This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          nPo3qgv7ug+iFbQ8gtCV1Uv0k466aVoW+t+TN/bjO1k=
Subject key identifier:   11:DC:78:C8:6F:CD:6F:FA:AC:E8:D9:60:33:9D:96:3F:7A:8F:02:39
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       593C89BAF171AC8B60256CA31099EA6F4E8D22D9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
Signing time:             Mon 05 Jan 2026 00:06:54 +0000
ROA not before:           Mon 05 Jan 2026 00:01:54 +0000
ROA not after:            Mon 04 Jan 2027 00:06:54 +0000
asID:                     20473
IP address blocks:        23.226.129.0/24 maxlen: 24
                          23.226.140.0/23 maxlen: 24
                          23.226.143.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          66.63.167.0/24 maxlen: 24
                          72.11.136.0/23 maxlen: 24
                          96.47.228.0/24 maxlen: 24
                          96.47.231.0/24 maxlen: 24
                          96.47.236.0/23 maxlen: 24
                          104.129.44.0/24 maxlen: 24
                          104.129.55.0/24 maxlen: 24
                          107.150.28.0/23 maxlen: 24
                          167.160.163.0/24 maxlen: 24
                          167.160.172.0/24 maxlen: 24
                          167.160.174.0/23 maxlen: 24
                          173.44.37.0/24 maxlen: 24
                          173.44.42.0/23 maxlen: 24
                          173.44.45.0/24 maxlen: 24
                          173.44.47.0/24 maxlen: 24
                          173.44.48.0/22 maxlen: 24
                          173.44.52.0/23 maxlen: 24
                          173.44.54.0/24 maxlen: 24
                          173.44.56.0/23 maxlen: 24
                          173.44.59.0/24 maxlen: 24
                          173.44.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3c:89:ba:f1:71:ac:8b:60:25:6c:a3:10:99:ea:6f:4e:8d:22:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan  5 00:01:54 2026 GMT
            Not After : Jan  4 00:06:54 2027 GMT
        Subject: CN=11DC78C86FCD6FFAACE8D960339D963F7A8F0239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:1d:53:67:98:c9:20:37:d9:e9:79:b9:28:
                    d4:20:a7:09:5c:3e:1a:cc:5a:50:d4:4d:a3:79:3e:
                    c9:50:82:1d:7c:7a:8f:02:7a:34:ab:6b:46:0f:fd:
                    55:eb:7a:17:ad:f3:ef:d5:f1:0f:c4:d4:bc:fd:90:
                    67:63:af:6f:4a:8b:81:51:5c:03:20:94:c7:fe:b3:
                    fc:cb:1b:26:96:f2:42:77:09:f6:91:78:41:ba:6b:
                    fd:ae:23:2b:4f:25:5c:e1:5a:d1:b2:73:bc:92:28:
                    e7:c6:1c:23:78:ab:ca:ab:40:16:fd:8b:ae:2f:3e:
                    d4:13:c0:54:0b:4d:83:38:ef:f7:46:c9:c9:0b:f3:
                    ff:6b:05:ee:35:98:3e:f3:de:07:80:f9:4d:1a:d9:
                    96:7b:94:a1:c9:c6:e2:c8:72:fb:03:0b:61:5d:09:
                    df:46:3b:76:47:4d:ed:cc:3a:7f:97:89:f3:a9:d7:
                    84:af:a7:32:08:59:93:78:b7:6a:bb:c6:b1:d9:28:
                    cc:a1:07:c3:7d:7a:17:bb:07:85:46:67:ec:86:4a:
                    89:70:a9:3a:56:85:2d:27:b3:db:65:35:ea:6d:3e:
                    b5:b4:57:15:a7:d4:f5:81:f7:89:10:9f:3a:3b:66:
                    06:68:e6:29:6f:5e:60:c1:03:4d:82:ae:0e:58:4e:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DC:78:C8:6F:CD:6F:FA:AC:E8:D9:60:33:9D:96:3F:7A:8F:02:39
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.129.0/24
                  23.226.140.0/23
                  23.226.143.0/24
                  64.50.166.0/24
                  66.63.167.0/24
                  72.11.136.0/23
                  96.47.228.0/24
                  96.47.231.0/24
                  96.47.236.0/23
                  104.129.44.0/24
                  104.129.55.0/24
                  107.150.28.0/23
                  167.160.163.0/24
                  167.160.172.0/24
                  167.160.174.0/23
                  173.44.37.0/24
                  173.44.42.0/23
                  173.44.45.0/24
                  173.44.47.0-173.44.54.255
                  173.44.56.0/23
                  173.44.59.0/24
                  173.44.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:5e:c6:cd:33:23:af:6a:7a:81:a1:16:34:28:81:86:37:f6:
         ea:27:d3:53:b1:45:13:03:68:34:da:d5:16:e0:54:c2:12:20:
         16:17:8d:89:1e:bf:0f:cd:67:58:f9:4d:56:5c:48:4c:4d:3f:
         cb:64:e6:9a:d8:2f:b0:b0:80:d8:15:c6:5b:9e:cf:7f:f6:b8:
         6c:e8:b9:cb:a6:be:0e:95:9c:22:3d:23:91:e4:ba:cc:53:b4:
         03:d7:1a:82:09:c4:1b:97:ed:66:e1:18:67:4f:36:58:6a:70:
         17:8d:5a:fc:fe:ad:4b:e6:32:49:b7:61:ad:92:00:36:70:12:
         0c:79:a4:99:b3:e4:3b:d2:20:5f:59:3e:66:10:eb:e6:c8:de:
         47:9d:ab:54:6b:42:a5:65:ea:b3:f5:a9:e3:55:f2:0e:30:92:
         da:4c:a9:ca:b2:71:94:05:e8:77:f7:4b:cf:dd:9c:b5:c0:e2:
         af:25:df:49:23:16:2a:3e:35:9e:2b:2f:04:57:89:a7:c8:8a:
         06:ab:6c:dc:d8:0f:f7:0a:c0:43:64:e7:c3:28:a4:40:c0:4f:
         eb:1f:be:e5:03:79:7c:9a:c5:87:2a:c9:b6:5b:44:28:e2:50:
         9d:b4:f2:9a:95:76:90:96:fd:df:7c:90:ab:c5:41:3c:10:a5:
         79:79:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:52:45 2026 by rpki-client