This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa
File:                     2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa (raw, json)
Hash identifier:          BXIrTs9jfN8TSoMuNDYeBRCgcHEvmPHDPLNcbnOYvcU=
Subject key identifier:   D0:7D:19:CE:2E:9B:F6:8A:79:73:49:1F:5D:88:DF:53:04:2C:7E:68
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584C215B978BDAD9E156E291FBC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa
Signing time:             Tue 09 Dec 2025 14:00:38 +0000
ROA not before:           Tue 09 Dec 2025 14:00:38 +0000
ROA not after:            Mon 09 Mar 2026 13:00:38 +0000
asID:                     399641
IP address blocks:        165.254.23.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:21:5b:97:8b:da:d9:e1:56:e2:91:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec  9 14:00:38 2025 GMT
            Not After : Mar  9 13:00:38 2026 GMT
        Subject: CN=69fbcbca-51d8-4fd7-a6e0-4ec4b2cb9419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:e1:37:4a:32:08:66:12:2e:39:e3:fe:90:
                    00:16:3f:5e:24:07:ae:4d:e8:fc:35:37:b4:a4:6f:
                    eb:9b:f5:d7:43:75:38:14:32:3b:65:74:a2:eb:b1:
                    9a:91:44:91:05:38:e6:17:e7:7b:b0:ce:f7:55:ce:
                    35:6c:8e:98:4f:4a:e6:93:8a:92:e7:cf:cb:b3:ee:
                    cf:e2:27:6a:ee:4f:e0:5f:af:5c:0b:9c:ae:12:cf:
                    44:db:96:15:38:96:e7:58:cb:6f:fb:f5:ee:18:05:
                    ac:f7:af:e6:3e:10:0f:ec:df:d3:fd:0d:91:9a:27:
                    1c:c5:d6:6f:c9:15:89:de:e1:aa:e0:60:64:a0:fc:
                    01:fb:58:f5:7b:d0:16:34:1d:e0:a7:34:2d:49:5e:
                    c3:46:5e:f9:8c:d3:bf:57:1f:10:6d:de:75:67:19:
                    8c:2a:56:c3:7e:83:d2:ac:c6:75:20:66:ab:85:5e:
                    7e:ba:25:09:5c:bf:2d:2c:b4:d2:dc:0f:dd:6e:cc:
                    4b:20:77:53:39:6a:c7:89:d8:79:9d:5f:ea:40:b2:
                    28:6f:57:a9:4e:33:c1:c4:fd:88:d0:33:4c:3a:ea:
                    ff:b3:d4:91:47:67:8a:1d:23:39:a2:97:26:9c:fe:
                    2f:b0:68:4b:c5:d8:0c:5c:51:b7:b8:95:4a:44:a9:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7D:19:CE:2E:9B:F6:8A:79:73:49:1F:5D:88:DF:53:04:2C:7E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.23.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:21:70:65:e9:23:25:2b:3f:57:e0:41:e8:97:a9:2c:07:28:
         6c:71:63:21:5a:a9:d2:cb:70:17:e3:51:45:53:8c:a2:9f:9a:
         e3:4e:d4:fb:c7:be:81:d3:ad:c1:d6:53:e5:c8:b9:ba:a9:d2:
         c9:05:fd:98:86:75:6e:b6:df:eb:c8:7e:5f:1a:ea:21:56:31:
         78:8e:d9:fa:12:d5:60:04:40:75:ae:d5:55:05:50:32:bf:29:
         d0:b1:73:39:18:39:6e:c4:41:3d:b1:65:d4:88:3d:22:d2:89:
         9c:6d:22:39:92:8c:5c:0a:94:10:8d:f4:a6:c7:f9:77:0a:35:
         13:1b:a2:92:d1:94:e3:75:bf:ce:10:4e:23:c7:5f:31:7e:9a:
         62:16:90:43:05:b1:83:07:6d:67:67:a6:b6:72:d4:e9:08:77:
         c2:40:1e:75:94:62:85:59:79:d9:e7:fe:7a:ce:fd:d4:cb:52:
         13:c3:d5:00:e7:04:f6:9b:99:6b:89:57:67:e9:ce:77:b6:fe:
         41:5f:2a:5a:9d:ba:d0:c9:f5:b4:ac:8c:c7:2c:55:c5:61:85:
         3e:0d:79:93:10:5e:c3:76:e9:75:00:22:9d:23:cb:19:f9:0d:
         d6:77:d8:cb:67:69:af:97:fa:ef:eb:e4:3e:4e:f3:86:b9:92:
         cf:a1:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:20:23 2025 by rpki-client