This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa
File:                     d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa (raw, json)
Hash identifier:          rwqtPICk12rs/42mb92nm2uoo4cQxTt2k3RaI2RKNRM=
Subject key identifier:   5C:71:11:0E:26:2B:44:C7:F9:CC:DE:E2:43:21:02:23:4C:02:9D:A2
Certificate issuer:       /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial:       010D0C9F4328584C178CD1FA332B36B355EA4B10
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa
Signing time:             Sat 15 Nov 2025 02:00:32 +0000
ROA not before:           Sat 15 Nov 2025 02:00:32 +0000
ROA not after:            Fri 13 Feb 2026 02:00:32 +0000
asID:                     401369
IP address blocks:        23.187.152.0/24 maxlen: 24
                          2602:f82d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:17:8c:d1:fa:33:2b:36:b3:55:ea:4b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
        Validity
            Not Before: Nov 15 02:00:32 2025 GMT
            Not After : Feb 13 02:00:32 2026 GMT
        Subject: CN=df97a168-f828-4a5c-8efc-07d10642039c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:7d:b1:60:d7:2a:29:68:0f:b2:d6:19:e4:
                    8a:a7:32:73:79:8a:a9:18:65:85:d8:eb:14:f2:18:
                    ae:36:dc:2e:80:ad:20:3d:68:a3:dd:74:19:ce:ae:
                    e7:08:d3:7a:2f:3a:4e:79:9d:cb:9f:b0:e5:8f:bd:
                    77:64:a7:1c:8b:d1:6d:4a:5d:52:19:f5:ee:d8:a1:
                    0e:74:7f:5e:e5:1d:35:17:b9:f2:ad:ce:66:2d:cb:
                    3c:df:02:a0:b5:1e:e5:b6:84:bc:47:cb:3c:0f:38:
                    3a:97:f9:e3:fd:17:84:68:6a:0a:fc:02:e5:22:e7:
                    47:24:59:8e:d1:e8:ea:e3:07:22:c3:ba:da:57:6e:
                    fc:36:11:0f:4e:45:4f:43:90:4c:27:f2:c0:10:90:
                    22:28:c6:75:eb:a1:13:ba:73:cd:9d:47:92:72:96:
                    06:25:b3:cc:18:fd:29:87:60:b8:43:8a:3b:7d:fd:
                    0e:da:47:55:d1:62:87:6d:1b:d8:70:66:5e:93:1c:
                    bd:ce:84:62:b7:b5:cb:3a:e8:75:f6:fe:8d:3f:88:
                    02:d1:b0:d5:9c:0d:ef:93:ad:81:d2:f2:7d:8a:42:
                    19:f5:fa:6c:78:93:db:c9:2e:d3:85:f4:e8:0d:e0:
                    2b:81:4e:2e:e0:83:e0:2c:a9:12:6c:03:96:b2:9a:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:71:11:0E:26:2B:44:C7:F9:CC:DE:E2:43:21:02:23:4C:02:9D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.152.0/24
                IPv6:
                  2602:f82d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b0:13:47:7f:fe:23:10:60:de:58:19:a4:e5:25:05:41:2d:
         76:35:75:c7:5e:1e:f3:ac:25:34:79:ae:e8:60:cd:3a:b7:ac:
         99:47:51:e1:e8:60:fa:fa:7c:b7:bf:22:7a:2b:73:d8:fc:3c:
         69:8f:6c:96:2b:14:f1:5a:4f:8f:e4:60:bc:a0:83:de:f7:cc:
         00:13:29:a3:2d:00:1b:e7:63:e6:01:d7:52:9d:67:03:61:40:
         af:b0:37:5f:1d:1e:97:49:25:31:09:3e:45:f5:08:fc:17:76:
         76:b0:0e:b7:fe:5d:de:57:4e:3a:ae:ea:b8:2c:29:b0:92:2f:
         e3:cb:ad:90:7c:9e:83:9a:36:79:75:d9:8d:71:43:f4:f8:05:
         f7:8a:25:81:b1:e0:3e:c3:df:49:c8:d9:c9:ae:94:9f:c7:58:
         f5:92:b4:63:7a:7d:72:cc:bb:8b:62:98:ad:8c:3c:5a:0d:d9:
         2e:06:ce:72:94:2b:e0:8f:6c:d8:77:fd:0c:fa:49:a9:1f:42:
         fe:26:a7:be:20:a3:9d:2e:b5:c5:c7:ab:73:fd:5d:94:4f:b8:
         f1:da:d9:6a:96:38:a6:00:f8:48:01:c2:8e:d3:23:89:a8:a1:
         c5:b3:c3:b9:93:89:66:9a:dd:cf:cc:02:2d:46:29:b6:f4:17:
         4c:e4:cd:49
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEwXjNH6Mys2s1XqSxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3
NWI4MB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZGY5N2ExNjgtZjgyOC00YTVjLThlZmMtMDdkMTA2NDIwMzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn099sWDXKiloD7LWGeSKpzJzeYqpGGWF2OsU
8hiuNtwugK0gPWij3XQZzq7nCNN6LzpOeZ3Ln7Dlj713ZKcci9FtSl1SGfXu2KEO
dH9e5R01F7nyrc5mLcs83wKgtR7ltoS8R8s8Dzg6l/nj/ReEaGoK/ALlIudHJFmO
0ejq4wciw7raV278NhEPTkVPQ5BMJ/LAEJAiKMZ166ETunPNnUeScpYGJbPMGP0p
h2C4Q4o7ff0O2kdV0WKHbRvYcGZekxy9zoRit7XLOuh19v6NP4gC0bDVnA3vk62B
0vJ9ikIZ9fpseJPbyS7ThfToDeArgU4u4IPgLKkSbAOWsprmZwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFFxxEQ4mK0TH+cze4kMhAiNMAp2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4
NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvZDZjMTc2MTQtYjZjOC0z
ZTE0LTk0NDMtMTkyMmEyNWRkMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh
NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4
NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj
MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E
AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJsBNHf/4jEGDeWBmk5SUFQS12NXXHXh7z
rCU0ea7oYM06t6yZR1Hh6GD6+ny3vyJ6K3PY/Dxpj2yWKxTxWk+P5GC8oIPe98wA
EymjLQAb52PmAddSnWcDYUCvsDdfHR6XSSUxCT5F9Qj8F3Z2sA63/l3eV046ruq4
LCmwki/jy62QfJ6DmjZ5ddmNcUP0+AX3iiWBseA+w99JyNnJrpSfx1j1krRjen1y
zLuLYpitjDxaDdkuBs5ylCvgj2zYd/0M+kmpH0L+Jqe+IKOdLrXFx6tz/V2UT7jx
2tlqljimAPhIAcKO0yOJqKHFs8O5k4lmmt3PzAItRim29BdM5M1J
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:01:33 2025 by rpki-client