This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/863f00d3-0369-3e82-aee6-58fe03be78e9.roa
File:                     863f00d3-0369-3e82-aee6-58fe03be78e9.roa (raw, json)
Hash identifier:          jubLADwqBpu75kiFT/a2UbZJYU/N3kei0G0sKKfG2qI=
Subject key identifier:   A1:DB:10:E2:F6:BB:84:BC:5B:E8:99:CD:15:AB:5D:24:51:9F:A5:53
Certificate issuer:       /CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3
Certificate serial:       010D0C9F4328584BE6BB24106C9ED391695C4B80
Authority key identifier: 72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/863f00d3-0369-3e82-aee6-58fe03be78e9.roa
Signing time:             Tue 18 Nov 2025 14:00:38 +0000
ROA not before:           Tue 18 Nov 2025 14:00:38 +0000
ROA not after:            Mon 16 Feb 2026 14:00:38 +0000
asID:                     401553
IP address blocks:        23.131.124.0/24 maxlen: 24
                          2602:f75e::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e6:bb:24:10:6c:9e:d3:91:69:5c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3
        Validity
            Not Before: Nov 18 14:00:38 2025 GMT
            Not After : Feb 16 14:00:38 2026 GMT
        Subject: CN=985eebb8-d21f-4373-9504-c6eba08e87a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:3f:36:e7:04:63:e5:65:52:53:11:a8:0a:
                    12:15:55:25:e8:98:38:8e:c4:b3:ff:ab:0b:7b:3d:
                    00:0c:77:77:4d:38:94:a5:fb:9d:81:8e:e9:a5:fb:
                    fc:4f:cb:2a:ea:03:c9:ce:52:ac:88:cf:31:98:84:
                    3f:30:0a:63:9b:d8:84:48:cb:04:c0:20:52:24:73:
                    47:4c:df:24:a7:dc:e8:4c:5f:ff:46:66:30:b5:c6:
                    ee:d5:b7:86:d5:01:ff:26:0b:44:ff:85:98:77:55:
                    bc:3e:1f:57:a7:77:6e:e7:2e:6e:fe:f3:6b:fe:f0:
                    7f:3e:3e:28:46:37:b3:90:93:2d:75:32:b6:98:b8:
                    76:f2:47:9e:a5:a0:e0:94:ae:6f:cb:c4:17:20:c4:
                    ff:a3:94:74:35:26:44:d6:2e:29:27:24:64:59:42:
                    3e:11:89:96:d0:47:ee:1a:45:e1:8d:8a:1a:a5:e9:
                    ec:f4:b8:77:84:ed:a3:dd:dc:13:6a:0b:c3:00:a0:
                    c7:9a:ea:98:b2:27:f0:84:85:87:4d:08:91:7e:3d:
                    5c:89:ba:fb:0e:32:6d:a5:47:88:3d:1b:c4:2d:c7:
                    d8:a9:19:f3:dd:86:78:c4:2e:cb:82:d9:2a:04:52:
                    a9:93:14:93:7b:5b:9d:2e:20:a8:17:28:ef:2c:c0:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:10:E2:F6:BB:84:BC:5B:E8:99:CD:15:AB:5D:24:51:9F:A5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/863f00d3-0369-3e82-aee6-58fe03be78e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl

            X509v3 Authority Key Identifier:
                keyid:72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.124.0/24
                IPv6:
                  2602:f75e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:95:85:03:81:9e:7c:0a:fb:cd:23:f6:dd:d8:3f:0b:ce:
         bf:b4:5d:96:44:bb:7d:90:9a:ad:bc:a0:fa:fd:d9:39:70:1b:
         bf:62:4a:b3:e0:f2:72:0c:d4:50:49:da:63:15:b1:a8:b6:13:
         78:16:a0:67:2b:0a:83:20:2c:52:c5:37:6e:4e:de:82:93:c8:
         39:3c:3b:b7:f5:0c:e7:90:65:8b:61:e7:4b:79:e3:e6:e8:ad:
         32:27:ab:e1:e5:08:79:aa:a7:fc:1b:b1:d4:5c:a9:34:6b:29:
         96:5a:81:16:46:87:e6:32:1e:9e:6d:a0:04:47:ca:4e:db:9f:
         99:4b:65:f1:60:61:b9:25:7a:2a:b9:7c:31:9d:56:7a:7b:fb:
         24:9c:7d:17:64:83:f7:22:66:c3:35:66:6d:42:14:c1:f8:1f:
         4e:33:b3:75:04:2f:b0:b8:a6:c0:88:eb:d9:2b:6b:e7:8f:6f:
         6e:03:aa:b6:d6:84:45:58:a5:c6:82:bb:6c:f8:13:c1:a5:a6:
         c6:0e:1f:24:40:65:4d:0c:1c:53:ea:31:c3:da:44:14:99:88:
         d6:aa:37:df:e2:a8:b1:23:be:d4:78:04:95:64:2c:cb:25:2d:
         3e:a2:b3:54:56:8b:c5:ab:75:9d:a1:6d:1a:29:4a:0a:8a:50:
         83:bf:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 09:53:09 2025 by rpki-client