This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa
File:                     d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa (raw, json)
Hash identifier:          Q89+a8pDuUQXQ5hZjKlSVjB9HzOaQBUIqwP4MsMMtYU=
Subject key identifier:   69:54:07:1F:20:02:F9:16:5A:34:04:47:95:C4:17:C4:20:EF:AB:7E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C3BE113C97DCF3FB11E425840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa
Signing time:             Fri 19 Dec 2025 02:00:31 +0000
ROA not before:           Fri 19 Dec 2025 02:00:31 +0000
ROA not after:            Thu 19 Mar 2026 01:00:31 +0000
asID:                     16625
IP address blocks:        23.209.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3b:e1:13:c9:7d:cf:3f:b1:1e:42:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 19 02:00:31 2025 GMT
            Not After : Mar 19 01:00:31 2026 GMT
        Subject: CN=da3b22f6-7033-48f0-b0e8-a5251bb3069b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8a:f0:2d:5d:11:70:50:3a:33:bc:84:30:b5:
                    22:8e:d2:6e:69:3e:85:4f:4f:26:0b:e0:5e:1f:45:
                    e1:7c:ba:e5:2e:1c:bd:5f:af:78:fa:4d:42:fc:b6:
                    29:09:01:a7:01:87:d5:1e:94:24:34:1f:bb:6e:c2:
                    4b:81:11:c9:ec:30:56:0a:71:60:3f:88:0d:9c:88:
                    84:d2:5b:fb:cf:81:1e:a2:5f:58:48:a9:61:08:a4:
                    5a:96:86:46:78:13:22:fa:02:d1:03:4f:7a:ac:84:
                    49:f1:d1:40:55:35:e6:d7:5d:46:8b:ef:23:24:93:
                    63:ba:ba:59:21:77:c4:b3:43:59:77:1a:6c:ef:b0:
                    2f:68:07:6d:34:99:a0:3d:8b:ee:af:a4:ce:78:f2:
                    d2:64:15:1f:43:4e:b4:35:0e:be:33:ee:bb:05:2c:
                    55:40:30:67:aa:b9:84:45:76:91:9c:e0:23:12:f5:
                    b1:a8:02:21:23:03:c7:89:94:43:f6:20:fb:84:c1:
                    f1:51:7a:1a:39:bd:07:87:47:8b:b6:bb:e2:d4:da:
                    ad:0e:75:0c:df:bf:ab:8b:8c:e3:12:8d:cb:b7:67:
                    76:58:b7:4a:29:5e:8d:fe:9e:ed:85:3d:60:b5:e7:
                    d8:ea:ff:2c:60:e9:1f:de:98:5f:44:49:89:0e:97:
                    c8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:54:07:1F:20:02:F9:16:5A:34:04:47:95:C4:17:C4:20:EF:AB:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.209.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:56:f6:5b:cb:2f:c6:b4:93:0c:1f:52:28:97:21:75:b2:79:
         1e:f4:61:a2:a4:3a:c1:8c:1a:bd:7e:1d:e3:4a:3a:da:0d:51:
         6c:06:4d:0c:5e:ae:95:bc:93:c7:dd:a4:22:c5:ee:0c:90:65:
         ce:a4:f3:8d:75:18:ff:8a:80:a7:a6:b1:d5:59:41:0c:b2:a2:
         d9:64:b6:7b:cf:c2:b8:3d:c0:4f:20:60:c9:7e:24:61:43:fc:
         8f:a3:ec:6a:37:aa:e3:a2:12:ee:b8:3a:0b:cd:fd:4a:31:7b:
         64:36:e7:8d:ce:b1:2d:41:55:b9:62:c8:c0:82:3d:99:c2:e4:
         cf:50:8a:eb:6f:96:4f:b3:7e:46:83:45:44:79:55:22:a3:6f:
         8e:45:62:f5:55:c8:71:bb:75:91:fb:71:f5:51:6a:ec:e9:a4:
         dc:b4:b8:e5:17:eb:f9:13:11:0e:cd:68:8d:cc:f7:d0:b6:3b:
         e5:71:83:f5:44:3f:7f:72:25:90:30:eb:10:ee:8b:20:f6:59:
         3a:d5:f8:45:89:37:9b:a0:99:3d:90:f8:c1:18:ce:14:e4:ac:
         18:4e:00:70:4e:a6:1f:14:02:1f:50:6f:4b:a2:73:f3:c8:b4:
         4d:74:3d:fa:1b:94:49:3b:38:f5:d9:b2:c2:8f:47:dc:97:5d:
         eb:ac:76:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74RPJfc8/sR5CWEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk
ZGEzYjIyZjYtNzAzMy00OGYwLWIwZTgtYTUyNTFiYjMwNjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YrwLV0RcFA6M7yEMLUijtJuaT6FT08mC+Be
H0XhfLrlLhy9X694+k1C/LYpCQGnAYfVHpQkNB+7bsJLgRHJ7DBWCnFgP4gNnIiE
0lv7z4Eeol9YSKlhCKRaloZGeBMi+gLRA096rIRJ8dFAVTXm111Gi+8jJJNjurpZ
IXfEs0NZdxps77AvaAdtNJmgPYvur6TOePLSZBUfQ060NQ6+M+67BSxVQDBnqrmE
RXaRnOAjEvWxqAIhIwPHiZRD9iD7hMHxUXoaOb0Hh0eLtrvi1NqtDnUM37+ri4zj
Eo3Lt2d2WLdKKV6N/p7thT1gtefY6v8sYOkf3phfREmJDpfIeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlUBx8gAvkWWjQER5XEF8Qg76t+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY5ZmFlMGUtZTU3ZS0z
MzlkLWIyMTUtNWViZTNiMTU2MGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9HoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZW9lvLL8a0kwwfUiiXIXWyeR70YaKkOsGMGr1+HeNKOtoNUWwGTQxe
rpW8k8fdpCLF7gyQZc6k8411GP+KgKemsdVZQQyyotlktnvPwrg9wE8gYMl+JGFD
/I+j7Go3quOiEu64OgvN/Uoxe2Q2543OsS1BVbliyMCCPZnC5M9Qiutvlk+zfkaD
RUR5VSKjb45FYvVVyHG7dZH7cfVRauzppNy0uOUX6/kTEQ7NaI3M99C2O+Vxg/VE
P39yJZAw6xDuiyD2WTrV+EWJN5ugmT2Q+MEYzhTkrBhOAHBOph8UAh9Qb0uic/PI
tE10PfoblEk7OPXZssKPR9yXXeusdpQ=
-----END CERTIFICATE-----
Generated at Sat Dec 20 08:52:42 2025 by rpki-client