This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3e02f1a-7f9b-39d3-93e9-df62b07f2a32.roa
File:                     a3e02f1a-7f9b-39d3-93e9-df62b07f2a32.roa (raw, json)
Hash identifier:          lC+vJw1eGyRmfchgKbLnM7Mx+OZat35JiocEiVvXz0g=
Subject key identifier:   6A:64:4E:5E:8A:6C:E6:82:26:21:EA:2A:19:E0:AB:D3:A5:E7:46:1D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C26F0E5B3EE77664FCA986B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3e02f1a-7f9b-39d3-93e9-df62b07f2a32.roa
Signing time:             Thu 11 Dec 2025 14:00:39 +0000
ROA not before:           Thu 11 Dec 2025 14:00:39 +0000
ROA not after:            Wed 11 Mar 2026 13:00:39 +0000
asID:                     16625
IP address blocks:        23.199.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:26:f0:e5:b3:ee:77:66:4f:ca:98:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 11 14:00:39 2025 GMT
            Not After : Mar 11 13:00:39 2026 GMT
        Subject: CN=3995cdf0-c280-4908-9db1-7c96f4fd0617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:08:eb:6a:26:4c:c0:82:42:14:70:a5:33:
                    be:47:ac:6b:9a:da:8b:ed:d8:5a:38:f2:a5:b1:50:
                    a4:ec:95:f5:cb:2e:e8:58:0b:b9:92:cb:21:5f:1a:
                    7c:79:a4:b8:8f:5e:8c:21:4f:be:20:fc:58:4e:0b:
                    25:4c:0c:e0:d4:15:4c:bd:39:d5:f3:89:8f:05:04:
                    0e:28:8b:5d:ca:03:82:94:40:1f:3c:73:da:47:ff:
                    b6:66:f6:42:f5:4b:bf:88:11:dd:28:ee:e3:e2:95:
                    15:b2:41:89:72:5f:b0:f0:25:d1:11:f6:11:63:a3:
                    43:b8:4e:1d:9f:cf:ce:9e:21:92:a5:a3:3f:a7:2f:
                    74:6e:d7:3c:26:ea:d1:33:dd:2e:a7:5b:2e:d0:35:
                    27:fd:50:1e:a1:e5:07:93:ce:f0:9b:3b:12:dc:dc:
                    5e:1b:e9:73:0b:ba:72:a6:7f:66:76:64:32:5c:9c:
                    c2:bb:e8:ce:1a:9f:88:66:20:90:53:25:a2:e5:dc:
                    da:28:8d:95:b9:24:60:b7:47:da:e2:b2:80:be:e5:
                    17:11:01:12:f6:48:62:5b:f0:5f:e0:69:d9:ba:f7:
                    74:55:a7:16:23:56:7c:c1:59:1b:8b:40:7a:81:21:
                    fa:1e:cb:06:55:1d:97:77:ca:bc:8d:57:56:91:a1:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:64:4E:5E:8A:6C:E6:82:26:21:EA:2A:19:E0:AB:D3:A5:E7:46:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3e02f1a-7f9b-39d3-93e9-df62b07f2a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:35:a2:7a:df:bf:4d:1b:ad:91:33:82:42:31:f5:65:ee:3f:
         fd:a4:6d:26:87:e2:38:82:59:1e:1f:62:dc:95:98:cb:a5:ad:
         2c:55:2a:70:14:51:e2:b4:ef:37:77:8b:05:69:a8:cc:39:5d:
         1f:55:61:48:04:7c:fb:0d:d8:b0:51:9e:02:a6:2a:d4:91:34:
         c4:17:19:1f:39:ad:3b:93:1b:ea:82:58:e2:0a:98:3a:dc:81:
         43:df:3d:a8:ef:af:51:df:59:fc:8e:00:9f:27:7d:e2:d6:fa:
         c3:eb:8a:6f:8e:dd:26:df:1f:aa:f4:d9:07:ca:95:44:3c:c4:
         f8:0e:42:48:da:9a:42:2b:73:18:aa:a4:8f:d4:80:02:62:65:
         4f:d7:38:db:45:f6:47:75:38:c4:78:13:c9:6f:92:da:9a:e0:
         ab:66:33:e6:68:4f:75:08:d4:6a:18:66:a2:9e:51:5c:5c:66:
         27:12:9d:a5:e1:4f:74:47:d9:6f:f7:d6:ad:2a:95:f3:5a:df:
         3b:d2:49:59:fc:aa:12:95:95:ea:c7:89:19:ff:b1:0b:2c:e0:
         fb:cf:bf:30:96:04:e6:33:e3:a4:23:ca:d0:4a:79:c7:6a:99:
         7b:60:77:f3:56:0b:5a:72:29:1c:17:a1:4b:a2:c2:82:99:ba:
         82:7a:99:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:47:21 2025 by rpki-client