This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd9df6e8-aab9-3da5-ab68-aef16c766575.roa
File:                     cd9df6e8-aab9-3da5-ab68-aef16c766575.roa (raw, json)
Hash identifier:          u+GX2/Y8AhGuMZMptJ4SId4b1MTpC3E2o37kvYq5IKY=
Subject key identifier:   D2:80:BD:A1:E9:89:32:8A:5B:38:AE:08:DE:02:E0:E2:90:74:57:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BCD9EDE53E3834D4B545E4000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd9df6e8-aab9-3da5-ab68-aef16c766575.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     33651
IP address blocks:        73.223.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9e:de:53:e3:83:4d:4b:54:5e:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=5e3e856f-b50a-4900-816e-e8b3d81e82b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:fa:21:58:02:72:1b:07:6a:1f:64:f1:e4:
                    c5:d8:95:6b:bf:10:e8:03:84:76:28:0d:b0:63:da:
                    a6:b7:4b:4e:52:9c:b1:4c:15:fb:02:78:3c:e7:a2:
                    79:33:9d:db:ae:96:69:53:b1:05:e3:51:61:4e:ee:
                    7c:cd:11:f7:87:ed:40:d3:8d:2d:52:2e:2f:b6:15:
                    fc:07:c3:75:aa:ef:09:d2:38:05:15:29:22:3e:77:
                    cb:ee:4a:fc:ee:1f:e0:7e:9f:08:07:a1:20:2b:37:
                    d3:77:14:3d:43:1f:a3:ff:44:6d:77:d8:11:8d:c6:
                    ab:36:e1:8e:78:c5:99:40:94:6e:b7:b5:ee:55:f2:
                    d3:d1:56:d4:b2:00:42:e8:6c:f1:15:f2:43:1d:41:
                    e3:54:72:51:36:e0:e7:5b:be:2f:df:63:b6:41:eb:
                    47:a1:a2:44:15:63:4a:0e:34:fc:cb:e6:a4:23:56:
                    08:e3:73:54:ca:c7:c3:11:8f:76:3d:c2:88:8b:45:
                    88:f4:4b:71:9d:6d:60:8c:f7:45:ba:17:8f:0f:24:
                    5d:c2:a0:0f:74:13:a9:bf:e9:07:f3:2e:3b:69:a7:
                    ac:49:c7:4a:d5:0b:f2:d0:12:48:67:8a:c6:a9:4d:
                    c8:99:f5:9a:a1:8e:88:22:a4:ee:73:d6:30:46:77:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:80:BD:A1:E9:89:32:8A:5B:38:AE:08:DE:02:E0:E2:90:74:57:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd9df6e8-aab9-3da5-ab68-aef16c766575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.223.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:39:82:cf:54:fe:c2:72:b4:7d:90:f7:df:2c:e4:71:5b:b9:
         10:93:f2:bb:c0:7d:a2:02:09:a2:41:4e:98:df:b5:c8:67:89:
         f0:20:db:91:84:54:21:02:5e:c8:8b:ad:dc:51:f3:ab:cd:4c:
         c8:83:8c:52:53:49:57:40:86:d2:a6:ed:48:3f:44:d3:34:70:
         5d:3b:46:57:d3:80:59:08:37:fb:8e:c1:57:79:fb:31:dd:3c:
         ac:56:14:16:f7:1b:4d:92:1f:ca:7d:70:7d:83:5a:93:fc:04:
         a9:ab:1d:a5:68:e0:cd:14:94:fd:b4:1c:83:5b:4d:25:32:02:
         88:c5:ae:41:48:ee:65:67:19:d0:8c:6f:26:97:f1:71:06:3b:
         50:eb:20:cf:54:25:16:31:c3:e1:f6:fd:8d:07:2e:25:79:13:
         80:9e:49:81:44:09:b7:ee:0b:d6:17:58:c9:c2:7e:48:74:4f:
         9d:7e:d0:0f:4f:e7:04:12:8d:95:4e:d2:fd:2a:39:90:6e:cd:
         1c:2f:4f:ba:36:91:e9:c4:fe:7c:c3:75:30:1c:1f:4b:7c:21:
         ab:1f:45:0e:11:ce:9d:ee:df:b4:53:7c:ee:03:3a:d9:75:d8:
         af:09:2b:30:fe:26:09:ca:95:c4:8b:cd:6a:74:05:de:b1:70:
         89:07:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:42:24 2025 by rpki-client