This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/1cd171a6-77ca-39e9-9491-ba54343b3e2f.roa
File:                     1cd171a6-77ca-39e9-9491-ba54343b3e2f.roa (raw, json)
Hash identifier:          uPJLUYJUO4K63h7egvRsYep+eiO39oYG0z6QgHg5Lj0=
Subject key identifier:   38:5A:A7:87:19:67:0B:22:9C:AC:72:6E:39:87:7F:DF:E1:94:F2:14
Certificate issuer:       /CN=da900f81-3070-4c79-8343-f14ceb8ddb3a
Certificate serial:       010D0C9F4328584C10AC8B18133C4BD7892FAF00
Authority key identifier: AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/1cd171a6-77ca-39e9-9491-ba54343b3e2f.roa
Signing time:             Wed 03 Dec 2025 14:35:13 +0000
ROA not before:           Wed 03 Dec 2025 14:35:13 +0000
ROA not after:            Tue 03 Mar 2026 14:35:13 +0000
asID:                     16509
IP address blocks:        23.150.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:10:ac:8b:18:13:3c:4b:d7:89:2f:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da900f81-3070-4c79-8343-f14ceb8ddb3a
        Validity
            Not Before: Dec  3 14:35:13 2025 GMT
            Not After : Mar  3 14:35:13 2026 GMT
        Subject: CN=e7d03313-805b-4f25-b2ab-8f1275c4142a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:88:61:23:b6:09:a8:6d:3d:71:10:05:1e:
                    26:64:7f:a3:09:53:26:d8:fa:69:6c:da:ef:16:5f:
                    c7:f9:a9:3b:38:02:89:a0:ea:eb:0c:18:92:1e:e5:
                    59:30:54:0d:d5:1a:45:53:4b:e6:0c:ba:bd:fe:b2:
                    a7:5e:ed:e4:af:f1:40:ea:2b:7c:4c:e6:7c:be:7a:
                    6d:be:a0:fd:1d:af:d5:ba:42:e7:4b:71:f8:47:c8:
                    f4:9e:93:ad:0a:2c:02:3a:22:cd:d8:29:fa:1a:11:
                    f5:2f:c7:64:f8:f5:0d:5a:c4:24:2f:45:30:2e:f7:
                    97:27:c1:2c:13:bf:b5:df:e3:c7:58:69:83:c2:ea:
                    a0:be:be:9f:e7:6a:e6:ab:fe:52:77:36:10:c4:c4:
                    17:29:8d:90:53:36:a7:e2:3f:0b:a6:15:f8:fa:fa:
                    90:67:bb:40:5e:6e:91:b1:e0:f5:5b:b1:c5:eb:24:
                    d1:ba:1e:de:e6:6f:99:ed:af:91:8d:64:d4:13:f0:
                    bd:f9:86:d2:71:64:f2:b1:ec:91:42:f6:ca:b1:8f:
                    75:99:bd:ef:c5:4c:37:d8:e8:d6:88:a8:d4:a3:2f:
                    85:b5:27:0d:f6:e6:7c:36:06:89:75:51:80:31:7c:
                    8c:ff:04:df:8f:54:31:5d:1e:e5:d5:9c:66:07:91:
                    6b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5A:A7:87:19:67:0B:22:9C:AC:72:6E:39:87:7F:DF:E1:94:F2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/1cd171a6-77ca-39e9-9491-ba54343b3e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:11:03:10:d4:4f:5a:dc:80:66:1f:b8:81:01:6a:ae:ee:79:
         ba:b4:74:b2:d6:fe:ec:d4:99:f8:9e:ad:14:ae:1f:41:52:4b:
         3b:c3:16:b7:36:32:aa:73:00:0d:0c:df:b1:41:b4:40:90:44:
         31:3b:92:f6:39:cd:d8:f1:08:9d:5b:ba:ae:c4:58:2c:6d:b3:
         33:90:53:8b:1c:7f:e6:17:c8:5a:99:6e:49:c4:2c:e9:b8:23:
         78:d1:80:7c:79:92:eb:f3:ec:ab:ce:8b:f1:14:fc:2a:7d:08:
         f0:26:f3:3c:b1:78:97:7c:ac:dd:68:2a:b7:bf:a2:7f:f8:43:
         21:a3:55:6f:d0:e0:61:66:1d:51:76:68:37:eb:96:3f:96:f8:
         e8:b3:91:fc:4a:cc:92:20:f5:c2:ef:cf:e2:cf:d2:fe:9b:dd:
         e0:ec:a0:ee:2f:68:b8:eb:41:f1:8b:10:ab:d0:ed:a3:d3:73:
         cf:2f:9e:45:7d:eb:4f:0c:ee:4b:eb:95:d1:83:1c:f3:ef:71:
         f6:58:15:3b:22:8a:af:e4:a3:45:a1:f7:b7:ec:d7:58:cd:28:
         88:5e:4f:8e:f3:07:b9:b4:4c:72:45:a2:07:32:b7:67:20:96:
         24:54:c3:b4:b6:f3:6c:06:51:4a:56:6d:54:8c:7b:3c:93:bc:
         02:44:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:35:43 2025 by rpki-client