This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/525d244d-56ab-3e60-bd5c-e0e321c72a28.roa
File:                     525d244d-56ab-3e60-bd5c-e0e321c72a28.roa (raw, json)
Hash identifier:          ayb3UWKbzbUXeACOK2aTAOOZ2PhfJW/s3uW+4jkct7w=
Subject key identifier:   0E:33:1D:57:81:75:1B:EB:86:04:BD:9C:D0:40:B5:74:14:1A:C4:DD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C39166203DD13C78DFD85B7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/525d244d-56ab-3e60-bd5c-e0e321c72a28.roa
Signing time:             Thu 18 Dec 2025 02:00:31 +0000
ROA not before:           Thu 18 Dec 2025 02:00:31 +0000
ROA not after:            Wed 18 Mar 2026 01:00:31 +0000
asID:                     24319
IP address blocks:        23.207.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:39:16:62:03:dd:13:c7:8d:fd:85:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 18 02:00:31 2025 GMT
            Not After : Mar 18 01:00:31 2026 GMT
        Subject: CN=382338eb-df7c-4aac-9073-af975bdf4fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:c1:61:17:02:42:6e:da:73:0e:f4:cd:d7:
                    7c:91:d1:6e:a8:e2:e0:69:27:04:47:78:90:94:c0:
                    81:36:d5:1d:14:de:76:de:8d:0d:9d:a6:27:f8:f8:
                    fa:de:04:61:5a:96:03:45:51:16:a6:99:97:9b:e7:
                    98:5b:eb:89:5c:c0:a0:eb:0f:90:f3:2f:44:91:44:
                    dd:25:c4:85:54:5b:8d:f5:3b:68:31:58:9e:b2:88:
                    8f:cd:58:f4:83:d4:24:f7:22:6a:46:55:0f:58:7b:
                    6a:46:9c:bd:29:1d:79:55:2e:ac:8b:ab:0e:3a:ef:
                    6e:dc:63:fd:ba:94:32:48:ee:1e:d1:da:80:22:fe:
                    a2:40:5d:02:3d:b8:c2:7a:5d:c6:73:02:3a:2b:0f:
                    d5:71:2c:08:dc:96:d5:f7:e3:be:c9:81:a5:81:68:
                    7e:82:ca:d3:66:e0:fa:4a:10:03:06:44:e9:0e:19:
                    18:e4:26:b6:66:7c:c9:97:03:41:cd:5e:d4:74:3b:
                    1b:8c:1c:66:5b:5b:89:e8:9f:01:20:ed:6f:ae:2f:
                    fd:b8:3a:36:5a:09:eb:46:4f:71:5e:6b:55:f7:44:
                    02:10:d3:64:8d:e0:04:e5:ff:c5:d1:2c:77:ca:6d:
                    cb:bd:b0:d4:bc:f2:c8:d7:52:ce:46:6e:0d:65:98:
                    84:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:1D:57:81:75:1B:EB:86:04:BD:9C:D0:40:B5:74:14:1A:C4:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/525d244d-56ab-3e60-bd5c-e0e321c72a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.207.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:78:a1:9a:36:4d:37:0b:09:5d:78:60:05:ba:f0:5c:5b:05:
         4a:60:2d:83:d7:9d:30:74:a5:29:dc:8f:a3:72:4f:1c:7e:e0:
         1e:14:15:81:1c:0c:52:aa:d9:a3:c9:49:93:a6:c5:86:7e:36:
         3e:a0:71:cb:66:23:11:16:86:51:f5:a6:96:bd:d6:75:7c:ae:
         79:8a:55:43:b5:9d:3f:e2:60:a0:19:03:41:ec:64:9d:ba:21:
         34:20:e3:49:3b:d9:27:6b:e5:68:51:6e:5c:eb:ca:9f:2f:d3:
         17:e9:12:7e:a7:08:4c:34:42:34:2b:33:e3:29:86:c8:e2:ad:
         e1:99:fc:af:a2:7e:f1:a9:b3:70:8c:50:b6:57:6b:4a:aa:2f:
         14:c7:1c:41:d9:40:25:1f:9f:5d:77:3a:60:90:51:84:7a:70:
         81:18:d2:18:6d:41:03:30:92:40:d1:bf:2f:e5:4f:71:a7:ce:
         22:23:2d:71:87:16:5d:45:35:d3:fa:e1:e0:1e:b0:44:37:06:
         09:77:39:24:a5:12:6d:92:38:8c:73:f6:62:f8:14:13:12:18:
         d6:cd:f4:91:cc:4d:3f:6a:4c:ce:65:86:94:69:a0:41:b7:87:
         2c:a0:59:4c:80:77:62:48:6c:91:6d:d5:2f:bd:9e:01:6a:01:
         c8:86:67:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FmID3RPHjf2Ft8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk
MzgyMzM4ZWItZGY3Yy00YWFjLTkwNzMtYWY5NzViZGY0ZmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSnBYRcCQm7acw70zdd8kdFuqOLgaScER3iQ
lMCBNtUdFN523o0NnaYn+Pj63gRhWpYDRVEWppmXm+eYW+uJXMCg6w+Q8y9EkUTd
JcSFVFuN9TtoMViesoiPzVj0g9Qk9yJqRlUPWHtqRpy9KR15VS6si6sOOu9u3GP9
upQySO4e0dqAIv6iQF0CPbjCel3GcwI6Kw/VcSwI3JbV9+O+yYGlgWh+gsrTZuD6
ShADBkTpDhkY5Ca2ZnzJlwNBzV7UdDsbjBxmW1uJ6J8BIO1vri/9uDo2WgnrRk9x
XmtV90QCENNkjeAE5f/F0Sx3ym3LvbDUvPLI11LORm4NZZiE5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA4zHVeBdRvrhgS9nNBAtXQUGsTdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTI1ZDI0NGQtNTZhYi0z
ZTYwLWJkNWMtZTBlMzIxYzcyYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8+oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZ4oZo2TTcLCV14YAW68FxbBUpgLYPXnTB0pSncj6NyTxx+4B4UFYEc
DFKq2aPJSZOmxYZ+Nj6gcctmIxEWhlH1ppa91nV8rnmKVUO1nT/iYKAZA0HsZJ26
ITQg40k72Sdr5WhRblzryp8v0xfpEn6nCEw0QjQrM+MphsjireGZ/K+ifvGps3CM
ULZXa0qqLxTHHEHZQCUfn113OmCQUYR6cIEY0hhtQQMwkkDRvy/lT3GnziIjLXGH
Fl1FNdP64eAesEQ3Bgl3OSSlEm2SOIxz9mL4FBMSGNbN9JHMTT9qTM5lhpRpoEG3
hyygWUyAd2JIbJFt1S+9ngFqAciGZ2Y=
-----END CERTIFICATE-----
Generated at Fri Dec 19 01:21:25 2025 by rpki-client