This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa
File:                     2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa (raw, json)
Hash identifier:          KtUKIeOJVZbYeyNKVjtwm8GylMYYzV+JBS6rm7B3yxA=
Subject key identifier:   66:1E:BE:47:EB:99:A4:AE:AF:8B:49:AA:95:89:D3:2C:9F:71:C1:5B
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584BC53B2F60CC4C613CBF6ED960
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa
Signing time:             Thu 06 Nov 2025 14:00:41 +0000
ROA not before:           Thu 06 Nov 2025 14:00:41 +0000
ROA not after:            Wed 04 Feb 2026 14:00:41 +0000
asID:                     399439
IP address blocks:        208.53.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:3b:2f:60:cc:4c:61:3c:bf:6e:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Nov  6 14:00:41 2025 GMT
            Not After : Feb  4 14:00:41 2026 GMT
        Subject: CN=edd8d9e5-4ed6-43b5-b339-a4c40a7ea648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:e8:93:c2:70:b8:4b:8f:02:91:68:94:d9:
                    e8:eb:35:52:b6:7b:1f:2f:31:99:18:30:bc:74:cc:
                    c6:43:d3:6c:ef:07:26:05:53:72:88:9e:73:c6:67:
                    a5:af:c7:16:63:53:98:f3:ef:0f:01:fe:a8:26:59:
                    da:d5:82:db:77:d1:11:5b:2e:c8:a4:64:40:a1:b4:
                    4a:cd:20:b3:55:19:52:36:fd:63:06:5b:fa:d9:3f:
                    5a:f4:2f:e8:9e:c6:8e:9f:58:ec:99:18:40:70:3f:
                    bf:93:c5:80:7e:27:3a:a3:31:df:5c:4f:3e:27:bf:
                    eb:19:7c:4a:59:1c:71:d0:ff:54:53:a4:89:67:4a:
                    72:6e:aa:ec:1f:d0:da:74:7b:f0:a0:d3:70:09:6a:
                    23:c4:6b:6c:2f:85:6a:4b:15:86:96:6e:6b:e3:23:
                    93:2b:e1:c6:c3:4a:d3:42:fd:59:95:fe:e9:40:91:
                    f8:1c:1f:71:ac:a4:a8:55:f3:2b:f6:75:72:96:14:
                    a4:81:ee:ed:1f:4b:38:bb:22:ad:0a:4a:6b:15:81:
                    69:72:71:6e:cf:83:5a:7a:38:fb:ce:92:be:fb:0f:
                    10:2d:bb:81:b5:b8:b7:53:55:5c:ff:2e:03:04:69:
                    b7:71:0a:2f:5c:ef:05:56:14:4b:f9:98:c6:de:63:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1E:BE:47:EB:99:A4:AE:AF:8B:49:AA:95:89:D3:2C:9F:71:C1:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:0c:62:40:0c:7b:c9:27:48:38:88:6d:df:74:38:c8:1f:15:
         4d:05:b0:f6:93:be:8d:6a:b4:76:9e:10:22:f2:9e:d9:16:2a:
         7f:1f:e5:c4:27:ab:59:56:26:81:3c:3e:29:17:d0:a3:1c:af:
         45:8e:77:99:ad:f2:f7:b0:a3:c6:90:b6:f7:7c:fd:f9:c4:a3:
         ac:44:cb:5e:38:ad:b5:bc:4c:b3:e5:65:12:00:bf:6e:14:a8:
         b9:0d:15:29:0f:17:ac:74:43:fd:a2:15:b0:7c:fc:33:09:de:
         16:a9:62:d6:73:e1:5a:fc:0e:68:63:49:a9:6f:c9:c6:12:a4:
         e3:0d:f7:ff:95:a8:ba:2a:ac:c2:17:9f:16:23:39:5e:1c:64:
         56:2e:25:ef:4e:de:4a:22:73:e5:34:c4:15:2f:cf:58:44:b5:
         a8:82:63:fb:6b:59:f0:4a:b4:71:8b:eb:a9:4d:5e:5b:24:db:
         c3:e2:ad:54:83:af:0a:29:4e:0a:b0:9c:c6:c9:f7:8b:c3:7d:
         f5:ca:40:15:a0:30:86:c0:56:35:92:f9:5a:c1:56:2d:1e:7c:
         d2:f7:16:4c:fe:25:b0:8a:b1:e1:61:02:62:12:81:50:d3:42:
         27:5c:55:86:bd:03:e4:c9:22:e7:ae:be:17:21:ba:84:27:a8:
         37:ed:3f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 14:29:17 2025 by rpki-client