This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32600323-0beb-328f-91a4-f8f92584724f.roa
File:                     32600323-0beb-328f-91a4-f8f92584724f.roa (raw, json)
Hash identifier:          RKeXjWALcs066ZY+sTH5SXAde0BVZkCizmnpmBMk4XI=
Subject key identifier:   E7:09:46:D7:5A:20:CA:06:1C:50:95:08:B0:8B:AF:12:AB:86:8B:64
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C6B56A0D5A593B5B397796980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32600323-0beb-328f-91a4-f8f92584724f.roa
Signing time:             Mon 05 Jan 2026 02:00:31 +0000
ROA not before:           Mon 05 Jan 2026 02:00:31 +0000
ROA not after:            Sun 05 Apr 2026 01:00:31 +0000
asID:                     32787
IP address blocks:        23.40.107.0/24 maxlen: 24
                          23.45.89.0/24 maxlen: 24
                          23.57.97.0/24 maxlen: 24
                          23.57.99.0/24 maxlen: 24
                          23.57.106.0/24 maxlen: 24
                          23.57.107.0/24 maxlen: 24
                          2606:6c00:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6b:56:a0:d5:a5:93:b5:b3:97:79:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  5 02:00:31 2026 GMT
            Not After : Apr  5 01:00:31 2026 GMT
        Subject: CN=29c11ba4-64f7-4096-a439-9de0aa28b101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:93:9b:1e:0b:6d:5c:09:d7:b9:93:03:dd:
                    92:82:00:db:1a:9d:0a:e7:cc:a2:47:fd:39:18:5b:
                    b5:78:43:db:fb:7c:e2:e7:f7:f5:6c:dc:52:6a:70:
                    63:f2:65:85:5c:06:64:b8:6d:80:03:a5:4e:e2:a4:
                    9a:82:76:ac:bb:0e:aa:db:fb:3b:fe:9e:af:0c:7e:
                    2e:f8:d5:71:2f:29:a9:d9:0b:bb:c1:99:5f:d1:dc:
                    cd:01:df:e6:dd:1a:b8:9f:38:18:49:c0:38:13:bc:
                    34:ee:6a:09:33:1c:a9:31:a4:e6:f4:48:66:ff:73:
                    10:82:89:f1:df:0c:6d:11:52:8e:d4:86:2b:a8:5f:
                    03:f7:17:2d:f3:2b:73:0d:0a:3f:25:79:65:5a:e8:
                    cf:62:c9:ed:6b:d6:a2:65:94:03:4e:75:ee:40:19:
                    43:00:fe:14:70:b7:9f:16:1c:87:69:49:66:b7:66:
                    2e:d6:18:8d:79:09:a3:5b:19:b3:c9:00:dd:39:fb:
                    09:a2:25:02:c1:e8:31:50:0b:17:92:e1:34:61:59:
                    22:92:67:bb:df:a8:5a:11:f1:fd:fc:0a:ec:8b:ef:
                    27:65:27:51:6f:44:16:08:5a:f9:d0:8c:84:4f:69:
                    db:70:c6:4c:4f:e0:69:ab:10:83:08:3a:8d:e2:49:
                    f9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:09:46:D7:5A:20:CA:06:1C:50:95:08:B0:8B:AF:12:AB:86:8B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32600323-0beb-328f-91a4-f8f92584724f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.107.0/24
                  23.45.89.0/24
                  23.57.97.0/24
                  23.57.99.0/24
                  23.57.106.0/23
                IPv6:
                  2606:6c00:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:89:e3:2f:f8:91:33:a1:9d:17:e2:d3:96:71:fd:2b:f6:b5:
         a9:07:1e:6f:e8:0f:df:2a:cf:5d:6a:60:52:28:60:0f:db:1d:
         f6:24:54:1e:02:bf:3c:48:cb:08:3b:88:67:f9:f7:7b:54:07:
         9d:67:1c:b2:26:a3:e5:0c:52:07:30:b6:db:cb:2e:e4:87:be:
         3d:ae:22:aa:37:1e:a9:0e:6c:d9:80:7f:be:90:9f:4e:07:8c:
         dd:96:79:86:5b:27:86:40:b1:a6:3c:99:e5:60:1b:65:4b:55:
         21:3c:67:10:9c:d7:9e:a6:12:14:f1:62:60:48:82:7a:0a:53:
         05:7c:32:20:eb:9a:6b:8a:76:c3:e0:d3:5a:c9:87:4f:aa:ef:
         e8:6e:75:8e:27:79:22:f0:fb:c5:6a:8a:68:99:3c:d1:72:dd:
         83:be:91:fb:3d:a2:17:45:6a:96:63:75:61:9a:a9:05:7a:07:
         4f:f7:a0:5a:99:3d:21:cb:56:4e:80:50:1b:9f:25:da:34:6b:
         17:c7:61:a0:b7:99:92:07:37:bc:2c:a1:c4:bd:9e:8b:ef:ad:
         20:b4:72:5e:f7:09:02:d0:32:d6:2f:40:fc:7d:9c:61:d8:b3:
         7b:e7:4a:be:cf:74:4d:d2:c5:44:34:51:19:84:00:ed:cd:31:
         00:11:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 08:01:36 2026 by rpki-client