This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc8c2dc3-51ba-3d78-a08b-d207fc478930.roa
File:                     fc8c2dc3-51ba-3d78-a08b-d207fc478930.roa (raw, json)
Hash identifier:          bH8LWXqo7cBBBxkjPEh3wv5Mq1/OqAjWatE6gixEkDw=
Subject key identifier:   2B:44:F7:C3:09:51:02:15:17:DC:0A:26:FF:CE:EA:EF:91:17:C0:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BEDB5EABB131AA239ECD93A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc8c2dc3-51ba-3d78-a08b-d207fc478930.roa
Signing time:             Fri 21 Nov 2025 02:00:30 +0000
ROA not before:           Fri 21 Nov 2025 02:00:30 +0000
ROA not after:            Thu 19 Feb 2026 02:00:30 +0000
asID:                     20940
IP address blocks:        23.32.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ed:b5:ea:bb:13:1a:a2:39:ec:d9:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 21 02:00:30 2025 GMT
            Not After : Feb 19 02:00:30 2026 GMT
        Subject: CN=7dc11546-a4a6-46ee-8419-321e09bea0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:60:b0:a3:5b:58:c0:ab:b4:73:dc:88:d2:
                    9b:3e:1a:82:9c:b7:90:69:ab:1d:dd:6b:dc:45:d7:
                    ca:c0:05:cc:23:97:12:bd:56:2f:ba:95:cc:92:e0:
                    a5:e4:dc:3e:ad:96:db:bc:61:04:90:16:4a:16:ef:
                    cf:73:08:2c:5d:bd:9d:42:54:4e:63:f8:b4:8f:6d:
                    f4:af:25:f7:41:a0:24:dc:fe:a7:c5:ef:9b:7d:fe:
                    31:68:2f:b9:d1:fd:6d:c4:db:8f:8f:f5:c4:af:09:
                    b1:a0:64:0d:7a:2b:b2:56:16:a8:5f:e4:2c:71:70:
                    25:8a:63:60:c1:07:64:a6:86:8e:b3:c7:a4:49:d5:
                    31:31:18:f8:87:f7:29:4f:03:46:d4:44:b5:0b:0a:
                    a0:d6:02:c8:60:3e:b2:8d:03:10:09:f2:50:e7:f6:
                    b9:f5:42:23:85:c0:52:0e:54:28:88:2b:a7:d7:63:
                    d4:7e:7a:da:e4:47:8e:aa:48:5b:5b:26:66:d4:31:
                    55:c9:81:e0:8c:9f:92:6b:54:cc:b6:09:3a:b9:a2:
                    bb:fa:d6:2e:31:99:2b:5f:3c:44:1b:0a:aa:2c:45:
                    a0:49:15:0e:5f:cc:b4:ab:f0:65:26:f1:d5:44:70:
                    f1:af:c9:97:64:73:a5:59:62:cd:8b:c3:d6:b1:c4:
                    84:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:44:F7:C3:09:51:02:15:17:DC:0A:26:FF:CE:EA:EF:91:17:C0:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc8c2dc3-51ba-3d78-a08b-d207fc478930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:ee:5e:19:ca:61:a5:31:fd:ed:36:0d:69:2f:ae:7d:ff:
         16:48:a3:c8:56:12:c3:1d:c9:b4:78:79:88:41:40:4c:d9:21:
         d6:c8:c8:4f:32:6c:9c:0d:68:73:6a:ad:02:06:96:10:35:77:
         a8:62:47:aa:87:f1:e5:22:59:8f:a5:c7:fb:76:de:f1:85:3b:
         90:bf:75:24:12:7c:c2:5c:20:43:7d:c1:38:08:71:66:73:af:
         12:b4:3f:91:91:86:9f:5c:ee:47:07:f2:e4:f2:95:c4:a7:51:
         ff:13:b1:00:22:2b:23:da:bf:af:64:06:ef:6f:a2:1e:38:20:
         98:78:b1:14:8f:9c:c1:b0:3d:cb:ee:60:3d:7e:fe:df:c4:0a:
         c3:8d:21:16:e4:db:bd:23:c1:92:b9:1e:0f:07:e3:84:46:87:
         73:1f:f9:58:64:96:e9:20:d1:1b:b5:b2:fb:c9:b6:b5:d4:56:
         5d:7b:a2:08:39:f3:20:80:6a:92:83:6a:97:36:05:f1:4c:94:
         3d:d0:2d:a5:08:07:12:a1:c4:64:b9:f3:77:fa:0b:52:2e:58:
         ab:cd:25:cd:41:4d:78:fe:49:29:6d:eb:48:8a:ff:fb:c3:ad:
         da:e4:38:12:e6:d4:7d:f2:07:58:46:8f:19:c1:72:08:df:ca:
         33:69:6d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:10:03 2025 by rpki-client