This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8d7186ed-a699-3d81-ad27-be6b15bea539.roa
File:                     8d7186ed-a699-3d81-ad27-be6b15bea539.roa (raw, json)
Hash identifier:          h/AkjTxbjA61cWQgVMFvXADYucXPfvzYjMfxHywj/BY=
Subject key identifier:   57:AC:67:5C:B8:69:86:8F:C2:B9:BE:E8:28:B6:33:6B:85:75:D0:6A
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584BF4B0DF79CAE0A758AB3C4FC0
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8d7186ed-a699-3d81-ad27-be6b15bea539.roa
Signing time:             Sun 23 Nov 2025 14:00:38 +0000
ROA not before:           Sun 23 Nov 2025 14:00:38 +0000
ROA not after:            Sat 21 Feb 2026 14:00:38 +0000
asID:                     401585
IP address blocks:        23.249.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f4:b0:df:79:ca:e0:a7:58:ab:3c:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Nov 23 14:00:38 2025 GMT
            Not After : Feb 21 14:00:38 2026 GMT
        Subject: CN=7144e6ce-a657-4487-b6f6-96a91e9ffd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a5:f0:c4:3c:3d:ab:58:8f:ba:48:b8:4d:60:
                    62:1b:fc:20:64:4a:81:d8:55:55:3a:a5:95:f6:bb:
                    7a:26:ee:a5:eb:ed:54:95:0d:8f:ca:c5:fe:ea:58:
                    21:c8:7f:89:ec:90:8c:7c:7a:e5:54:8b:65:8f:e0:
                    b4:f8:a7:70:30:a5:a7:98:83:a1:fd:8e:18:e0:1c:
                    8a:f6:ee:47:78:49:2b:41:fc:bb:1c:3f:0e:dd:01:
                    d6:6d:7d:63:18:b8:4c:c0:cc:40:ec:80:04:cf:ef:
                    da:9f:ea:12:fb:e0:21:7d:ba:be:4f:a7:f6:f5:21:
                    3f:e3:62:37:45:34:7d:67:13:7f:60:81:46:fd:17:
                    91:cd:34:16:51:73:8e:4b:9d:d5:6b:ec:d0:7c:25:
                    36:bd:b6:79:3d:f1:88:16:9f:96:70:e3:73:57:93:
                    bf:b5:40:cc:c6:92:de:dd:0c:e1:24:ae:9d:bf:a4:
                    fe:be:e0:2e:0f:95:5a:47:10:f9:5f:4a:1b:65:ca:
                    c3:a7:4a:0a:be:27:5e:57:57:a1:a3:b5:31:f0:27:
                    12:cb:7f:c4:92:e1:a5:3c:b9:79:f3:f6:12:bf:44:
                    bc:42:15:16:b1:bf:bd:aa:a7:4a:84:f4:4c:de:2d:
                    b1:2c:6d:30:47:09:db:23:18:e2:9c:b4:b4:67:0b:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AC:67:5C:B8:69:86:8F:C2:B9:BE:E8:28:B6:33:6B:85:75:D0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8d7186ed-a699-3d81-ad27-be6b15bea539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2b:37:a0:8a:d4:49:35:62:78:f0:99:19:89:22:73:ee:27:
         15:70:30:f5:82:77:a2:b6:ed:6c:8b:36:5d:d1:96:f7:c9:6f:
         ea:90:1a:5c:6d:f4:fc:11:f1:2b:28:47:d0:53:b0:0a:4e:9e:
         30:9c:7e:10:8f:52:27:56:7a:9f:90:d0:68:92:47:c0:ca:4a:
         c2:87:df:f7:ce:07:a9:e2:38:6d:f5:e4:7a:95:06:36:8f:15:
         6e:c0:11:6d:ff:4c:fb:95:70:fd:2c:4b:44:0c:1a:4a:bf:78:
         28:d8:26:b3:d9:cf:0e:cd:36:77:51:ad:b7:8f:d1:91:e8:f4:
         c4:60:63:ff:07:1a:9a:cf:55:5d:3e:fd:df:de:11:cb:14:ca:
         98:ec:6d:d5:80:88:1d:fa:b3:a4:ef:82:67:cf:25:8d:f9:1e:
         34:4f:78:3f:45:ba:07:6a:31:9b:81:8e:ae:90:d4:c8:98:ce:
         14:80:33:70:bc:8e:b4:d1:8e:c5:75:98:d7:8a:73:3c:52:d9:
         f9:a8:22:74:a7:cb:c0:4f:f9:02:02:87:67:ac:79:78:15:08:
         08:9d:a6:7b:6e:ec:f5:bc:07:3b:51:e2:33:17:c3:7c:22:80:
         b9:63:0c:13:5e:d4:95:21:a2:de:a1:1d:36:e3:78:97:59:40:
         f1:b1:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:14:39 2025 by rpki-client