This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa
File:                     ca4eafff-9365-3068-b787-140215783a30.roa (raw, json)
Hash identifier:          Ayh+wM70tZa1V9Krf6GpqBE+zSO36TLW1lK1vA58oKc=
Subject key identifier:   07:C4:25:6E:5A:9C:1B:AB:76:AD:68:C0:4D:33:66:09:80:63:B0:D8
Certificate issuer:       /CN=bdd46844-e081-4813-bfe2-0cfbeac92e08
Certificate serial:       010D0C9F4328584C3BE13A203C2E5D19FF661000
Authority key identifier: FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa
Signing time:             Fri 19 Dec 2025 02:00:31 +0000
ROA not before:           Fri 19 Dec 2025 02:00:31 +0000
ROA not after:            Thu 19 Mar 2026 01:00:31 +0000
asID:                     401472
IP address blocks:        23.129.28.0/24 maxlen: 24
                          2602:f7af::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3b:e1:3a:20:3c:2e:5d:19:ff:66:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd46844-e081-4813-bfe2-0cfbeac92e08
        Validity
            Not Before: Dec 19 02:00:31 2025 GMT
            Not After : Mar 19 01:00:31 2026 GMT
        Subject: CN=d41dfe79-2847-4642-b9d1-6801c5c13026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:4b:8b:a0:1f:50:c8:69:45:34:59:60:aa:
                    f1:20:63:6a:24:77:6d:cf:dc:8b:cb:53:a6:f0:2d:
                    cb:06:93:83:19:03:66:58:be:e4:fc:64:59:02:fc:
                    73:3b:33:5f:69:3a:85:9c:d9:d2:0e:d5:ec:b5:f5:
                    8f:ab:26:b7:f6:0b:5e:f5:da:31:f4:57:ab:77:17:
                    5d:6f:2d:f3:be:96:18:bc:e2:93:86:fc:5e:bd:fc:
                    f7:9f:40:e9:28:88:cb:af:c8:fa:fc:4c:9d:13:99:
                    e4:4a:32:75:6f:22:09:27:1a:83:e6:75:cc:35:25:
                    19:9c:64:20:f6:78:1f:38:91:cf:bc:24:44:79:05:
                    dd:3d:ae:da:31:97:a0:7e:ab:9f:a7:c6:f2:cd:f4:
                    ea:81:63:cc:ff:d9:9b:f5:95:20:2a:22:6d:d3:2c:
                    ce:00:a9:2a:17:42:de:6b:7b:51:47:4e:69:14:1c:
                    18:80:97:93:c6:23:c4:ab:27:7f:82:fa:1b:bd:12:
                    f7:f3:88:14:75:1d:16:76:19:b1:7f:73:5d:f6:ad:
                    37:63:07:3e:f6:a1:23:00:de:44:f1:32:13:82:a9:
                    4a:96:e4:16:89:e8:a2:00:ab:1a:ae:4b:33:6d:dd:
                    01:07:93:b4:b9:c8:a2:a0:94:25:63:5a:58:c3:97:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C4:25:6E:5A:9C:1B:AB:76:AD:68:C0:4D:33:66:09:80:63:B0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl

            X509v3 Authority Key Identifier:
                keyid:FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.28.0/24
                IPv6:
                  2602:f7af::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:5a:79:1b:25:da:9a:8f:c7:d3:78:ac:af:11:e3:e0:3e:81:
         39:bb:95:3f:55:4f:04:c5:20:1c:2f:04:92:f4:55:f4:0d:39:
         6b:a2:b8:3f:ba:66:d4:f8:a8:25:38:f8:12:4a:5c:40:c9:7c:
         d0:f3:a6:c4:10:dd:bc:47:6c:fd:3d:72:89:4f:d5:9b:31:2e:
         db:96:6b:78:83:69:89:0d:c2:92:aa:62:33:5d:02:33:55:87:
         03:fc:cb:06:34:06:57:0c:7d:02:5b:47:31:94:63:63:8b:cf:
         c6:55:6b:9b:b3:b4:ff:51:5a:a4:80:80:8b:0d:5f:c4:30:ef:
         d1:36:3f:23:ef:c5:3a:44:b4:21:97:ee:a5:0b:76:f7:cc:94:
         e1:4a:d6:d6:05:0a:c2:ca:4f:34:da:58:68:52:83:b2:0c:c6:
         3a:a6:c9:f7:63:55:37:61:13:bd:2b:57:b0:bf:66:d2:d9:0f:
         ab:a4:5b:c6:cf:91:44:0f:56:23:f5:b1:3a:48:58:9d:1a:35:
         51:58:c7:e4:17:a1:41:66:7c:6b:9c:62:35:b2:05:51:3c:16:
         b5:18:6b:20:c4:02:9e:0f:ad:0c:6a:3f:c2:e0:43:86:db:cc:
         95:a1:e1:de:a3:bf:0e:46:9a:43:f7:01:34:53:43:99:35:93:
         35:1d:57:81
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEw74TogPC5dGf9mEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRkNDY4NDQtZTA4MS00ODEzLWJmZTItMGNmYmVhYzky
ZTA4MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk
ZDQxZGZlNzktMjg0Ny00NjQyLWI5ZDEtNjgwMWM1YzEzMDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRlLi6AfUMhpRTRZYKrxIGNqJHdtz9yLy1Om
8C3LBpODGQNmWL7k/GRZAvxzOzNfaTqFnNnSDtXstfWPqya39gte9dox9Ferdxdd
by3zvpYYvOKThvxevfz3n0DpKIjLr8j6/EydE5nkSjJ1byIJJxqD5nXMNSUZnGQg
9ngfOJHPvCREeQXdPa7aMZegfqufp8byzfTqgWPM/9mb9ZUgKiJt0yzOAKkqF0Le
a3tRR05pFBwYgJeTxiPEqyd/gvobvRL384gUdR0Wdhmxf3Nd9q03Ywc+9qEjAN5E
8TITgqlKluQWieiiAKsarkszbd0BB5O0uciioJQlY1pYw5ew9wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFAfEJW5anBurdq1owE0zZgmAY7DYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0
Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2ZiZWFjOTJlMDgvY2E0ZWFmZmYtOTM2NS0z
MDY4LWI3ODctMTQwMjE1NzgzYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmRkNDY4NDQtZTA4MS00ODEzLWJm
ZTItMGNmYmVhYzkyZTA4L2JkZDQ2ODQ0LWUwODEtNDgxMy1iZmUyLTBjZmJlYWM5
MmUwOC5jcmwwHwYDVR0jBBgwFoAU/5lJGYSIOaYDVX3Mii2ixne01bQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2Zi
ZWFjOTJlMDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4EcMA4E
AgACMAgDBgAmAvevADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkWnkbJdqaj8fTeKyvEePgPoE5u5U/VU8E
xSAcLwSS9FX0DTlrorg/umbU+KglOPgSSlxAyXzQ86bEEN28R2z9PXKJT9WbMS7b
lmt4g2mJDcKSqmIzXQIzVYcD/MsGNAZXDH0CW0cxlGNji8/GVWubs7T/UVqkgICL
DV/EMO/RNj8j78U6RLQhl+6lC3b3zJThStbWBQrCyk802lhoUoOyDMY6psn3Y1U3
YRO9K1ewv2bS2Q+rpFvGz5FED1Yj9bE6SFidGjVRWMfkF6FBZnxrnGI1sgVRPBa1
GGsgxAKeD60Maj/C4EOG28yVoeHeo78ORppD9wE0U0OZNZM1HVeB
-----END CERTIFICATE-----
Generated at Sun Dec 21 10:22:27 2025 by rpki-client