This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
File:                     843cf6ab-c96b-3e76-be87-2bea83664ff9.roa (raw, json)
Hash identifier:          cn1OJyWIEnSx1IGsaQF1LOhSGRc9P37hNq5MJbRokvA=
Subject key identifier:   B7:BF:4F:34:D5:16:0E:76:E7:9B:AB:96:D0:50:BD:94:2E:A2:F8:3B
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584BCD9B14295CB325FBD03FB980
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     397994
IP address blocks:        23.136.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:14:29:5c:b3:25:fb:d0:3f:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=14da0f77-0c23-4ebc-918f-d9d3696f940e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:0c:25:6b:90:35:78:9d:f3:cf:db:8f:7e:
                    91:88:29:ff:47:e4:21:e4:c6:25:8c:a8:25:7a:f8:
                    01:b5:95:ad:fa:04:6e:75:5d:be:10:af:66:86:ec:
                    d5:2d:bc:c4:25:41:e9:03:94:78:5b:ad:02:9b:bc:
                    12:ec:a2:67:ba:90:25:0c:0f:96:93:57:86:77:f4:
                    f3:d8:2f:f0:a0:56:ed:6c:46:0a:b5:1b:04:1b:32:
                    c7:00:5b:48:f3:f4:7c:ce:34:c7:3e:96:b9:43:ed:
                    7a:2d:58:26:82:7c:e4:79:78:ba:69:f1:e8:6c:be:
                    53:36:c9:66:64:bb:49:5d:7d:9d:4f:98:64:ad:59:
                    4f:3d:b8:fc:9c:f6:8a:a7:2a:25:78:b2:85:ee:ab:
                    a1:66:20:44:f0:fe:48:1b:d3:97:c4:26:e6:54:52:
                    9c:23:46:c0:da:23:ba:c2:91:90:09:1d:db:8d:9d:
                    34:d6:fa:53:32:d6:69:12:bd:30:2c:48:9e:1c:55:
                    e4:87:84:9d:90:6c:a1:cf:ca:31:92:00:96:66:9c:
                    03:31:dd:59:d3:bb:87:45:5c:69:01:16:08:82:be:
                    20:40:9a:eb:d7:f4:0c:ca:be:6f:96:ca:85:ac:f5:
                    05:d7:3f:72:2c:1f:0f:f4:3a:6d:d2:56:ee:52:0e:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BF:4F:34:D5:16:0E:76:E7:9B:AB:96:D0:50:BD:94:2E:A2:F8:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:4a:f8:8e:bc:fb:43:9d:49:d1:45:e1:cc:45:c8:3e:50:
         c6:bc:47:47:93:3b:66:cf:33:5f:6b:74:a4:d0:02:af:e3:a0:
         aa:c0:d9:17:b6:83:b5:ab:59:e8:60:c1:38:f9:75:88:fe:18:
         24:89:24:31:6e:42:3d:ef:c4:e1:ab:bf:d8:34:2c:11:22:bb:
         fc:67:4b:6b:7e:0b:46:54:c0:a9:d8:5d:c7:fa:86:bd:21:92:
         67:38:5f:86:53:6a:1d:0e:3c:7c:4b:de:94:e8:ad:96:01:9a:
         14:1b:b4:79:2a:07:56:a4:39:3a:9b:58:02:6c:c7:b5:32:da:
         ec:da:aa:5c:0d:42:ad:c4:f6:4c:ba:53:c3:e8:9a:f2:50:cc:
         4d:60:22:73:5c:5c:48:de:6b:ce:a0:07:d3:85:b3:7f:88:3e:
         c6:b4:a0:27:5a:fd:44:71:aa:20:e7:42:af:4a:15:be:cc:c7:
         ec:ea:c5:6c:cd:0e:60:97:e7:cd:16:a2:83:88:77:50:5b:4d:
         d2:9a:0f:4b:91:78:f8:bd:d2:8c:89:38:67:ca:4b:2c:bf:e1:
         0e:a7:4f:f1:7b:94:96:83:e2:25:6a:c0:64:f6:60:25:22:51:
         a8:bf:78:d1:9c:81:5c:90:e4:76:7b:bb:2a:3d:92:29:d9:33:
         0a:58:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 07:24:08 2025 by rpki-client