This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa
File:                     ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa (raw, json)
Hash identifier:          bhkpj9ZqIgpV7psV/l+Ahx1JKRSbbFVEkhaLglpYa+s=
Subject key identifier:   24:55:AC:1E:6B:25:0C:6C:69:04:1B:93:4B:D1:59:AA:49:7B:BA:22
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584BCD9B232CD67743B630C94300
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     30238
IP address blocks:        23.90.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:23:2c:d6:77:43:b6:30:c9:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=d0d10a88-45e2-445b-97a6-06d73387ff00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:56:92:02:3f:96:06:03:de:43:e7:76:b7:
                    3b:8f:dd:90:82:65:ba:a7:02:6f:d5:c6:4b:9a:20:
                    90:27:d3:c2:f5:bb:bd:aa:5a:cc:2f:9e:34:55:6a:
                    dc:e6:d0:e7:c3:4f:36:13:c9:49:5e:e4:6b:92:92:
                    9f:2b:87:a8:83:8f:4f:59:91:0b:24:a9:2a:2f:46:
                    25:7f:bb:95:db:10:87:86:b6:74:e8:e6:57:33:3f:
                    9b:07:72:35:2f:fa:aa:f8:9b:9d:e9:02:5c:62:96:
                    77:ac:b7:d1:55:2b:80:bb:06:30:5a:17:4a:ce:30:
                    d1:50:5c:fd:d5:de:94:ec:69:c1:36:ee:07:18:a2:
                    79:5d:fb:07:7c:6d:53:91:42:dc:6e:5a:7e:70:af:
                    a3:20:f0:39:a7:d9:ec:47:67:97:fd:a3:17:08:32:
                    eb:0d:1d:4f:61:86:b3:35:22:7a:49:68:6a:69:9c:
                    a5:2b:88:4d:35:fa:6b:1c:3a:f2:1e:ef:04:19:29:
                    96:40:67:8a:65:ca:7e:2c:07:80:fd:dd:15:8e:f8:
                    a4:a9:31:51:99:12:15:d2:32:41:df:28:3e:ae:f1:
                    91:2b:45:4e:f1:89:e3:9c:74:fe:b0:3e:62:81:f9:
                    64:8b:ed:1f:e8:47:ea:20:52:a4:67:9a:30:82:f5:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:AC:1E:6B:25:0C:6C:69:04:1B:93:4B:D1:59:AA:49:7B:BA:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:68:e6:b2:ec:b3:c0:f9:9b:80:d7:da:39:a6:c8:ec:3d:
         cb:82:16:57:29:f3:05:50:05:0d:5c:78:67:3c:7d:84:82:35:
         09:50:d3:65:22:0d:78:8d:b5:7d:47:87:8f:f0:88:1f:43:3f:
         a7:fe:53:77:3b:48:65:fa:0e:1b:4e:d7:11:4a:4c:b3:72:08:
         5e:d4:f4:4e:27:8b:9e:b9:70:a6:2f:0c:29:b4:97:0c:f6:85:
         3f:37:c6:52:79:7a:cc:1a:ea:c5:e6:5a:0e:52:78:21:d2:17:
         f5:35:ae:d5:bc:1e:f6:d1:e9:6b:e5:6f:00:e6:ab:ee:d4:86:
         63:6d:f1:c0:0d:86:4d:ce:eb:33:dd:4c:49:50:4a:7c:58:74:
         8c:cd:db:d2:e1:21:be:04:0d:f2:17:fa:67:60:19:9f:dd:7d:
         02:17:72:4a:44:01:33:36:29:0e:8d:b5:97:07:e2:77:01:f2:
         17:d0:9a:38:01:32:1f:c5:7f:53:1b:8b:1f:d5:99:5e:b3:95:
         a0:a5:30:03:9f:9b:1d:74:07:a4:41:8c:10:9e:5b:fa:4c:e4:
         ee:34:26:b5:05:37:d4:93:97:1d:d6:04:5a:58:df:d5:89:87:
         6a:de:5e:02:56:d7:d8:95:34:da:c3:72:de:e6:21:8b:c6:51:
         69:4f:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 16:23:38 2025 by rpki-client