This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84cd9e92-bd9f-380c-b604-6449daf44718.roa
File:                     84cd9e92-bd9f-380c-b604-6449daf44718.roa (raw, json)
Hash identifier:          PReXXeY0jEY6vFsB5+B3HJhjjcvG7ujKcpwJ3p+Uyhc=
Subject key identifier:   06:71:36:0E:94:34:3A:5E:49:99:14:06:CB:D6:B5:0F:84:20:2D:A7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C0DD0E98B6B217322CC9C3F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84cd9e92-bd9f-380c-b604-6449daf44718.roa
Signing time:             Tue 02 Dec 2025 14:00:39 +0000
ROA not before:           Tue 02 Dec 2025 14:00:39 +0000
ROA not after:            Mon 02 Mar 2026 14:00:39 +0000
asID:                     20940
IP address blocks:        23.58.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0d:d0:e9:8b:6b:21:73:22:cc:9c:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  2 14:00:39 2025 GMT
            Not After : Mar  2 14:00:39 2026 GMT
        Subject: CN=f8c9a77b-263f-4577-a32a-cd684878dbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:4c:d9:7a:af:d2:8d:79:3a:b8:09:f6:a2:
                    c1:6f:d7:0b:b3:58:34:46:83:b2:c5:5e:53:37:04:
                    9d:42:dc:41:95:55:7f:fa:cf:b5:d9:85:cb:fc:cb:
                    c1:8b:01:f3:d3:b5:3a:3c:58:9c:53:a0:77:7a:b6:
                    e2:1d:46:1c:ac:ae:34:e1:92:48:3d:da:25:03:3b:
                    ca:34:92:76:fd:d6:e1:34:83:96:73:8d:e3:61:84:
                    8d:b3:08:e8:3d:20:a1:d3:07:5c:3a:60:d8:b8:5a:
                    b7:1c:53:52:56:ea:a7:57:3a:41:8c:11:1d:fe:9a:
                    8d:3e:bf:b9:38:60:1d:62:54:81:b6:a0:2f:bd:18:
                    51:19:d2:47:32:f5:40:de:8f:60:b3:74:34:47:b8:
                    c1:05:22:e4:b2:12:43:f7:5d:52:da:ae:ed:f5:5c:
                    87:93:a1:04:40:e5:58:56:9e:8f:16:59:09:10:f8:
                    ac:9c:43:7a:c5:ef:e0:8e:db:44:79:7a:34:05:a4:
                    8e:b1:41:2a:d6:45:d8:49:82:44:d4:93:43:73:6f:
                    de:d1:83:e9:d9:83:0e:e2:09:37:fe:73:1c:ec:86:
                    f6:01:3d:2d:96:7a:d2:d1:e9:46:e9:74:d1:1d:fa:
                    54:15:f5:a2:0d:ef:48:21:91:07:8d:9a:4c:38:12:
                    ad:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:71:36:0E:94:34:3A:5E:49:99:14:06:CB:D6:B5:0F:84:20:2D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84cd9e92-bd9f-380c-b604-6449daf44718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:65:2c:1d:51:72:33:cf:71:d1:dd:93:9f:ca:ca:e6:bb:
         6d:d4:46:2e:f1:d9:aa:f9:fd:68:c5:ce:14:91:46:21:aa:95:
         e0:44:62:42:d8:52:73:5f:27:29:82:ad:e8:be:11:6b:bb:45:
         75:ed:82:2b:49:96:bb:fd:56:e9:97:4e:f8:f9:d4:69:37:0d:
         23:f3:28:c9:3b:b6:29:77:02:47:5b:1b:47:63:5d:a2:e3:78:
         25:dd:7e:e4:1f:6e:bb:29:32:4c:d8:c4:38:53:46:46:3f:b9:
         38:12:e3:64:62:77:f0:91:de:a6:af:dd:8e:17:ed:5e:0a:d8:
         b0:06:e4:c1:d8:20:94:8e:10:88:36:e5:50:da:34:9d:cf:26:
         39:ca:c8:82:6a:d0:50:f3:a7:5c:4b:ff:b8:45:11:e9:5a:fa:
         f3:b6:52:10:be:a7:ec:a7:4e:bb:c2:e7:e8:d5:0b:a7:65:b0:
         bf:ea:64:51:c1:f5:fc:0d:35:70:e1:65:30:43:dd:94:58:cc:
         76:e5:77:66:1b:d9:6d:f5:e3:ee:7c:67:3f:a5:fe:3e:f5:31:
         82:b5:84:1b:83:57:3e:1c:00:9c:0e:72:88:05:3e:0f:63:39:
         c2:97:d1:ec:0c:5f:10:4e:95:e0:27:a1:bb:0f:11:c2:f2:67:
         9a:a0:bb:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0OmLayFzIsycPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk
ZjhjOWE3N2ItMjYzZi00NTc3LWEzMmEtY2Q2ODQ4NzhkYmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy9M2Xqv0o15OrgJ9qLBb9cLs1g0RoOyxV5T
NwSdQtxBlVV/+s+12YXL/MvBiwHz07U6PFicU6B3erbiHUYcrK404ZJIPdolAzvK
NJJ2/dbhNIOWc43jYYSNswjoPSCh0wdcOmDYuFq3HFNSVuqnVzpBjBEd/pqNPr+5
OGAdYlSBtqAvvRhRGdJHMvVA3o9gs3Q0R7jBBSLkshJD911S2q7t9VyHk6EEQOVY
Vp6PFlkJEPisnEN6xe/gjttEeXo0BaSOsUEq1kXYSYJE1JNDc2/e0YPp2YMO4gk3
/nMc7Ib2AT0tlnrS0elG6XTRHfpUFfWiDe9IIZEHjZpMOBKtYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZxNg6UNDpeSZkUBsvWtQ+EIC2nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODRjZDllOTItYmQ5Zi0z
ODBjLWI2MDQtNjQ0OWRhZjQ0NzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzqfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXXZSwdUXIzz3HR3ZOfysrmu23URi7x2ar5/WjFzhSRRiGqleBEYkLY
UnNfJymCrei+EWu7RXXtgitJlrv9VumXTvj51Gk3DSPzKMk7til3AkdbG0djXaLj
eCXdfuQfbrspMkzYxDhTRkY/uTgS42Rid/CR3qav3Y4X7V4K2LAG5MHYIJSOEIg2
5VDaNJ3PJjnKyIJq0FDzp1xL/7hFEela+vO2UhC+p+ynTrvC5+jVC6dlsL/qZFHB
9fwNNXDhZTBD3ZRYzHbld2Yb2W314+58Zz+l/j71MYK1hBuDVz4cAJwOcogFPg9j
OcKX0ewMXxBOleAnobsPEcLyZ5qgu7M=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:04:54 2025 by rpki-client