks=
Subject key identifier:   38:F8:57:84:7B:F2:25:10:45:9D:99:60:6E:D5:33:30:D7:74:DE:67
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       41CDEBCEA02C91F51D6960F990402891408094BB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
Signing time:             Tue 02 Dec 2025 06:40:38 +0000
ROA not before:           Tue 02 Dec 2025 06:35:38 +0000
ROA not after:            Tue 01 Dec 2026 06:40:38 +0000
asID:                     20473
IP address blocks:        23.226.129.0/24 maxlen: 24
                          23.226.140.0/23 maxlen: 24
                          23.226.143.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          66.63.167.0/24 maxlen: 24
                          72.11.136.0/23 maxlen: 24
                          96.47.228.0/24 maxlen: 24
                          96.47.231.0/24 maxlen: 24
                          96.47.236.0/23 maxlen: 24
                          104.129.44.0/24 maxlen: 24
                          104.129.55.0/24 maxlen: 24
                          107.150.28.0/23 maxlen: 24
                          167.160.163.0/24 maxlen: 24
                          167.160.172.0/24 maxlen: 24
                          167.160.174.0/23 maxlen: 24
                          173.44.37.0/24 maxlen: 24
                          173.44.42.0/23 maxlen: 24
                          173.44.45.0/24 maxlen: 24
                          173.44.47.0/24 maxlen: 24
                          173.44.48.0/22 maxlen: 24
                          173.44.52.0/23 maxlen: 24
                          173.44.54.0/24 maxlen: 24
                          173.44.56.0/23 maxlen: 24
                          173.44.59.0/24 maxlen: 24
                          173.44.63.0/24 maxlen: 24
                          216.97.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 21:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cd:eb:ce:a0:2c:91:f5:1d:69:60:f9:90:40:28:91:40:80:94:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  2 06:35:38 2025 GMT
            Not After : Dec  1 06:40:38 2026 GMT
        Subject: CN=38F857847BF22510459D99606ED53330D774DE67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:81:59:c3:69:88:2f:5d:87:e3:f0:26:0e:00:
                    8c:1a:b5:75:23:61:b7:dc:74:ec:a4:14:b1:25:30:
                    7e:97:83:5d:f5:92:bf:69:9f:28:d4:1e:3d:92:ef:
                    49:02:26:9e:73:33:2d:f6:ce:77:2f:99:4e:3c:95:
                    88:9f:ad:3b:6e:a3:4b:fc:a0:a3:39:ca:a5:2f:99:
                    62:85:74:25:e0:5b:fd:d1:9f:da:9c:02:47:40:77:
                    66:b2:6a:e7:6a:2f:ae:90:6f:bb:1e:97:e0:72:d3:
                    5a:91:35:5b:d7:0b:fb:97:16:a6:8c:e7:10:c9:2a:
                    52:a0:08:89:a6:3b:b7:ba:26:43:a8:84:df:f3:a9:
                    14:73:91:34:ec:48:12:39:c2:cf:0a:ed:14:87:f0:
                    ad:f8:cd:df:15:44:e0:a2:10:63:d3:a5:7f:22:28:
                    5f:e4:3e:38:24:e7:d7:a9:7e:01:27:5b:7c:95:e8:
                    73:df:31:8f:c1:5a:d1:63:5b:78:15:25:cb:13:14:
                    c6:09:e7:f9:08:e8:d3:f0:b4:8f:8c:fd:b1:d3:c1:
                    a3:ea:c3:a7:54:b6:b1:98:1b:39:0f:0d:7a:96:41:
                    b2:4d:63:f6:29:f3:f1:94:b7:16:b1:1f:2f:27:ae:
                    a4:88:71:32:94:bf:1c:39:69:0d:88:3d:61:3a:bd:
