This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa
File:                     ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa (raw, json)
Hash identifier:          dPf/iVLzWvhWH8UwRrptUZsOo/ZYEJBcGau+r4T9lLE=
Subject key identifier:   17:37:FB:78:F0:3A:23:B7:E7:0C:07:7E:BF:05:BE:00:01:30:57:C4
Certificate issuer:       /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
Certificate serial:       010D0C9F4328584C109B7CA0E495F428E1615268
Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa
Signing time:             Wed 03 Dec 2025 14:00:38 +0000
ROA not before:           Wed 03 Dec 2025 14:00:38 +0000
ROA not after:            Tue 03 Mar 2026 14:00:38 +0000
asID:                     8796
IP address blocks:        23.185.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:10:9b:7c:a0:e4:95:f4:28:e1:61:52:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
        Validity
            Not Before: Dec  3 14:00:38 2025 GMT
            Not After : Mar  3 14:00:38 2026 GMT
        Subject: CN=571bf423-bc67-4a68-a7c7-7a975d719653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:a5:a3:0c:aa:41:4a:6c:df:1f:1f:d1:3f:
                    f9:e5:b6:44:26:e0:b4:e8:8b:7d:7f:0c:5e:bf:76:
                    55:87:f6:da:f2:e2:7a:6b:a9:b8:03:9f:ee:cc:f1:
                    30:f3:8a:12:ce:e7:36:ad:a0:9d:3c:e0:43:c9:bb:
                    53:28:10:f3:3b:d1:ba:98:9d:84:a0:6b:c6:a9:f6:
                    f8:c1:b4:ff:ca:5c:be:5c:7c:3a:ea:2c:e6:2d:5d:
                    21:b7:cf:2e:5f:30:41:52:ac:0d:0f:27:86:62:45:
                    fc:94:f9:cb:ef:55:9c:c5:58:b3:23:92:76:06:23:
                    68:a2:93:25:bd:f0:f8:b2:9b:0c:be:e9:08:6f:a5:
                    d9:f1:72:96:2a:44:66:61:5d:7d:48:a2:9f:3b:85:
                    ac:a8:9d:d5:a4:da:d5:83:02:81:75:9b:9e:98:20:
                    8a:dc:44:e0:15:15:73:7a:46:a8:08:47:98:94:83:
                    20:8a:30:55:02:5b:27:79:9a:c2:74:62:18:94:fd:
                    dd:d1:cc:67:20:45:6e:47:f7:3d:0c:21:2a:30:c7:
                    17:9a:94:15:52:0c:b9:b2:a4:d9:f3:78:53:00:5b:
                    f6:7c:0f:34:0c:c7:8f:92:d4:91:55:5d:8c:e3:04:
                    bd:9f:6b:45:0c:f7:98:20:57:45:5f:fd:7b:c4:12:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:37:FB:78:F0:3A:23:B7:E7:0C:07:7E:BF:05:BE:00:01:30:57:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl

            X509v3 Authority Key Identifier:
                keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:55:81:c9:48:82:cd:63:9d:a5:f0:53:76:61:a1:3c:67:
         cc:98:da:b4:2f:11:ce:01:0b:6c:3a:e2:f0:d4:b7:ff:f0:7c:
         32:62:c8:da:db:b6:e1:f8:1e:4c:f3:42:f5:26:0a:a0:56:f5:
         5b:f8:0d:33:36:02:87:1a:69:85:55:4d:30:82:aa:e9:8e:ea:
         e1:f4:67:68:ea:8d:68:4e:d5:f2:63:23:42:b4:40:71:1f:96:
         99:17:b4:82:e1:6a:1f:09:7f:17:4b:81:2d:ae:ba:f0:16:ff:
         d3:61:83:4c:ef:25:73:74:70:51:4f:c1:ab:48:f9:f4:d0:c8:
         59:7d:88:a2:de:83:1a:78:9d:99:20:77:6e:ee:66:7b:ac:10:
         82:ac:fd:dd:bf:5b:13:ce:02:48:06:db:bc:05:e9:a7:1b:fe:
         e2:92:3f:e6:9e:64:a8:08:a5:80:58:a4:30:8f:2f:17:44:68:
         9d:c1:07:4a:2e:1b:19:c5:5b:a3:d8:4c:95:f7:a7:99:33:4d:
         13:84:fd:1e:91:26:f1:9c:18:52:1a:de:e5:1e:21:ca:61:49:
         77:24:8c:0e:23:39:fc:72:ae:d1:a1:5e:b6:9e:0c:ea:0a:dd:
         17:57:d3:37:e4:56:fa:38:d7:67:52:02:56:b8:5c:dd:cd:8d:
         af:e7:1d:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwQm3yg5JX0KOFhUmgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkxZDlhZTctNGZhZC00YTQ5LWE5YjItOWNmMWU0YzE5
MTY5MB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk
NTcxYmY0MjMtYmM2Ny00YTY4LWE3YzctN2E5NzVkNzE5NjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTelowyqQUps3x8f0T/55bZEJuC06It9fwxe
v3ZVh/ba8uJ6a6m4A5/uzPEw84oSzuc2raCdPOBDybtTKBDzO9G6mJ2EoGvGqfb4
wbT/yly+XHw66izmLV0ht88uXzBBUqwNDyeGYkX8lPnL71WcxVizI5J2BiNoopMl
vfD4spsMvukIb6XZ8XKWKkRmYV19SKKfO4WsqJ3VpNrVgwKBdZuemCCK3ETgFRVz
ekaoCEeYlIMgijBVAlsneZrCdGIYlP3d0cxnIEVuR/c9DCEqMMcXmpQVUgy5sqTZ
83hTAFv2fA80DMePktSRVV2M4wS9n2tFDPeYIFdFX/17xBKXFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBc3+3jwOiO35wwHfr8FvgABMFfEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80OTFk
OWFlNy00ZmFkLTRhNDktYTliMi05Y2YxZTRjMTkxNjkvY2UyYzlmNWEtOWE5Mi0z
NzU5LThiNTUtZDllZGQ2MDNhNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDkxZDlhZTctNGZhZC00YTQ5LWE5
YjItOWNmMWU0YzE5MTY5LzQ5MWQ5YWU3LTRmYWQtNGE0OS1hOWIyLTljZjFlNGMx
OTE2OS5jcmwwHwYDVR0jBBgwFoAU2Qx290Iwvei74XRBifL+f+cYKMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80OTFkOWFlNy00ZmFkLTRhNDktYTliMi05Y2Yx
ZTRjMTkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7nIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIhKVYHJSILNY52l8FN2YaE8Z8yY2rQvEc4BC2w64vDUt//wfDJiyNrb
tuH4HkzzQvUmCqBW9Vv4DTM2AocaaYVVTTCCqumO6uH0Z2jqjWhO1fJjI0K0QHEf
lpkXtILhah8JfxdLgS2uuvAW/9Nhg0zvJXN0cFFPwatI+fTQyFl9iKLegxp4nZkg
d27uZnusEIKs/d2/WxPOAkgG27wF6acb/uKSP+aeZKgIpYBYpDCPLxdEaJ3BB0ou
GxnFW6PYTJX3p5kzTROE/R6RJvGcGFIa3uUeIcphSXckjA4jOfxyrtGhXraeDOoK
3RdX0zfkVvo412dSAla4XN3Nja/nHcI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:44:23 2025 by rpki-client