This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/05b80504-4242-3903-8d44-581058371550.roa
File:                     05b80504-4242-3903-8d44-581058371550.roa (raw, json)
Hash identifier:          cI//6xQmNjz3fxfCfSNXjhh4AtUkwgxcO1XfzsGUD+E=
Subject key identifier:   88:A2:32:3A:61:64:05:A6:37:60:9F:98:FE:BE:5A:47:3A:3D:00:5D
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584BDA2B070A269CA35FE8F7CA00
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/05b80504-4242-3903-8d44-581058371550.roa
Signing time:             Fri 14 Nov 2025 02:00:30 +0000
ROA not before:           Fri 14 Nov 2025 02:00:30 +0000
ROA not after:            Thu 12 Feb 2026 02:00:30 +0000
asID:                     19637
IP address blocks:        199.85.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:da:2b:07:0a:26:9c:a3:5f:e8:f7:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Nov 14 02:00:30 2025 GMT
            Not After : Feb 12 02:00:30 2026 GMT
        Subject: CN=e408dc40-b132-49d3-b685-780705819939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:42:ec:38:e4:97:b2:85:a7:80:51:35:5a:
                    78:dc:cf:cf:21:03:82:89:c7:f6:90:5f:a8:8d:56:
                    28:64:41:c5:a2:92:82:77:a6:c2:34:e6:94:55:24:
                    55:98:4b:bd:e6:57:ed:b4:2e:86:48:0f:0a:8e:3f:
                    10:bf:11:63:a4:5e:18:56:d4:b7:59:7f:26:23:75:
                    8a:ae:4b:46:1d:a6:6e:85:ae:9b:ca:85:8b:f6:3a:
                    42:4d:0a:3f:07:b2:74:e9:ce:2f:05:18:3c:c4:9f:
                    15:39:00:3b:11:f8:17:19:bf:58:a9:03:b9:e3:2e:
                    45:73:7b:a8:9c:db:b4:14:80:54:6c:5d:5a:8d:40:
                    db:c5:b4:be:d8:dc:51:11:f3:f5:57:a9:6c:66:b7:
                    70:34:51:3c:0a:e8:02:64:24:6d:48:5c:7c:4e:d1:
                    17:47:27:53:6c:44:8e:ff:b6:8b:c8:0c:96:cf:ab:
                    e9:cd:6b:b5:b1:e4:aa:cc:5d:b9:ca:e3:f5:34:9d:
                    b1:da:62:1c:57:81:c8:03:c4:82:b3:79:8a:f5:e1:
                    81:18:e2:09:77:4f:4c:f3:2d:bf:7d:59:cc:2d:12:
                    20:c9:b5:91:64:ae:0c:fb:a6:7f:12:68:2f:e2:c6:
                    9f:c9:56:80:d7:d5:ce:c8:bd:7a:d8:f2:d3:c3:ad:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:32:3A:61:64:05:A6:37:60:9F:98:FE:BE:5A:47:3A:3D:00:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/05b80504-4242-3903-8d44-581058371550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.85.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:be:3e:64:20:15:7a:e2:65:ca:5c:ea:f5:c2:00:1d:8e:e2:
         41:4e:02:51:f8:a2:66:61:c1:ed:39:12:31:5d:49:16:2a:a7:
         60:06:79:6d:50:70:f7:57:73:da:a1:b6:c2:4a:e8:7e:6c:80:
         b9:fb:5d:db:9b:61:f1:20:65:38:79:44:72:a5:7a:ae:c4:2c:
         8e:cb:06:75:3e:eb:5a:b5:49:51:ea:1f:fe:f0:ac:7a:a6:96:
         2e:16:4c:be:24:9c:fb:29:3e:6b:87:44:db:70:24:d3:7c:fd:
         49:3b:08:74:05:c4:5c:d3:7b:63:28:97:ca:df:ec:2f:d3:93:
         e7:64:d6:14:cf:84:76:e1:a0:0c:91:62:04:85:20:94:06:4d:
         a6:74:f4:bc:10:a4:2f:5e:94:c0:29:dd:c8:13:b5:61:42:22:
         c2:31:24:82:89:e6:9e:34:e2:f3:a1:19:82:ef:6c:2d:4d:12:
         08:e5:93:bd:01:87:cb:f0:cb:b7:a9:bb:f5:9b:35:18:de:a5:
         89:1b:b4:e9:c8:68:36:18:94:63:68:54:8b:de:0e:b9:26:ca:
         89:ff:50:e8:b8:44:7f:c0:77:d3:db:f4:ee:be:bb:b7:6e:f5:
         66:6c:01:97:17:aa:60:be:a0:d6:fd:81:c1:4e:0a:fb:7e:f0:
         e2:d3:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:44:50 2025 by rpki-client