This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa
File:                     f30842c9-2946-3389-a971-2942db75d63c.roa (raw, json)
Hash identifier:          ZL3fJI3FNOoJ+tKR2QVhrdYPH9+UuSRno+igFJ4pm38=
Subject key identifier:   00:58:88:73:D0:CC:B8:D0:A9:90:FA:90:1B:3A:85:F4:75:11:25:0C
Certificate issuer:       /CN=7bb7623d-5096-425c-aeab-03e71deea5ce
Certificate serial:       010D0C9F4328584BCD9B1BFF205C804B79D6C780
Authority key identifier: 40:0E:60:E1:4F:A2:B4:E1:27:1A:80:DE:C7:EC:3E:8B:DA:C1:77:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     46705
IP address blocks:        23.171.40.0/24 maxlen: 24
                          2607:88c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/7bb7623d-5096-425c-aeab-03e71deea5ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/7bb7623d-5096-425c-aeab-03e71deea5ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:1b:ff:20:5c:80:4b:79:d6:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb7623d-5096-425c-aeab-03e71deea5ce
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=76ff1fae-17a2-406d-a079-9b35cca6886f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:02:83:f5:74:6f:c3:8e:74:30:7b:3b:f5:
                    63:75:99:9f:2d:87:3f:f2:68:b9:c6:41:b3:54:ad:
                    4b:cd:76:6f:b3:94:5f:b9:23:67:1c:47:a1:ba:09:
                    03:c7:f7:49:a9:ea:2a:d8:72:2b:2d:27:e9:43:e7:
                    38:7f:df:91:71:90:7f:da:28:fd:2b:7a:6d:6d:ab:
                    ae:f2:cd:68:b1:86:d4:73:37:3d:df:97:4d:6c:5f:
                    11:ac:8a:fd:83:bd:ee:56:50:fb:5f:b9:dc:60:32:
                    bf:e8:c8:ee:62:97:06:d4:c1:fe:49:41:f3:1f:4a:
                    6a:56:fa:c6:11:0c:e2:19:d1:f4:a0:b8:e0:bc:32:
                    19:97:b6:13:b1:31:09:8d:3c:6c:c8:b4:32:ef:21:
                    92:ef:42:0d:59:b0:93:a2:56:e7:ac:92:1b:6f:88:
                    f2:38:3e:56:d8:31:e6:4d:5e:30:e2:79:af:4d:90:
                    e8:0f:45:79:8b:bd:cd:f3:9c:af:e3:ff:0e:b2:ec:
                    4b:b2:88:f7:fe:ec:8c:51:a9:1b:23:fa:dc:8f:08:
                    39:79:38:3c:53:f5:47:1b:a7:e1:16:85:be:5b:f3:
                    2b:26:6d:28:78:df:59:8d:6c:9f:21:56:2f:c2:ce:
                    4c:17:be:9e:f9:1c:8e:0b:2b:2d:d7:c6:f5:9e:3a:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:58:88:73:D0:CC:B8:D0:A9:90:FA:90:1B:3A:85:F4:75:11:25:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/7bb7623d-5096-425c-aeab-03e71deea5ce.crl

            X509v3 Authority Key Identifier:
                keyid:40:0E:60:E1:4F:A2:B4:E1:27:1A:80:DE:C7:EC:3E:8B:DA:C1:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.40.0/24
                IPv6:
                  2607:88c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:f2:6f:cd:2e:44:0a:20:a1:19:fd:e5:5a:15:9c:bc:d5:
         a0:e8:53:35:00:7b:84:98:d0:03:43:d2:86:48:ca:d5:2e:8e:
         81:1a:80:d7:a1:77:5d:4c:70:9b:02:80:ad:2d:8f:c3:8d:ad:
         13:f9:15:2b:e2:10:15:15:2f:5d:be:ec:9b:41:29:aa:e9:2e:
         6d:18:1f:6c:f3:53:1b:e2:e7:2d:de:e1:76:5e:72:c4:83:1d:
         db:12:70:d2:25:c7:5d:f8:f5:4b:02:aa:e2:bd:87:11:28:31:
         07:18:a8:4a:5b:fc:3f:0b:fa:a7:ee:43:9b:b5:fe:6a:82:49:
         e4:83:f3:f9:78:aa:d1:10:83:76:73:13:0d:18:2b:1f:1c:29:
         62:9c:75:5d:c0:c3:a7:f0:2f:42:5a:76:83:ed:bf:48:c5:f2:
         43:57:ff:9b:56:38:c5:16:81:8e:5a:e4:b3:be:32:94:58:eb:
         9d:c5:f6:55:ee:42:a4:f3:35:24:00:c1:f3:74:9a:02:35:ce:
         85:6f:0d:fc:99:27:d0:a0:44:5e:b3:6f:1f:5a:7e:6e:61:ac:
         e4:07:75:33:6c:8f:23:6f:0e:6c:b0:62:9b:d8:3e:c2:94:ed:
         32:88:c3:27:12:f5:4d:10:1c:a1:20:d8:10:9b:4c:8d:42:86:
         9d:40:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 08:32:48 2025 by rpki-client