This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1959e95-4c16-32a9-a049-d324b2dd4edc.roa
File:                     b1959e95-4c16-32a9-a049-d324b2dd4edc.roa (raw, json)
Hash identifier:          MFIPOQWxUDsuBO0y5xRDU4lpaEX0XBACDssDU+P3ILI=
Subject key identifier:   54:0D:87:A1:C5:F9:60:68:9F:7D:99:1E:49:0D:46:F0:B5:52:86:B1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C321B9A1C20376F02D5B79000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1959e95-4c16-32a9-a049-d324b2dd4edc.roa
Signing time:             Mon 15 Dec 2025 14:00:38 +0000
ROA not before:           Mon 15 Dec 2025 14:00:38 +0000
ROA not after:            Sun 15 Mar 2026 13:00:38 +0000
asID:                     20940
IP address blocks:        23.211.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:32:1b:9a:1c:20:37:6f:02:d5:b7:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 15 14:00:38 2025 GMT
            Not After : Mar 15 13:00:38 2026 GMT
        Subject: CN=9ae39343-0be6-468e-9470-d7f3cb8cea56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:ee:5d:7a:93:35:ad:98:54:9d:ce:6f:ae:
                    f1:f4:30:30:5b:90:b3:8f:a7:ac:d5:17:99:9a:56:
                    ab:0f:a0:ee:02:66:79:95:f2:d1:7d:39:64:91:50:
                    ef:6b:52:ab:fc:ca:fc:79:7e:ea:c1:10:ab:66:bb:
                    7f:f5:c6:1e:7e:65:d7:41:b0:60:07:a7:b2:4c:3e:
                    6f:d9:dc:15:c6:60:93:44:21:f4:d6:69:54:8f:d4:
                    b0:09:0b:a8:29:cb:13:3b:a2:ad:08:1c:56:93:d1:
                    e4:61:23:3a:86:b0:9f:1a:62:fc:f2:24:ed:53:fe:
                    6f:ea:0e:ed:28:9c:04:2a:45:9b:df:f3:02:dd:16:
                    b3:11:06:2f:b8:5f:97:9e:36:e6:c9:35:e2:2e:c3:
                    d1:b2:ba:f3:e3:89:2f:d8:22:f4:a9:22:38:47:a0:
                    c6:81:cf:11:30:64:34:53:84:fd:a1:e7:9c:d5:41:
                    ae:a9:6f:cc:a3:1a:1d:c5:51:b3:e5:74:cf:35:19:
                    fe:3c:5d:e0:ed:a1:97:c1:0c:37:dc:4f:e5:60:f5:
                    81:18:a4:64:e4:08:31:8f:c0:7c:7e:d6:2c:18:c9:
                    74:dd:02:49:86:a6:53:be:76:5b:b7:54:24:ce:76:
                    4c:42:ad:f3:9c:d4:e7:b8:f8:54:bc:be:71:43:2a:
                    1b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0D:87:A1:C5:F9:60:68:9F:7D:99:1E:49:0D:46:F0:B5:52:86:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1959e95-4c16-32a9-a049-d324b2dd4edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:48:b1:6d:2f:67:6d:a9:91:bf:41:fe:37:31:e4:5a:46:ea:
         cd:9e:88:cb:46:8c:4d:2e:2d:ab:14:55:43:d3:01:49:0c:23:
         67:cd:88:1d:24:2f:72:44:f7:a1:37:28:9e:c2:5f:36:06:d5:
         b0:57:fd:5a:1e:6a:8b:4a:72:a2:09:e2:cd:c5:d7:41:a1:f0:
         b8:c2:43:d9:d9:69:33:7e:31:1e:2f:4b:8f:ed:5d:d8:09:ce:
         a3:34:c2:ec:7a:9e:e6:b1:c6:59:4d:52:24:ff:26:b9:0e:56:
         1a:b3:35:1d:b8:d7:1c:0d:80:eb:9b:1e:ec:5f:f4:28:20:f6:
         ec:f2:9f:a6:b4:0a:67:7f:cf:bb:f3:b0:01:bd:61:2e:45:8e:
         16:aa:4f:99:9d:28:5f:a7:97:4e:2f:79:13:38:1d:91:19:b9:
         18:70:cc:29:d2:e8:46:ba:97:91:25:ce:91:9e:d6:b1:84:15:
         4f:ba:3d:9a:76:f9:a8:51:a6:65:fd:0e:7c:16:b8:1b:6e:76:
         02:33:3f:b6:32:20:4e:50:ba:a2:b3:f9:f1:a1:25:4e:42:23:
         7a:71:64:e6:75:1c:13:53:36:b6:35:4f:d5:ba:33:7e:60:15:
         3d:89:cd:6e:87:e4:98:48:6f:bb:2d:62:a5:fc:2c:b4:dc:86:
         f0:64:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:27:03 2025 by rpki-client