This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa
File:                     989d0448-cf0d-3fdf-a782-65bf875466d4.roa (raw, json)
Hash identifier:          ZIw3pCWFkZAuEw+p4QkKQaXVv63hn38XLs05nImrnmI=
Subject key identifier:   FF:BC:BE:52:AB:6D:2B:1D:94:A2:80:3D:BC:48:FE:A2:EB:A6:85:C3
Certificate issuer:       /CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a
Certificate serial:       010D0C9F4328584BF1E5EFA55B53CE436FD7C780
Authority key identifier: 10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa
Signing time:             Sat 22 Nov 2025 14:00:39 +0000
ROA not before:           Sat 22 Nov 2025 14:00:39 +0000
ROA not after:            Fri 20 Feb 2026 14:00:39 +0000
asID:                     395497
IP address blocks:        23.166.152.0/24 maxlen: 32
                          2602:f9d6::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f1:e5:ef:a5:5b:53:ce:43:6f:d7:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a
        Validity
            Not Before: Nov 22 14:00:39 2025 GMT
            Not After : Feb 20 14:00:39 2026 GMT
        Subject: CN=b2eb0772-80ad-4154-bfc5-637ce4c3931f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:27:a4:37:44:6f:bf:cf:cf:bf:fa:a2:7c:b5:
                    e1:dc:70:ce:25:b3:3e:40:60:5d:49:ef:29:2b:ff:
                    18:8f:18:3d:d5:8c:20:45:23:6c:6c:69:63:20:25:
                    d5:d6:13:59:72:40:3b:70:42:f5:57:28:fe:c8:b3:
                    98:7a:a4:af:bd:8b:51:71:3e:39:cd:bd:e9:11:76:
                    34:20:9f:c7:ab:b2:b0:6f:94:a0:b1:b2:8e:2d:1e:
                    f4:5f:21:c2:e1:0c:3f:4b:2b:11:62:08:19:01:ea:
                    7b:60:e1:64:65:f0:30:47:d2:28:53:4b:1d:c3:e8:
                    fa:34:90:ee:7d:fc:cd:b3:31:c3:0f:d5:f4:a4:58:
                    37:e9:b1:fd:59:89:66:10:6b:63:93:ca:41:b8:b3:
                    f8:23:cd:1f:41:ce:ec:48:55:bc:27:99:68:75:72:
                    8f:0a:ea:27:3b:7f:30:ad:71:e0:42:1c:0e:07:ee:
                    aa:5c:a6:42:3e:e8:9a:e5:13:c7:1b:a4:d7:af:73:
                    8c:fb:25:c1:dd:1e:20:44:a2:7e:61:da:53:ab:ff:
                    3b:de:5c:60:84:ca:9b:fc:25:39:83:65:a3:11:8e:
                    77:4c:30:af:49:ab:0e:64:3e:f7:27:9d:ab:10:3f:
                    3b:cb:33:fc:8f:be:b5:97:f9:17:8e:4f:4b:95:70:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:BE:52:AB:6D:2B:1D:94:A2:80:3D:BC:48:FE:A2:EB:A6:85:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl

            X509v3 Authority Key Identifier:
                keyid:10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.152.0/24
                IPv6:
                  2602:f9d6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:07:8e:1a:8b:9d:6e:be:c3:a9:41:73:8d:a8:1b:54:84:91:
         a7:5b:2f:72:ec:82:cc:31:d8:6b:c1:e9:89:21:c3:d7:9c:9d:
         b1:ea:a8:83:75:39:b7:73:38:86:88:63:2a:a1:a8:c1:35:df:
         a5:9f:45:fe:95:7d:ea:ff:2f:3d:96:b4:57:c9:51:3b:73:03:
         16:46:0b:56:9b:49:92:b6:23:41:85:d3:da:82:6f:f6:2f:7a:
         26:41:13:a2:34:88:26:3f:9f:56:b8:f8:e3:3d:83:fc:2f:4c:
         a6:91:4a:fb:22:28:ed:4b:2a:1b:2a:75:2b:cd:31:28:4e:4f:
         6b:02:52:23:8c:21:cc:a1:02:a3:83:e7:07:c8:eb:22:fe:a5:
         71:01:c9:25:8c:55:46:97:bc:11:dc:0d:df:ee:9d:07:67:4f:
         7d:4e:6b:0c:9d:60:99:dc:31:3a:80:ca:b7:5d:cb:fb:9f:94:
         ad:af:ff:51:55:8a:59:43:8f:cb:02:21:af:d0:5c:5b:95:2f:
         96:b2:f0:9c:0a:8e:10:d1:b1:fc:06:0e:01:81:5f:1c:ef:85:
         2e:e1:9f:3a:49:25:9d:7d:22:36:65:f9:fe:c8:69:23:63:e7:
         6d:a5:d5:cc:af:f5:76:57:70:7b:15:0a:24:2c:ef:b7:01:e4:
         fd:66:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:20:51 2025 by rpki-client