This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65e4a7ae-5f7d-39e1-b7da-ab752c4769d9.roa
File:                     65e4a7ae-5f7d-39e1-b7da-ab752c4769d9.roa (raw, json)
Hash identifier:          YIn8OSeb6ZI3j59rzd9gA4SnAGuFWddY6bJzurZ2m2Y=
Subject key identifier:   3E:5B:56:31:0C:08:C2:DE:2A:F2:F6:4B:F5:01:92:07:50:43:2D:FC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C7681880ACA2A651576F98919
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65e4a7ae-5f7d-39e1-b7da-ab752c4769d9.roa
Signing time:             Fri 09 Jan 2026 02:00:31 +0000
ROA not before:           Fri 09 Jan 2026 02:00:31 +0000
ROA not after:            Thu 09 Apr 2026 01:00:31 +0000
asID:                     16625
IP address blocks:        23.217.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:76:81:88:0a:ca:2a:65:15:76:f9:89:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  9 02:00:31 2026 GMT
            Not After : Apr  9 01:00:31 2026 GMT
        Subject: CN=d3f1605e-a983-4c67-a5d5-116a07e1c425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:20:5e:52:a6:4a:9f:b0:7e:25:2d:4c:af:
                    13:0f:ef:4f:20:0b:b0:62:22:27:27:35:70:52:fb:
                    61:55:4d:96:e0:ce:26:ae:2d:3d:77:47:0a:4c:31:
                    a1:31:33:ed:17:8e:a2:58:5e:db:fb:5b:1e:7b:1e:
                    52:66:da:e7:18:26:2c:14:88:94:41:37:d0:6f:f7:
                    7b:59:8c:ab:06:c5:be:17:56:80:8a:a6:aa:d7:52:
                    8d:dc:d0:cf:f0:d6:7d:16:22:d3:03:32:54:45:cb:
                    35:d5:4c:03:9a:31:20:92:f6:ac:40:38:e6:36:32:
                    5e:76:49:f6:2d:c5:25:a9:d3:cc:02:4d:b5:20:83:
                    30:50:11:03:1e:9f:53:d8:54:0f:35:aa:25:e3:4a:
                    d3:10:27:00:d4:90:2e:19:37:cb:61:a4:1c:b9:73:
                    f6:84:df:88:62:ea:14:aa:c3:46:9a:b9:aa:18:ea:
                    b3:ca:31:15:cd:07:bf:39:4d:c2:5f:38:30:b1:b3:
                    8f:b7:5f:d7:39:be:6c:1a:ae:af:1c:e0:e4:b0:96:
                    e4:92:eb:a8:fd:06:67:f3:b4:66:d3:24:6d:b4:2e:
                    7c:f8:71:aa:e3:75:42:19:11:59:70:e9:87:b8:3e:
                    23:e7:2d:97:02:39:3d:b2:ca:b4:e0:2f:4d:24:bf:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5B:56:31:0C:08:C2:DE:2A:F2:F6:4B:F5:01:92:07:50:43:2D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65e4a7ae-5f7d-39e1-b7da-ab752c4769d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.217.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:47:9d:c8:61:49:1e:12:e7:fd:88:2b:56:66:13:54:a5:f5:
         e0:57:73:75:b1:43:d6:90:bf:76:6e:d4:63:29:87:9e:e7:11:
         24:1c:c1:8d:c5:22:15:27:32:f0:de:67:8c:0d:5b:be:c7:b8:
         01:96:3b:21:55:ab:40:c7:5a:3a:3c:ef:d2:9a:bb:cb:25:1d:
         26:f1:82:f9:59:d4:5a:47:ac:f4:0f:9c:52:da:bd:9f:41:9f:
         41:69:59:c8:ce:10:96:a4:0e:19:4b:82:cc:ee:95:e6:78:0c:
         35:e9:08:dd:82:ca:a2:2c:c5:58:32:c1:c6:b5:74:9d:f5:18:
         e1:ea:46:ba:29:09:86:ed:71:50:ae:ba:0c:54:78:f2:b6:84:
         cb:a8:72:69:22:b6:f0:31:7c:8b:34:b8:e1:56:b5:bb:e9:52:
         08:35:6b:3f:bf:40:af:a5:11:82:ac:f0:73:5f:aa:13:8c:04:
         1b:cd:4c:fe:70:14:5d:6c:32:b6:b6:6d:cf:9a:b3:5e:8e:27:
         d2:39:a8:c3:21:79:90:fb:16:5d:90:50:4e:72:d4:f7:53:eb:
         41:0c:1a:11:30:07:40:69:64:62:fd:03:23:a0:4b:3b:4f:00:
         2e:a2:c0:00:8b:a7:32:88:47:a2:cc:59:b5:f7:98:79:5e:19:
         8f:08:6d:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gYgKyiplFXb5iRkwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk
ZDNmMTYwNWUtYTk4My00YzY3LWE1ZDUtMTE2YTA3ZTFjNDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TkgXlKmSp+wfiUtTK8TD+9PIAuwYiInJzVw
UvthVU2W4M4mri09d0cKTDGhMTPtF46iWF7b+1seex5SZtrnGCYsFIiUQTfQb/d7
WYyrBsW+F1aAiqaq11KN3NDP8NZ9FiLTAzJURcs11UwDmjEgkvasQDjmNjJedkn2
LcUlqdPMAk21IIMwUBEDHp9T2FQPNaol40rTECcA1JAuGTfLYaQcuXP2hN+IYuoU
qsNGmrmqGOqzyjEVzQe/OU3CXzgwsbOPt1/XOb5sGq6vHODksJbkkuuo/QZn87Rm
0yRttC58+HGq43VCGRFZcOmHuD4j5y2XAjk9ssq04C9NJL+JowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5bVjEMCMLeKvL2S/UBkgdQQy38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVlNGE3YWUtNWY3ZC0z
OWUxLWI3ZGEtYWI3NTJjNDc2OWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtHnchhSR4S5/2IK1ZmE1Sl9eBXc3WxQ9aQv3Zu1GMph57nESQcwY3F
IhUnMvDeZ4wNW77HuAGWOyFVq0DHWjo879Kau8slHSbxgvlZ1FpHrPQPnFLavZ9B
n0FpWcjOEJakDhlLgszuleZ4DDXpCN2CyqIsxVgywca1dJ31GOHqRropCYbtcVCu
ugxUePK2hMuocmkitvAxfIs0uOFWtbvpUgg1az+/QK+lEYKs8HNfqhOMBBvNTP5w
FF1sMra2bc+as16OJ9I5qMMheZD7Fl2QUE5y1PdT60EMGhEwB0BpZGL9AyOgSztP
AC6iwACLpzKIR6LMWbX3mHleGY8IbXQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:01:04 2026 by rpki-client