                    23:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F8:57:84:7B:F2:25:10:45:9D:99:60:6E:D5:33:30:D7:74:DE:67
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.129.0/24
                  23.226.140.0/23
                  23.226.143.0/24
                  64.50.166.0/24
                  66.63.167.0/24
                  72.11.136.0/23
                  96.47.228.0/24
                  96.47.231.0/24
                  96.47.236.0/23
                  104.129.44.0/24
                  104.129.55.0/24
                  107.150.28.0/23
                  167.160.163.0/24
                  167.160.172.0/24
                  167.160.174.0/23
                  173.44.37.0/24
                  173.44.42.0/23
                  173.44.45.0/24
                  173.44.47.0-173.44.54.255
                  173.44.56.0/23
                  173.44.59.0/24
                  173.44.63.0/24
                  216.97.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:61:dc:df:eb:64:15:0f:9c:cb:2e:22:c1:05:69:51:63:26:
         83:48:d8:79:80:35:b5:62:cc:31:53:20:3f:5d:94:86:61:c0:
         14:6c:73:d0:1e:20:07:d6:98:29:c9:df:da:9c:be:b6:59:81:
         ef:43:a7:50:2a:83:65:e0:68:71:a1:90:e6:29:ab:ab:e8:4a:
         58:fd:db:74:6c:5f:b1:91:e2:00:3a:c5:29:9b:d9:85:d0:39:
         14:b1:c0:55:de:69:b7:58:bf:73:c5:c7:77:26:c3:4a:01:41:
         8d:e4:e9:b2:b9:21:99:a6:fd:9d:f6:3b:ed:46:2b:80:0e:77:
         ef:00:c0:b2:7f:fa:65:ee:2a:e5:24:cb:73:b7:c2:9f:fc:1d:
         37:b7:67:e8:07:66:8a:47:7a:58:00:f0:c9:aa:83:e7:45:14:
         01:1e:a4:e4:60:14:f5:43:d5:2c:d4:ff:72:a4:06:64:60:98:
         a1:75:81:37:fb:9c:80:b8:25:00:ca:d3:3d:11:71:48:08:70:
         cd:54:bd:7c:6a:04:a2:98:38:47:cd:ae:de:3b:0a:17:ab:e6:
         79:54:16:72:2e:51:f0:1e:ee:36:46:58:90:a3:a5:3d:07:50:
         f3:0d:08:88:73:21:fa:26:b7:b6:e9:85:e7:9d:95:40:ee:78:
         8b:db:2e:7c
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUQc3rzqAskfUdaWD5kEAokUCAlLswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMjAyMDYzNTM4WhcNMjYxMjAxMDY0MDM4
WjAzMTEwLwYDVQQDEygzOEY4NTc4NDdCRjIyNTEwNDU5RDk5NjA2RUQ1MzMzMEQ3
NzRERTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64FZw2mIL12H
4/AmDgCMGrV1I2G33HTspBSxJTB+l4Nd9ZK/aZ8o1B49ku9JAiaeczMt9s53L5lO
PJWIn607bqNL/KCjOcqlL5lihXQl4Fv90Z/anAJHQHdmsmrnai+ukG+7HpfgctNa
kTVb1wv7lxamjOcQySpSoAiJpju3uiZDqITf86kUc5E07EgSOcLPCu0Uh/Ct+M3f
FUTgohBj06V/Iihf5D44JOfXqX4BJ1t8lehz3zGPwVrRY1t4FSXLExTGCef5COjT
8LSPjP2x08Gj6sOnVLaxmBs5Dw16lkGyTWP2KfPxlLcWsR8vJ66kiHEylL8cOWkN
iD1hOr0juwIDAQABo4IDDzCCAwswHQYDVR0OBBYEFDj4V4R78iUQRZ2ZYG7VMzDX
dN5nMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGv
BggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAAX4oEDBAEX4owDBAAX4o8D
BABAMqYDBABCP6cDBAFIC4gDBABgL+QDBABgL+cDBAFgL+wDBABogSwDBABogTcD
BAFrlhwDBACnoKMDBACnoKwDBAGnoK4DBACtLCUDBAGtLCoDBACtLC0wDAMEAK0s
LwMEAK0sNgMEAa0sOAMEAK0sOwMEAK0sPwMEANhh4TANBgkqhkiG9w0BAQsFAAOC
AQEArmHc3+tkFQ+cyy4iwQVpUWMmg0jYeYA1tWLMMVMgP12UhmHAFGxz0B4gB9aY
Kcnf2py+tlmB70OnUCqDZeBocaGQ5imrq+hKWP3bdGxfsZHiADrFKZvZhdA5FLHA
Vd5pt1i/c8XHdybDSgFBjeTpsrkhmab9nfY77UYrgA537wDAsn/6Ze4q5STLc7fC
n/wdN7dn6Admikd6WADwyaqD50UUAR6k5GAU9UPVLNT/cqQGZGCYoXWBN/ucgLgl
AMrTPRFxSAhwzVS9fGoEopg4R82u3jsKF6vmeVQWci5R8B7uNkZYkKOlPQdQ8w0I
iHMh+ia3tumF552VQO54i9sufA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:53:21 2025 by rpki-client