This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37ce3434-a206-30fa-9fd5-8b0f67d3aa9e.roa
File:                     37ce3434-a206-30fa-9fd5-8b0f67d3aa9e.roa (raw, json)
Hash identifier:          CUJjAdGJ1zdcmSLjIB486TuqDK75dLc79bBCnm05gec=
Subject key identifier:   59:AD:EF:EC:A0:EA:2D:36:85:A7:1A:57:14:4D:E4:9D:45:BD:8A:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C24265D852AC8F4D506730400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37ce3434-a206-30fa-9fd5-8b0f67d3aa9e.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     16625
IP address blocks:        23.198.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:5d:85:2a:c8:f4:d5:06:73:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=f163c782-c30f-4103-ba9c-0bd049bc810d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:90:40:e6:d7:fd:44:63:f3:c6:a4:10:83:
                    de:ec:fe:2f:ae:6e:64:15:fb:30:eb:79:1a:04:a4:
                    1e:35:7c:cf:ce:e4:e2:7d:18:cc:ce:c8:59:fb:31:
                    d7:03:37:67:f0:21:04:3e:5f:4d:87:c2:2c:87:2a:
                    8c:21:95:07:c4:49:73:d4:9e:45:15:62:fd:17:ac:
                    8b:5b:de:c5:12:6a:da:68:a5:56:2b:47:ab:d3:00:
                    34:d1:fe:bf:95:e7:90:87:f3:fe:62:30:88:31:30:
                    6c:c3:e8:71:fe:ee:d6:03:32:f3:15:4d:47:62:0c:
                    db:c4:ff:9d:a4:90:5c:5c:46:54:57:ff:2e:bf:2d:
                    8b:2f:99:ef:5c:cb:ec:66:37:1a:70:59:ba:70:15:
                    3c:3b:d2:55:43:c7:4a:4c:02:34:ad:50:6a:7a:b5:
                    25:d4:4f:d1:60:8e:5c:d7:fb:1b:71:28:3f:b7:8d:
                    a9:a7:e9:06:95:b9:ef:d1:89:65:9b:ee:0a:83:14:
                    e4:26:07:18:0b:94:2f:17:b3:c0:9e:cb:c2:36:33:
                    bf:3d:90:94:fb:e9:a9:2b:28:73:77:56:cd:cd:27:
                    94:fc:02:8e:46:4e:70:00:2b:b9:93:16:52:1c:74:
                    0c:2c:a2:0e:a7:4c:b8:55:df:03:a2:fd:1f:dd:1c:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AD:EF:EC:A0:EA:2D:36:85:A7:1A:57:14:4D:E4:9D:45:BD:8A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37ce3434-a206-30fa-9fd5-8b0f67d3aa9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.198.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e4:72:a6:50:d4:2b:a4:96:60:29:27:92:2e:35:b1:82:1a:
         cc:2c:dd:d6:3e:c5:f6:4e:98:3f:d3:78:c7:e6:b1:4d:39:b6:
         ac:ee:3f:8c:14:2e:67:29:e3:59:83:10:ab:9c:4d:fb:66:2b:
         fc:d4:82:1c:b1:95:56:e9:6c:f8:b1:ff:40:9b:ed:63:8d:40:
         8d:b5:2b:5f:58:35:a5:73:fb:8e:c1:f8:03:5e:8e:a4:1b:dc:
         f2:11:9c:84:ec:61:af:0e:0a:fc:ec:62:96:7f:69:d0:c0:d7:
         b3:36:6a:14:0d:10:b8:38:4f:d4:7c:44:1e:e0:48:f7:72:51:
         40:df:76:f3:b9:5b:3d:04:c2:f9:d9:8d:7b:87:b3:28:e2:9d:
         5d:41:89:16:15:bf:f2:ea:2d:2f:14:b0:4e:41:f9:69:95:5a:
         cf:82:4e:36:3b:c3:ac:8e:97:df:fb:3c:84:4b:36:dc:92:7d:
         be:4c:05:36:d4:8e:f9:e2:d8:76:ad:74:39:ea:e5:98:f5:f5:
         b8:f8:00:80:b5:1f:79:d1:38:1a:bd:3b:06:15:42:85:a7:25:
         92:4a:7b:a2:d4:80:99:d8:cf:1f:42:f8:03:2c:bb:1e:80:fc:
         4d:34:ef:d4:7f:68:66:df:1f:d6:31:7b:ff:c8:f0:70:b1:53:
         0d:f8:dd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:04:11 2025 by rpki-client