This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa
File:                     AS23273.roa (raw, json)
Hash identifier:          2PAiPJEzfF29jtKx+2FUuuH4nvdd5mE+IrGqaCWD4nQ=
Subject key identifier:   C3:0D:69:54:98:2A:47:78:96:83:57:3E:7D:B1:79:0D:78:B4:8C:F5
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2F9E83CD8E9F1540073613D4701DD53B009164DF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa
Signing time:             Wed 10 Dec 2025 16:56:55 +0000
ROA not before:           Wed 10 Dec 2025 16:51:55 +0000
ROA not after:            Wed 09 Dec 2026 16:56:55 +0000
asID:                     23273
IP address blocks:        69.12.66.0/24 maxlen: 24
                          107.150.4.0/24 maxlen: 24
                          155.94.128.0/24 maxlen: 24
                          155.94.167.0/24 maxlen: 24
                          172.96.180.0/22 maxlen: 24
                          192.161.49.0/24 maxlen: 24
                          192.161.167.0/24 maxlen: 24
                          204.44.192.0/20 maxlen: 24
                          2605:6f0f::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 02:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9e:83:cd:8e:9f:15:40:07:36:13:d4:70:1d:d5:3b:00:91:64:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec 10 16:51:55 2025 GMT
            Not After : Dec  9 16:56:55 2026 GMT
        Subject: CN=C30D6954982A47789683573E7DB1790D78B48CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:7e:6c:0b:71:53:81:fe:8d:1d:b2:00:d9:
                    ec:d9:dc:e5:f6:40:e2:31:a6:f7:5a:83:12:8e:18:
                    9f:85:3d:77:ec:e7:4e:7c:ee:ee:ca:e5:cb:c8:31:
                    d4:cc:cd:f6:f8:62:f0:07:0a:e1:da:0b:9f:ec:d8:
                    50:07:23:59:99:1e:1a:73:8d:1f:cc:bb:d7:3d:8d:
                    be:7b:be:39:23:46:c3:6c:a9:9f:f8:9d:6d:5d:b4:
                    2a:88:c6:ac:bf:0e:d4:1a:06:2c:ef:02:e1:45:5a:
                    8c:60:c1:f1:de:7e:fb:f5:cf:c0:6c:de:6d:fa:ae:
                    cb:de:14:9d:55:7a:f0:93:33:52:0f:4b:6e:bf:54:
                    f6:4e:30:a9:0e:46:e6:b6:3a:42:32:22:52:84:11:
                    9b:1f:9c:c4:04:78:08:86:1d:8f:2c:a8:47:41:b1:
                    78:f2:16:5f:86:68:85:d8:66:38:bb:1a:87:4d:81:
                    26:8d:8c:38:13:22:3c:19:78:f0:81:2a:05:66:6a:
                    f0:84:2e:03:0c:ee:73:a6:26:23:1a:a6:73:47:5d:
                    c9:ed:80:6f:3f:99:3c:ff:98:db:dc:f6:c7:e0:13:
                    36:6d:45:1c:a2:eb:c0:39:ec:d9:c5:03:73:bf:ba:
                    1d:7a:ea:94:a6:7a:a0:0a:72:f6:b9:57:96:bb:5d:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0D:69:54:98:2A:47:78:96:83:57:3E:7D:B1:79:0D:78:B4:8C:F5
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.66.0/24
                  107.150.4.0/24
                  155.94.128.0/24
                  155.94.167.0/24
                  172.96.180.0/22
                  192.161.49.0/24
                  192.161.167.0/24
                  204.44.192.0/20
                IPv6:
                  2605:6f0f::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:e6:45:da:9e:08:f6:a5:ae:6d:06:87:62:1a:cd:c2:e5:f8:
         23:21:75:9e:fc:86:be:60:ec:38:4f:e5:b3:f2:26:b7:7b:d4:
         d5:31:fa:8b:18:da:4b:4a:4a:f1:f2:ae:0b:9b:92:01:f1:6c:
         fe:29:73:80:56:aa:04:82:01:75:41:60:71:da:37:34:3d:41:
         56:29:9b:90:9b:1e:9b:bb:1e:6a:e8:0c:49:8e:14:6c:af:da:
         a9:8e:87:a4:d4:4e:5f:46:4b:0c:63:d9:75:d5:d4:79:82:63:
         90:8d:3d:b1:76:94:b9:08:4e:21:92:54:a8:8d:74:eb:90:9d:
         60:5f:f9:25:0b:ba:83:13:20:03:a6:71:04:6c:44:34:71:05:
         5d:d8:53:a7:b6:67:d1:73:90:5e:bf:c6:57:9c:fd:09:bb:ef:
         92:fc:6c:50:ec:26:a2:7b:23:1a:ca:a4:ff:f8:0d:94:e9:46:
         53:53:c2:4d:c3:4e:bd:44:36:61:51:dd:69:1f:3e:32:54:97:
         0e:da:8f:46:38:78:59:24:cc:06:86:67:2f:b1:80:20:5b:af:
         00:bc:02:cd:3f:27:a0:d6:0c:90:1d:c0:a6:33:9f:24:80:97:
         7c:9d:71:cf:82:22:ce:e7:18:11:d8:d3:6f:2f:d5:f4:a1:e2:
         6f:6f:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:54:29 2025 by rpki-client