This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/331ad1e7-d96a-3e7d-b316-1fdc349fd9dc.roa
File:                     331ad1e7-d96a-3e7d-b316-1fdc349fd9dc.roa (raw, json)
Hash identifier:          RbMKE8XYlStkQAO8bEV411d8IZqzGrvO+jA+SNLgRwQ=
Subject key identifier:   38:E9:A3:E1:79:4A:96:79:15:43:BB:1D:16:5E:E9:B4:C0:1B:04:58
Certificate issuer:       /CN=cf438e4b-3515-40c3-b514-36b1b15593d8
Certificate serial:       010D0C9F4328584C09A0AE819091C89C9261B200
Authority key identifier: BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/331ad1e7-d96a-3e7d-b316-1fdc349fd9dc.roa
Signing time:             Mon 01 Dec 2025 02:00:30 +0000
ROA not before:           Mon 01 Dec 2025 02:00:30 +0000
ROA not after:            Sun 01 Mar 2026 02:00:30 +0000
asID:                     401541
IP address blocks:        23.142.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:09:a0:ae:81:90:91:c8:9c:92:61:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf438e4b-3515-40c3-b514-36b1b15593d8
        Validity
            Not Before: Dec  1 02:00:30 2025 GMT
            Not After : Mar  1 02:00:30 2026 GMT
        Subject: CN=87b794d7-ac3a-4d99-9540-0bffcb58ef66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:fe:18:27:ca:22:32:56:9c:4b:c9:6d:8a:
                    ab:25:30:d9:84:d6:71:b4:ec:5f:9c:85:1a:06:97:
                    49:1b:bc:fd:ed:3b:c2:ce:ff:72:c2:7d:2b:42:fc:
                    70:a2:eb:a2:09:eb:8f:00:d2:44:52:41:f6:cb:ac:
                    28:0e:90:6b:2c:eb:04:71:c2:af:b9:7c:9c:ec:32:
                    08:b2:36:f1:4a:cc:ca:65:6c:e6:6b:96:0b:76:5f:
                    78:ac:0e:d8:dd:c7:b5:de:b7:0a:e4:e6:ed:50:96:
                    05:f1:9e:fa:a0:04:71:e0:4a:c0:b3:eb:dd:22:78:
                    4b:bd:4a:00:5b:77:d6:04:12:4d:9a:06:73:b6:91:
                    cc:e8:7e:7c:50:7b:3e:1c:69:02:89:b1:44:24:66:
                    89:50:5a:ea:c7:77:48:29:b9:9a:d5:8d:59:57:35:
                    96:30:ab:bf:bb:08:76:86:0b:ae:ff:67:0c:46:55:
                    1f:46:0a:4d:30:0f:c4:25:3d:90:03:d8:03:5c:3d:
                    f4:36:37:99:12:84:de:e4:73:5d:04:23:47:36:21:
                    ad:5c:d8:5f:7b:92:93:12:c5:86:c2:e0:ca:3d:55:
                    3d:df:f5:90:09:4a:4d:3f:d6:24:7c:8f:10:6a:75:
                    50:05:f6:f8:a5:49:34:2d:f4:04:c3:0d:ff:e3:46:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E9:A3:E1:79:4A:96:79:15:43:BB:1D:16:5E:E9:B4:C0:1B:04:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/331ad1e7-d96a-3e7d-b316-1fdc349fd9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.crl

            X509v3 Authority Key Identifier:
                keyid:BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:75:f3:cf:dd:cd:3a:de:ba:5e:ff:ca:88:8c:95:eb:b3:
         a5:67:b2:d1:99:28:fd:7b:ca:8f:55:fe:a9:35:ad:e4:2e:5f:
         23:e3:b8:4d:a3:f6:7d:36:b4:42:77:ad:df:65:87:15:17:0c:
         11:19:d8:2d:f4:ff:22:1b:91:95:04:99:51:46:9b:e7:43:3c:
         d4:4b:01:48:e7:4a:fb:72:d6:28:d8:85:49:6d:06:8e:a3:e3:
         e3:6d:76:12:8e:1e:2e:85:99:ea:a8:e2:b8:73:f4:c8:a1:75:
         74:17:93:4a:93:c3:f1:a9:08:bd:63:6b:c0:69:ce:f6:59:1e:
         c6:07:35:4e:0c:80:50:e2:54:a4:61:a6:6e:97:b2:90:05:eb:
         87:19:bb:fd:0b:56:95:1c:1f:c2:86:99:38:03:9b:28:24:be:
         01:57:b7:dc:46:30:51:18:15:5c:a0:6d:e6:e6:16:de:b2:30:
         3c:50:9f:13:57:31:33:62:8d:0b:65:96:df:a0:56:67:ac:bf:
         51:3d:5b:f9:c5:18:7e:1f:fb:f0:fd:c1:2b:42:0d:cc:f5:8c:
         a1:c3:d4:5a:82:c8:67:93:b7:a0:54:6f:6f:93:f8:c3:86:d9:
         c5:f2:47:4c:47:41:2c:e1:21:cf:5d:fa:59:4c:ff:c7:1e:45:
         65:26:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:02:58 2025 by rpki-client