This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8b72dfb5-24a9-3816-82a8-8647e88b3bcb.roa
File:                     8b72dfb5-24a9-3816-82a8-8647e88b3bcb.roa (raw, json)
Hash identifier:          j9npG4ruCmY2yPa3o0GJeAtkTLybiUn2fXOF85ITKO0=
Subject key identifier:   4B:7C:99:29:64:FE:2B:D5:BF:7E:0C:92:2A:DA:69:A5:87:73:54:A2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584C0B8883D4950135FF270B6200
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8b72dfb5-24a9-3816-82a8-8647e88b3bcb.roa
Signing time:             Mon 01 Dec 2025 18:23:35 +0000
ROA not before:           Mon 01 Dec 2025 18:23:35 +0000
ROA not after:            Sun 01 Mar 2026 18:23:35 +0000
asID:                     23473
IP address blocks:        216.171.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0b:88:83:d4:95:01:35:ff:27:0b:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Dec  1 18:23:35 2025 GMT
            Not After : Mar  1 18:23:35 2026 GMT
        Subject: CN=2da98e4c-2e22-4c8d-b00e-280ab43543c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a9:ed:39:1c:ee:ff:88:99:a8:50:1f:25:7f:
                    5a:c5:a5:06:49:84:c2:eb:ec:49:73:26:a5:0a:40:
                    57:be:6d:f6:41:9d:34:e6:cf:d4:62:dc:94:ff:1b:
                    70:82:5c:59:07:86:86:2d:c0:e2:25:ab:de:61:90:
                    95:c2:e8:45:bc:fb:bf:df:9d:c9:ed:61:85:97:c5:
                    77:c4:ed:f8:f3:df:75:5f:7f:f4:6a:5a:c5:4f:93:
                    b3:2e:99:5d:fd:57:9f:90:fb:9b:cd:81:8b:d4:34:
                    90:9e:72:15:bc:b2:dd:a6:28:0b:c2:af:c1:dd:b4:
                    db:26:1c:d9:7d:0d:ed:b9:0d:c6:e0:ee:44:31:c6:
                    cd:9f:ab:46:fc:24:04:1e:77:f7:9f:ab:c1:48:0b:
                    98:44:d5:b6:48:82:b9:22:65:0e:d6:b5:d5:ba:18:
                    94:69:65:a4:93:b4:db:9e:eb:89:db:27:f0:ed:53:
                    8f:2d:8a:77:75:96:17:5b:d8:bf:53:c1:1c:e1:6f:
                    fd:95:86:ce:6b:2b:b8:0d:34:be:67:fd:50:70:58:
                    43:0f:22:62:54:08:fe:ef:d5:e4:19:3f:6b:b8:37:
                    f8:b7:f3:9f:dc:14:71:a0:ad:02:e7:56:c5:f8:b6:
                    45:19:05:11:7b:0d:17:b0:09:8d:4a:f7:b5:cd:5d:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7C:99:29:64:FE:2B:D5:BF:7E:0C:92:2A:DA:69:A5:87:73:54:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8b72dfb5-24a9-3816-82a8-8647e88b3bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f3:8e:26:16:7e:47:f9:17:9a:be:1c:d0:14:19:cd:dd:a9:
         f7:51:fa:56:e8:fd:50:bf:9c:5b:16:02:79:e2:18:82:47:b9:
         53:69:90:fb:0d:e4:6e:67:da:38:7b:d5:a5:d3:e8:49:fa:12:
         6f:fe:c3:fc:85:74:9b:c2:80:52:ec:d8:02:1e:ec:54:55:01:
         eb:17:77:30:cd:6a:7b:25:56:8e:74:49:55:e5:5f:00:6e:76:
         e7:14:4a:28:4f:d7:6a:90:86:8c:7f:6e:12:6f:c4:59:46:81:
         cd:90:4b:f8:cc:e0:14:e7:67:1b:32:49:b9:fb:a8:03:df:bf:
         cc:8e:c7:7b:7a:49:c8:4b:e5:4a:b0:03:ca:61:7f:4c:8c:7d:
         b5:be:d6:8d:c7:78:b6:4a:84:9c:30:8b:79:01:2a:3e:89:a0:
         16:21:db:ec:c8:de:fe:d8:6d:49:cc:db:a4:62:c0:87:fa:75:
         b6:35:ea:93:53:9a:b8:8b:4a:ab:aa:e7:22:58:3b:cf:61:ab:
         b4:71:f3:8b:13:a3:2b:9c:cc:b7:6a:e1:15:c3:bd:d4:b5:3c:
         cf:50:bc:fe:2c:9c:b6:b8:61:e2:4e:72:07:9a:cc:15:50:82:
         a6:9a:73:1a:b3:84:05:1c:57:97:e4:f0:f4:55:e0:18:cb:56:
         b0:29:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:14 2025 by rpki-client