This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa
File:                     958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa (raw, json)
Hash identifier:          7ps2HevGo+UylmQ49/yTnKHjQU25JEJl41whvYw6ESU=
Subject key identifier:   BF:B2:6D:87:8F:EC:63:F5:72:37:8C:2B:D0:FA:DD:35:C8:C2:07:2B
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F4328584BE125D925356094AF0A262CE0
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa
Signing time:             Sun 16 Nov 2025 14:00:39 +0000
ROA not before:           Sun 16 Nov 2025 14:00:39 +0000
ROA not after:            Sat 14 Feb 2026 14:00:39 +0000
asID:                     401390
IP address blocks:        23.191.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e1:25:d9:25:35:60:94:af:0a:26:2c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Nov 16 14:00:39 2025 GMT
            Not After : Feb 14 14:00:39 2026 GMT
        Subject: CN=23e00858-f537-4a87-884c-7b54c66ad9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:fe:ac:83:71:e2:02:30:8f:15:8c:b7:64:
                    5e:15:f7:ab:d3:f6:ee:eb:17:48:86:37:de:20:10:
                    47:63:65:64:a5:33:54:b2:05:5f:0d:48:83:de:3e:
                    a4:73:7f:d6:5d:73:15:9d:48:4f:84:52:fe:6a:b3:
                    d3:cf:f7:89:51:06:01:2e:2b:7b:f9:c9:ca:5e:5a:
                    4d:cd:cd:ff:4c:3a:8b:45:51:34:f8:02:c2:e9:02:
                    9e:00:32:33:59:ac:1a:5f:e6:c5:cf:26:90:bb:58:
                    71:bb:d6:61:dd:9a:6a:ec:7c:b6:51:63:13:8b:a2:
                    ec:09:5b:d5:f1:c1:9c:da:ad:64:66:fe:7c:df:24:
                    72:ff:f4:0d:43:2e:56:92:34:47:09:b6:d6:cc:ea:
                    3e:08:2c:d8:3e:31:4d:e7:d3:6b:66:1f:5c:85:4a:
                    76:f1:4e:dd:8c:ed:ce:d0:33:ce:1f:96:1e:07:47:
                    b4:7a:47:3e:34:11:2b:16:fc:de:20:b0:b8:52:56:
                    da:a2:79:3e:2e:9d:dd:27:47:68:a9:67:4f:5f:6c:
                    f7:7f:95:ff:3d:d6:eb:1b:c9:a9:e3:cc:50:c7:e5:
                    a5:12:ff:2f:36:ab:42:87:7b:85:8e:69:f9:0f:a2:
                    78:30:b6:cd:c9:9e:5e:18:6f:69:02:df:74:9e:d2:
                    24:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B2:6D:87:8F:EC:63:F5:72:37:8C:2B:D0:FA:DD:35:C8:C2:07:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f6:f5:1f:0c:6d:2e:bc:4e:41:70:f0:ee:fa:40:d7:38:94:
         c5:11:5f:42:59:63:a6:c8:82:aa:9a:e5:00:74:88:a1:2e:c2:
         eb:d9:6c:3a:f6:a9:ed:68:9d:88:e7:35:4e:13:e2:0d:39:cd:
         34:fc:fd:bf:b9:31:8f:c9:cf:6a:f7:e0:67:6c:f1:7f:18:33:
         9b:e1:09:d7:df:0e:65:75:3e:3f:7e:a3:90:bc:bf:5a:fd:ab:
         63:5f:c7:8e:4e:56:36:06:4f:d1:fe:c7:fe:ec:77:54:ea:14:
         7e:21:d2:c9:31:c0:ca:5f:71:9e:f8:c7:d9:b3:1e:7a:e4:ac:
         0c:3c:14:7e:66:f9:cd:d1:fa:03:c9:2a:71:7f:8c:e3:f7:43:
         66:e5:4f:3c:76:f4:37:0c:5c:2f:ef:54:99:cb:ba:26:f6:48:
         d2:11:2b:05:bd:2f:3e:bb:6b:c3:5a:e9:bc:5c:f5:d0:78:b5:
         4a:94:41:b7:fe:bc:60:29:b9:ea:f9:68:d3:1e:a4:12:be:11:
         dd:34:f6:db:3e:09:e2:bc:74:11:39:32:f9:da:b6:ed:be:41:
         c3:8d:41:8a:32:ea:12:bd:7b:35:38:2f:95:22:4b:54:f0:6c:
         a1:f0:02:bf:1e:57:b3:07:97:55:99:b7:c8:f5:a6:64:9f:72:
         87:da:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:22:33 2025 by rpki-client