This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b960c8e-720a-38fc-abe9-d6732366d629.roa
File:                     3b960c8e-720a-38fc-abe9-d6732366d629.roa (raw, json)
Hash identifier:          W9fJ2TB/0xGzIm9XrV+Nm1GcZfArwdOPirXt04L8Y2k=
Subject key identifier:   9F:C5:BC:E4:DD:9B:CE:6E:15:92:09:F4:7C:02:B8:68:F8:6D:EC:8A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584BFFDBD39601A46466430FB880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b960c8e-720a-38fc-abe9-d6732366d629.roa
Signing time:             Thu 27 Nov 2025 14:00:40 +0000
ROA not before:           Thu 27 Nov 2025 14:00:40 +0000
ROA not after:            Wed 25 Feb 2026 14:00:40 +0000
asID:                     22773
IP address blocks:        72.201.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ff:db:d3:96:01:a4:64:66:43:0f:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Nov 27 14:00:40 2025 GMT
            Not After : Feb 25 14:00:40 2026 GMT
        Subject: CN=34450ca6-798f-4469-9018-33f798abaa75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:dc:00:74:c0:74:f2:ac:2b:93:52:3a:e3:
                    9f:cd:a1:8e:af:6f:21:38:9c:96:3e:fe:5d:b6:a9:
                    c3:40:c4:44:a1:da:3c:a0:de:c5:7d:45:0c:dc:ef:
                    57:1f:25:b7:25:d3:ab:5a:16:4b:5f:23:37:08:92:
                    bd:b5:c0:09:8d:ab:3f:27:61:a3:cc:7f:77:05:ee:
                    ce:fe:8d:7f:9b:b9:35:e6:88:4f:be:4c:23:d9:97:
                    23:b9:04:10:e6:7b:6b:c1:88:f0:d4:4e:d7:52:e8:
                    7d:19:ee:79:b2:7b:f2:ad:f0:0d:41:1c:f7:ce:48:
                    3b:49:36:60:36:59:f2:d8:56:8c:ca:d9:92:7b:ae:
                    96:66:8c:12:93:39:5a:d0:de:aa:c2:4a:02:b2:6f:
                    cd:1c:5f:d6:22:47:5e:64:32:d5:0f:de:49:01:07:
                    37:37:cc:57:7c:11:90:8a:0a:b1:b1:3e:ca:20:68:
                    7e:8f:34:09:8e:72:fa:ee:6d:e3:71:0a:a6:54:55:
                    10:d9:36:fd:67:28:41:6f:a3:40:f4:d4:16:3b:29:
                    7f:fe:7e:61:28:c8:d6:b2:07:ef:ce:af:90:ff:63:
                    24:19:50:bd:50:44:fa:4a:9b:96:11:21:6d:8e:72:
                    9b:81:50:91:aa:ed:ff:c5:f2:f6:85:38:ef:fe:99:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C5:BC:E4:DD:9B:CE:6E:15:92:09:F4:7C:02:B8:68:F8:6D:EC:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b960c8e-720a-38fc-abe9-d6732366d629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:13:61:15:6e:f1:2c:57:c0:9d:d4:d4:e2:28:ab:e2:5d:54:
         b4:26:5b:5e:5d:1b:3d:4f:dc:28:5a:10:cf:53:40:04:2c:fc:
         15:89:fa:5f:83:2e:27:ad:06:0d:60:77:17:83:86:77:b4:b7:
         43:18:d0:15:77:eb:90:9c:ea:03:fe:a8:59:10:8c:b0:34:d6:
         d5:ca:e0:d8:a1:bd:57:b7:53:23:9a:9f:f8:63:90:8c:0c:df:
         f3:0d:f6:70:a0:d8:2b:86:b4:1c:a9:f2:58:7a:e5:ac:d9:63:
         dc:ef:52:df:93:bb:f5:7b:f8:c5:6a:f3:ac:78:22:60:8e:c1:
         e4:da:44:9f:8e:56:a5:a6:74:8a:0e:7a:8a:05:c5:3d:1b:d5:
         ea:dc:a0:de:25:11:37:45:6f:e8:04:55:c0:5d:80:0e:07:5d:
         1d:b9:df:57:0c:99:22:c5:b5:c8:5a:13:14:b5:d0:0e:57:c0:
         6a:55:e7:bb:2d:d7:00:1a:5e:da:c6:50:d4:99:55:44:ce:b0:
         84:04:84:e1:b0:23:7f:77:40:64:97:a9:14:e4:1c:ff:b8:00:
         3b:6b:f1:00:d3:61:87:25:1e:56:09:c7:32:15:75:cf:5f:6f:
         69:3c:df:68:a7:f5:c3:fa:7e:f4:18:13:58:cc:18:15:02:58:
         71:19:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:28:22 2025 by rpki-client