This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/da638dbb-2b83-395f-8e51-53f37ab89035.roa
File:                     da638dbb-2b83-395f-8e51-53f37ab89035.roa (raw, json)
Hash identifier:          oTPvgSJVQJ4HqkZpBanticO9lnJlCDYjaj3NTQ1W/2c=
Subject key identifier:   B2:47:2E:48:84:4A:6D:2C:4A:4F:22:C2:F3:FB:8D:C0:01:15:41:34
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584C45A6AAAE4CE14AED6D152300
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/da638dbb-2b83-395f-8e51-53f37ab89035.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     11870
IP address blocks:        167.23.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a6:aa:ae:4c:e1:4a:ed:6d:15:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=0ba171fe-ac89-41ef-9eff-3b1c7ae6175f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:37:f4:1c:f7:1d:7c:d3:35:23:6e:9b:eb:
                    18:40:77:83:99:0f:6c:42:62:dd:59:2a:5c:b4:d5:
                    80:a3:81:5e:1f:c6:6c:05:a7:0e:c2:86:50:a3:30:
                    99:35:3f:14:ae:a8:0a:6b:b8:74:8e:b4:3f:d1:19:
                    59:57:38:4c:8e:40:e0:bf:e8:df:91:50:bc:6e:dd:
                    f2:5b:d7:68:de:54:6c:33:04:64:6f:1a:05:2b:78:
                    60:1c:da:5f:d6:0e:21:ff:bc:45:d2:52:ec:a0:5e:
                    b2:93:f4:ea:a6:eb:b2:b2:77:92:c9:48:bd:dc:02:
                    bb:39:a0:ce:76:86:14:15:17:33:c0:c1:04:e4:98:
                    5e:ef:f5:e5:09:ed:07:fa:c5:89:46:75:d7:0b:cd:
                    25:ca:bf:7b:ac:33:d1:84:7a:e8:a8:71:27:40:52:
                    76:d5:b6:bb:3f:34:4b:86:af:56:78:24:fd:0c:e6:
                    ba:6e:34:18:82:2c:78:13:9e:b3:a1:cf:ec:ab:c6:
                    56:23:9d:85:f7:3c:50:8c:d0:5a:21:ad:27:36:14:
                    5b:73:c4:99:f6:42:4f:3b:89:a1:7b:2b:06:19:08:
                    0f:d0:96:48:eb:c4:e3:5b:8a:26:e9:3f:0a:99:ca:
                    b8:9c:ea:99:95:57:ba:2e:c7:bf:bb:17:24:69:4c:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:47:2E:48:84:4A:6D:2C:4A:4F:22:C2:F3:FB:8D:C0:01:15:41:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/da638dbb-2b83-395f-8e51-53f37ab89035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:6b:ce:2c:98:1c:ce:8c:e3:4b:25:e2:c8:b3:dc:01:33:f6:
         95:6b:7d:44:cc:9e:7c:64:55:5a:6e:68:05:53:da:d9:71:cd:
         65:2c:3f:16:5d:be:84:cf:b4:f6:37:9f:97:ef:57:3d:ac:f5:
         04:9c:25:03:3e:7a:00:e1:2f:8e:18:d9:b3:76:b9:de:d8:5f:
         ef:0a:c4:fd:7b:ef:a0:b7:18:e0:be:01:5b:62:9e:67:f9:1a:
         35:c7:8e:d9:a6:7a:36:40:81:53:eb:34:e0:a8:28:e0:d4:25:
         cc:f7:86:66:f2:73:60:29:3e:7b:d0:97:18:9b:cf:58:3c:40:
         b2:38:00:f5:39:55:f0:84:52:9b:63:df:93:a6:2d:f4:4f:df:
         50:f1:53:18:6b:58:7a:c6:32:52:e4:d9:e7:46:d8:72:02:5b:
         d9:b0:7a:72:4f:3d:b9:98:1c:1f:28:94:d8:30:d3:98:9a:60:
         47:ae:59:79:90:8d:5a:2c:0b:c2:d8:e0:c3:2a:39:3d:f2:6c:
         01:11:58:e5:0c:aa:b7:29:d2:51:8b:2d:2c:24:e7:b0:16:04:
         a2:45:84:7e:d7:8f:0f:a5:83:d4:40:60:ef:7e:29:e6:4e:3e:
         c5:b7:0f:61:6b:92:9b:62:02:4f:14:4e:54:ce:7e:4d:bc:2e:
         8d:9d:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:59:01 2026 by rpki-client