This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa
File:                     47c9278e-dc66-39c2-884a-deec4ee4f615.roa (raw, json)
Hash identifier:          kj21+kbn1msiBi8YexNFvGoidrmRCY8RV64fXH2WUEw=
Subject key identifier:   EF:9D:4C:58:80:44:F1:D2:9A:9F:87:EE:CD:55:F8:35:9F:D5:F4:F8
Certificate issuer:       /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
Certificate serial:       010D0C9F4328584C3BE102DBF14644BC98520580
Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa
Signing time:             Fri 19 Dec 2025 02:00:31 +0000
ROA not before:           Fri 19 Dec 2025 02:00:31 +0000
ROA not after:            Thu 19 Mar 2026 01:00:31 +0000
asID:                     20473
IP address blocks:        23.158.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Jan 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3b:e1:02:db:f1:46:44:bc:98:52:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
        Validity
            Not Before: Dec 19 02:00:31 2025 GMT
            Not After : Mar 19 01:00:31 2026 GMT
        Subject: CN=d30d4d79-3bf1-4707-a3f9-70a8a09755bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:aa:4c:a6:67:a6:67:35:35:01:8e:37:9d:
                    25:75:b0:40:4f:31:dc:7b:9a:db:ca:c5:05:ea:87:
                    25:d2:1b:1c:67:95:cc:1f:c5:24:0e:17:8b:09:b9:
                    48:80:76:ae:77:cb:9e:a0:13:37:2b:12:a1:58:51:
                    a4:7e:15:41:01:67:03:47:96:81:d1:ad:55:6f:48:
                    ea:d5:9a:4f:56:7d:d5:8e:5e:22:58:c1:67:a9:46:
                    e2:30:b3:df:f6:1b:8b:71:51:39:23:35:7f:80:5b:
                    c4:8d:19:f9:ff:3a:17:78:40:28:28:5b:21:3e:4d:
                    db:34:71:b9:bf:11:34:92:46:b9:0d:2d:49:a9:e9:
                    45:c9:fe:78:f2:80:d0:4a:67:cb:e0:c7:8e:41:68:
                    9e:9a:ac:e1:dc:80:a7:14:66:be:5e:7a:a7:2a:36:
                    06:1d:3b:f0:7b:e0:f2:45:a4:19:a2:44:e4:31:04:
                    f0:d8:3e:69:fe:43:6e:17:9d:ec:c9:21:a1:e2:cc:
                    14:36:a4:62:3a:3e:d9:31:0c:f2:22:8b:4d:ca:53:
                    56:45:f4:12:04:32:6b:f1:d2:29:a4:ed:4f:6a:ab:
                    c3:7b:71:46:a1:b7:34:d7:7c:dd:59:12:59:89:99:
                    39:6b:ec:78:34:8a:f8:9a:32:b2:ab:d7:f7:da:70:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9D:4C:58:80:44:F1:D2:9A:9F:87:EE:CD:55:F8:35:9F:D5:F4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl

            X509v3 Authority Key Identifier:
                keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:5a:80:c4:c5:f8:14:9d:17:79:4b:c5:8c:a9:c5:30:e1:92:
         3c:1f:80:36:ed:87:81:4b:54:06:24:76:37:7e:db:6f:1e:21:
         be:1f:1d:f1:a4:d1:85:94:d3:b9:9f:8a:ac:d1:34:fa:92:57:
         98:9b:cd:2d:76:b5:bd:74:02:b7:c0:96:8d:93:88:70:7c:e7:
         7b:6c:1b:9a:7a:2f:55:af:44:8b:cb:d6:2b:58:e5:f7:8b:87:
         97:30:63:9e:70:e5:30:d0:a7:bc:68:95:07:6a:a3:ab:74:f1:
         b9:da:63:7b:46:b4:4d:cc:92:19:82:0c:a1:51:0e:c3:e2:87:
         3b:5f:4d:19:69:eb:73:40:00:af:d2:1b:b9:9a:64:4d:84:57:
         52:ba:4a:d5:92:3d:8e:99:e5:b5:ae:65:07:9b:4a:ec:70:53:
         64:ab:54:7d:a5:fe:d4:de:6d:b4:6c:b3:95:64:0e:3b:cb:a9:
         d9:62:72:38:84:21:40:d7:88:90:94:13:ed:5a:7b:8f:ff:e5:
         0e:77:fb:56:43:0c:64:70:34:ce:63:79:fa:3b:6b:90:f2:25:
         32:cd:7f:c2:be:11:e0:75:23:51:0d:11:c2:1b:c1:a5:3d:55:
         9d:f8:17:55:fa:a0:1b:2d:fd:3f:31:f0:66:c3:ee:ba:54:67:
         a9:bc:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:29:43 2025 by rpki-client