This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/358efe02-86d9-35d3-8f8a-4dd2129300ac.roa
File:                     358efe02-86d9-35d3-8f8a-4dd2129300ac.roa (raw, json)
Hash identifier:          1MfN58BIYDwIP/0Jy4USQ7iIMui6uSh7M+eDQx58ulU=
Subject key identifier:   A8:92:4D:3C:9A:7F:89:9E:61:F1:C5:7C:DE:20:8F:3F:13:EF:75:30
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C2856572699F74E1B5ABD9F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/358efe02-86d9-35d3-8f8a-4dd2129300ac.roa
Signing time:             Fri 12 Dec 2025 02:00:30 +0000
ROA not before:           Fri 12 Dec 2025 02:00:30 +0000
ROA not after:            Thu 12 Mar 2026 01:00:30 +0000
asID:                     20940
IP address blocks:        23.200.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:28:56:57:26:99:f7:4e:1b:5a:bd:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 12 02:00:30 2025 GMT
            Not After : Mar 12 01:00:30 2026 GMT
        Subject: CN=ae41a441-4bb3-4c54-8d95-354f5d984670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:76:7f:12:34:51:c0:99:cd:76:ca:70:03:
                    76:99:4d:f3:9d:81:89:f3:8f:b0:e6:f0:fa:b1:8b:
                    7f:08:f8:af:39:f2:99:5a:a8:44:30:ff:42:04:68:
                    69:f7:49:b8:7f:aa:33:99:e9:08:8d:92:cb:71:5e:
                    04:98:e7:bb:fc:62:38:57:8e:4f:fd:e7:f0:fa:a5:
                    52:ab:c0:81:84:8c:37:ac:de:1c:d2:53:2e:71:7c:
                    ac:3a:1c:ea:d7:ed:ac:20:f5:33:c8:15:4e:98:78:
                    32:52:f3:a3:79:f0:c2:f1:01:75:f4:59:e7:03:54:
                    c7:d4:26:fc:de:f2:c3:8e:72:fe:5b:e4:ff:12:90:
                    0f:1c:c6:6c:c4:e4:02:98:84:fa:d0:cb:1a:91:82:
                    9f:62:95:7b:cb:6e:74:12:54:b3:26:c2:db:93:fd:
                    71:ab:53:25:ce:47:d1:ef:e6:d3:ca:af:c3:d3:4b:
                    8d:c0:3e:ea:b0:da:02:5b:40:b3:d5:d8:9f:ab:e2:
                    50:38:d9:62:fd:fc:ac:06:cc:69:ff:28:23:08:8d:
                    2d:3f:af:98:e7:af:c4:01:f8:b7:bf:a2:93:ec:cb:
                    ca:b4:6f:2d:70:18:d0:44:34:8f:4e:6e:73:dd:b1:
                    a5:54:0e:23:0e:59:f0:e1:58:54:cc:8a:df:64:5d:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:92:4D:3C:9A:7F:89:9E:61:F1:C5:7C:DE:20:8F:3F:13:EF:75:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/358efe02-86d9-35d3-8f8a-4dd2129300ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:da:8d:9d:01:ed:3b:e0:b1:52:98:4d:f0:c4:0c:5e:03:a4:
         98:24:f8:ab:e3:c1:e3:30:91:3b:88:04:f8:91:5e:c6:a5:be:
         f6:b6:a9:d6:b0:b2:c7:8c:2c:de:59:d6:61:db:1f:8e:38:7a:
         d9:ef:0c:4e:16:c1:ce:26:f7:5a:4d:fb:9d:2a:fd:7f:b4:f6:
         fa:46:dc:0a:59:1a:b2:01:de:7a:b0:6f:04:32:93:95:1d:b8:
         d0:80:3d:13:04:8b:b4:80:15:58:5f:c8:01:0b:0f:be:56:6c:
         18:d9:20:98:9f:8c:ca:66:d1:81:7b:2d:db:dd:e1:e8:ee:35:
         e0:81:d4:f3:7b:65:ff:08:94:31:df:d1:04:4e:aa:a2:db:9d:
         40:8a:db:4c:93:1c:c3:8a:e3:ce:93:54:ba:b3:31:a4:30:3a:
         65:b4:0b:c4:b2:71:86:07:a5:5d:b6:ef:46:28:7c:67:b3:b7:
         0e:44:8d:bd:25:30:62:85:4b:ca:2d:dd:6f:45:72:5f:51:60:
         5d:f5:56:a9:c9:5b:e1:ac:fa:8c:11:52:5e:dc:e6:ce:18:30:
         b5:b1:c3:ec:c2:00:bf:d1:0a:72:dd:a0:c4:c8:74:e8:28:85:
         c0:e5:5f:bb:74:b1:41:4e:5a:0f:fc:49:df:a9:59:c4:ea:15:
         1c:00:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:05:20 2025 by rpki-client