This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa
File:                     7223b940-9558-3128-873c-80e6ed49a2d4.roa (raw, json)
Hash identifier:          xAu60wMwXA+wPuqcpQnUkAbHp7FS8iBMO7hJkd61rus=
Subject key identifier:   BD:85:07:72:D3:B8:82:A9:D8:E5:90:04:E8:72:C0:9C:52:0E:98:9E
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584C40110F9B761C4382CC586080
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa
Signing time:             Sat 20 Dec 2025 14:00:38 +0000
ROA not before:           Sat 20 Dec 2025 14:00:38 +0000
ROA not after:            Fri 20 Mar 2026 13:00:38 +0000
asID:                     396253
IP address blocks:        163.120.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:11:0f:9b:76:1c:43:82:cc:58:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Dec 20 14:00:38 2025 GMT
            Not After : Mar 20 13:00:38 2026 GMT
        Subject: CN=07baf0ad-e0d6-4950-a4f2-a62db9f7c260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:2d:21:75:ba:1c:db:9b:2d:8d:be:e4:2b:
                    0e:99:45:14:9b:44:15:f4:a4:6b:36:78:75:bd:db:
                    1c:62:eb:f3:58:d0:ec:98:d2:34:93:20:9c:3a:6b:
                    4f:30:a3:9b:d7:3d:e3:1a:4c:95:4e:10:be:9b:bd:
                    f8:d7:7b:3e:2b:e5:86:83:fb:c3:88:59:51:ae:d7:
                    6d:36:42:9d:d6:a9:3f:4e:4a:01:40:7a:72:18:7f:
                    8c:75:c5:b2:09:09:6d:a8:87:6c:41:5c:70:79:dd:
                    11:f2:c1:5e:31:27:4a:8f:8d:bc:a8:e0:3d:06:fb:
                    e1:df:fb:3f:9b:24:ed:ea:fd:5d:1a:65:35:bf:bc:
                    c0:6a:d3:d7:ef:7c:c4:12:eb:0b:57:e0:f1:a3:c4:
                    0d:dd:5c:f8:52:bf:50:c9:1c:26:be:27:13:6b:48:
                    77:90:a3:b5:fd:ba:c8:3f:ee:dd:cc:7c:95:51:b4:
                    24:19:ff:87:5f:55:44:5b:8a:9a:51:d5:57:56:23:
                    a1:f0:16:1f:95:b3:a2:b0:dd:9e:72:e2:ca:46:24:
                    09:f7:90:b8:d8:90:af:9e:c6:1e:1f:57:1e:0a:13:
                    f4:1f:24:5d:06:72:7c:e8:c4:d5:e4:72:fa:e7:9d:
                    f3:ad:00:95:f9:3a:53:7f:42:84:32:35:51:dd:91:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:85:07:72:D3:B8:82:A9:D8:E5:90:04:E8:72:C0:9C:52:0E:98:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:39:e6:98:cf:52:29:3c:f9:41:59:aa:0d:ed:c5:19:96:79:
         42:fe:20:61:0f:f6:7d:e1:39:fc:aa:f5:12:19:6a:2e:2a:64:
         64:ed:0b:2c:a1:82:60:02:50:ac:ae:4c:75:12:44:3b:8d:ee:
         bb:62:c1:ac:94:51:f9:e6:e6:bc:d2:92:7e:1e:a0:00:d8:46:
         c3:c9:3c:ed:4d:97:53:37:31:a9:05:dc:f2:1b:f4:d0:a3:70:
         38:0e:f4:e8:97:5a:b6:cb:e0:ce:9b:22:6a:e7:6d:31:89:33:
         99:37:d1:aa:9d:df:f1:ba:6e:36:88:70:b1:b3:b7:83:f1:c4:
         55:ab:ab:a3:20:f9:5e:aa:b5:59:d7:fa:20:69:29:49:da:ec:
         ad:64:c1:e0:09:6a:e1:f6:cf:bf:87:ad:d8:37:05:1f:29:0e:
         14:67:d0:35:50:b2:4e:42:7e:42:38:7c:f0:6f:a5:5b:51:80:
         1e:b2:54:07:2f:11:89:b5:e4:30:c3:f5:7c:da:1e:f8:0b:00:
         11:f9:4f:86:44:00:4a:57:8b:7f:37:dc:eb:4a:c3:7a:60:b6:
         3a:f3:85:4a:dd:7e:63:8b:f2:24:4a:5d:c4:3a:68:a4:55:ca:
         cd:a5:aa:96:c9:47:cd:e6:18:58:a7:d8:ae:f5:7a:69:ad:2d:
         a3:5f:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:02:58 2025 by rpki-client