This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/70c1be47-61d4-30b1-8808-92c328e5b495.roa
File:                     70c1be47-61d4-30b1-8808-92c328e5b495.roa (raw, json)
Hash identifier:          itZBXW7hfpuzy9PQolear90z7yGFtZxamqTJma+pXTw=
Subject key identifier:   CA:0A:68:6C:19:FD:1A:53:0D:C8:8A:1C:5F:90:C5:57:96:23:27:D9
Certificate issuer:       /CN=9a6b843c-48fb-4949-86c8-29317b8cb12c
Certificate serial:       010D0C9F4328584BF4B0DFB114E1C813DFA263C0
Authority key identifier: C0:85:62:C5:E0:98:47:70:33:E5:23:3A:DD:A8:4F:34:6E:10:F0:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/70c1be47-61d4-30b1-8808-92c328e5b495.roa
Signing time:             Sun 23 Nov 2025 14:00:38 +0000
ROA not before:           Sun 23 Nov 2025 14:00:38 +0000
ROA not after:            Sat 21 Feb 2026 14:00:38 +0000
asID:                     395409
IP address blocks:        23.143.32.0/24 maxlen: 24
                          198.51.233.0/24 maxlen: 24
                          2620:2:6000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f4:b0:df:b1:14:e1:c8:13:df:a2:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6b843c-48fb-4949-86c8-29317b8cb12c
        Validity
            Not Before: Nov 23 14:00:38 2025 GMT
            Not After : Feb 21 14:00:38 2026 GMT
        Subject: CN=626e9c74-9029-42a2-be58-5213cf5dba3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:5e:f9:78:e5:cc:33:52:74:61:f4:c0:b0:
                    fd:f2:48:a7:4f:e0:61:d0:e8:ab:9c:fd:8e:50:08:
                    a8:69:eb:7e:7c:3f:9f:65:32:3f:32:6d:a8:95:cc:
                    66:18:78:c2:57:43:bf:7a:2d:56:29:92:1b:cc:fd:
                    e6:b8:75:1b:87:69:34:01:f9:0e:f8:f9:4b:ee:d2:
                    c9:5f:73:6c:1b:57:cb:0e:0b:16:6e:b6:ab:26:59:
                    fb:be:9c:d0:e2:3f:c3:b6:f0:ff:90:98:a9:b4:ed:
                    96:3b:fc:2c:15:ed:d3:f1:71:c6:8c:68:03:6c:ac:
                    d3:b4:ee:b7:55:d9:90:7d:7c:99:53:9a:89:b0:b4:
                    4e:28:02:df:d6:14:48:2e:3a:75:65:60:7e:77:49:
                    51:a8:e7:b1:39:8b:b2:65:68:de:e1:a5:dc:c1:53:
                    33:96:08:88:eb:1b:0e:d1:ed:52:ea:59:12:16:f7:
                    fa:fb:48:c8:b4:62:e1:26:e4:6f:90:0f:27:8a:be:
                    d9:58:a8:dc:a1:7c:c3:a3:ad:44:0a:ac:3d:9c:d1:
                    6a:6e:64:09:ab:c5:9d:dc:55:78:34:e1:ef:14:a3:
                    79:72:69:8a:47:f2:8b:52:41:7c:02:1a:bd:ba:ed:
                    9b:63:be:66:96:ce:6a:31:02:4b:33:51:a1:ca:3d:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0A:68:6C:19:FD:1A:53:0D:C8:8A:1C:5F:90:C5:57:96:23:27:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/70c1be47-61d4-30b1-8808-92c328e5b495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.crl

            X509v3 Authority Key Identifier:
                keyid:C0:85:62:C5:E0:98:47:70:33:E5:23:3A:DD:A8:4F:34:6E:10:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.32.0/24
                  198.51.233.0/24
                IPv6:
                  2620:2:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:06:e6:ae:37:12:40:8f:bb:7f:c3:94:7c:7d:fe:62:ce:f3:
         e0:ce:08:af:4b:a7:22:e6:bf:74:b9:06:99:34:df:fd:65:08:
         a4:dd:78:2a:0f:16:b2:88:97:4e:39:36:54:7d:db:cc:82:41:
         05:33:23:f4:f2:28:f1:f6:e5:4c:cb:08:72:86:92:67:bc:87:
         eb:0f:48:33:90:43:9e:87:61:cb:32:b5:17:c1:f7:13:5f:a6:
         79:ed:ba:65:89:a5:b3:54:25:b0:e7:da:b0:2c:14:99:ba:f2:
         10:33:8d:7c:d3:15:4c:e2:07:36:d2:6c:4a:dc:34:5e:d9:5f:
         f5:5c:aa:51:49:ce:d1:6d:63:07:6c:68:b0:2a:16:b7:1e:b6:
         9b:5f:80:34:a4:da:b5:33:7d:40:c3:7e:1c:d6:a4:9b:34:3f:
         db:4f:00:e2:27:a4:43:34:88:aa:83:ce:64:c0:2a:7a:be:f6:
         c8:61:2b:f1:dc:06:d8:36:ab:b8:82:17:d3:1c:f9:73:7a:e3:
         10:9e:1e:f4:3a:30:af:49:f9:a4:f0:5e:86:cd:cf:e4:ac:fc:
         18:4b:cd:bf:cd:69:f9:21:e8:d8:d7:fd:c1:89:3d:4e:bc:bc:
         12:6d:8f:31:2e:0b:ce:20:76:4d:d0:dc:e9:e0:b2:62:44:36:
         8e:14:8e:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:45:14 2025 by rpki-client