This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a793511e-1915-30c1-a6d9-86de17256746.roa
File:                     a793511e-1915-30c1-a6d9-86de17256746.roa (raw, json)
Hash identifier:          aS/bQxXIMcniAEF4SfSfywDkamRCdo/k0ug0qZ7X44M=
Subject key identifier:   BB:34:61:17:80:F7:C5:E4:69:77:D2:B6:84:C5:C0:7C:FE:FA:05:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C3EABC3DAC2C33F9D20D73580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a793511e-1915-30c1-a6d9-86de17256746.roa
Signing time:             Sat 20 Dec 2025 02:00:31 +0000
ROA not before:           Sat 20 Dec 2025 02:00:31 +0000
ROA not after:            Fri 20 Mar 2026 01:00:31 +0000
asID:                     20940
IP address blocks:        23.217.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3e:ab:c3:da:c2:c3:3f:9d:20:d7:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 20 02:00:31 2025 GMT
            Not After : Mar 20 01:00:31 2026 GMT
        Subject: CN=f9c11970-6d50-4e12-ba29-838a42a2938e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:1e:9d:33:90:1e:bf:bb:e4:10:8c:af:e4:
                    5e:86:ee:68:34:36:d7:b3:36:4e:45:ff:f1:a7:3f:
                    44:af:be:12:ec:5b:c0:14:01:8d:fe:52:3e:58:a6:
                    38:c1:3c:bb:d0:46:78:ac:3c:09:39:78:2c:b5:59:
                    aa:52:56:e0:83:13:db:3b:7e:3e:45:32:2e:3b:09:
                    9a:96:fc:89:5e:2c:20:7c:71:95:a8:b3:37:6f:4f:
                    d0:0c:f8:dd:0e:00:a1:63:c6:a2:48:85:cf:44:c2:
                    7f:4a:cc:b6:8f:de:41:b1:03:80:e2:6c:63:88:e3:
                    70:51:2f:bb:78:ec:46:a6:65:53:0d:21:40:7a:c2:
                    1b:ef:95:1f:41:21:b1:b7:9f:8c:c2:b2:dd:6c:a5:
                    92:a9:6e:bc:0a:88:84:72:43:e2:81:13:d1:9e:b5:
                    c5:52:c1:4f:90:bc:44:90:a8:f5:dc:97:e4:c9:87:
                    d4:48:c0:8f:66:dd:c5:2d:dd:25:7f:c9:74:c2:a3:
                    52:85:5a:e5:69:52:2f:27:e2:0a:a3:71:39:d5:6f:
                    4a:c9:af:bf:40:be:9a:fe:cb:ca:6c:b4:1f:86:40:
                    92:de:d9:ec:18:d5:ae:55:e6:64:98:46:d8:7b:5c:
                    b4:9c:ca:27:92:e5:8d:2d:6f:d5:28:d8:1d:46:b3:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:34:61:17:80:F7:C5:E4:69:77:D2:B6:84:C5:C0:7C:FE:FA:05:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a793511e-1915-30c1-a6d9-86de17256746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.217.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:56:79:04:6c:6a:49:65:3e:21:64:25:bf:28:e6:a2:c3:d6:
         b0:cd:5b:35:17:1b:d0:b8:2c:a8:f5:3f:cf:3d:e8:47:e6:c5:
         3a:57:a0:ce:e7:5c:22:32:5e:ee:ad:e8:99:59:9b:0c:24:b0:
         a4:9d:16:96:a3:e7:cf:b7:21:bb:b7:e2:7f:42:40:16:76:b6:
         9d:eb:1c:c1:07:99:ae:a8:89:c4:47:8a:fb:13:36:c8:68:15:
         24:11:87:e3:4e:dc:66:45:f8:bd:82:29:7c:17:c1:96:ed:bb:
         10:3c:e5:84:4e:9e:be:88:c2:12:db:4c:07:4b:ee:89:00:d4:
         88:b3:9c:c5:cf:23:e7:de:e7:77:d1:cb:b6:2a:69:eb:d8:36:
         4b:89:16:25:e0:94:ec:24:53:f8:03:47:9e:71:15:04:95:6c:
         67:75:39:b8:44:24:5a:e0:89:cb:b9:d7:81:e8:f8:63:21:04:
         dd:15:aa:d3:d6:cb:cc:ec:bd:98:54:85:30:d3:5e:f9:e0:6b:
         1b:85:ce:db:6a:01:3b:9f:5a:21:5b:dc:6e:da:8e:16:6d:2d:
         75:a2:f9:1e:79:e6:62:57:2f:4f:74:40:56:82:f7:ee:9e:64:
         34:78:bd:49:30:14:af:bf:76:78:c4:b0:6d:de:e3:4a:3e:cf:
         fe:54:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 08:07:24 2026 by rpki-client