This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          aXrlWu6iBw9fxkOT2McUeiQj+Z/RSPJhumeaTerTlg0=
Subject key identifier:   07:AB:7A:9E:52:D5:02:4D:9A:EA:90:B0:1D:D2:CC:5D:90:DC:A5:0F
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       6FBD38A0E3B9AA1971A6EFC31C4F2F1A87843E9C
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
Signing time:             Fri 12 Dec 2025 08:25:23 +0000
ROA not before:           Fri 12 Dec 2025 08:20:23 +0000
ROA not after:            Fri 11 Dec 2026 08:25:23 +0000
asID:                     834
IP address blocks:        140.99.48.0/24 maxlen: 24
                          140.99.114.0/24 maxlen: 24
                          140.99.116.0/22 maxlen: 24
                          140.99.144.0/22 maxlen: 24
                          140.99.172.0/22 maxlen: 24
                          140.99.176.0/22 maxlen: 24
                          140.99.184.0/23 maxlen: 24
                          140.99.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bd:38:a0:e3:b9:aa:19:71:a6:ef:c3:1c:4f:2f:1a:87:84:3e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Dec 12 08:20:23 2025 GMT
            Not After : Dec 11 08:25:23 2026 GMT
        Subject: CN=07AB7A9E52D5024D9AEA90B01DD2CC5D90DCA50F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:56:6e:81:f1:7a:af:b3:0d:92:6c:49:35:
                    a1:99:d6:c7:30:61:30:07:33:e0:04:43:45:92:38:
                    c1:62:8e:91:b6:6b:f7:f0:b9:f6:67:5f:69:cc:b3:
                    dd:bc:d3:a6:44:ba:99:bc:76:5a:30:2a:5c:7c:61:
                    7e:7d:23:1f:09:15:23:fe:f2:23:75:68:61:9b:71:
                    8e:b7:da:15:62:34:39:fe:67:90:ad:38:7d:56:00:
                    06:3e:15:44:12:9b:cb:d1:02:8d:c6:c6:18:ac:de:
                    50:78:90:ec:a7:a7:0f:7e:b8:af:aa:d4:58:08:d8:
                    34:63:f8:80:d7:be:e4:c0:42:4b:23:a7:32:72:bc:
                    cb:f1:75:f0:ef:ac:9d:ab:70:ad:0e:8f:f6:d0:0b:
                    f7:40:6c:ea:8a:0e:17:bf:40:e1:8f:4f:f8:94:f4:
                    50:7b:0f:79:e0:53:af:90:1e:89:2e:c7:32:63:23:
                    25:b4:31:f7:ab:85:98:20:5a:25:bf:3e:52:41:9c:
                    30:51:30:0f:ac:82:cf:56:a7:30:77:78:92:09:96:
                    cc:0c:10:7c:9f:22:49:8c:05:9e:1e:61:77:cb:df:
                    fc:fb:83:51:13:91:d6:6b:68:ed:16:a6:4c:b0:8f:
                    7e:a7:ca:8d:9d:63:ca:21:d2:cc:7e:fa:07:23:6a:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AB:7A:9E:52:D5:02:4D:9A:EA:90:B0:1D:D2:CC:5D:90:DC:A5:0F
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.48.0/24
                  140.99.114.0/24
                  140.99.116.0/22
                  140.99.144.0/22
                  140.99.172.0-140.99.179.255
                  140.99.184.0/23
                  140.99.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:49:40:b2:82:c5:69:ff:b2:46:5f:dd:93:b6:e2:7a:4e:73:
         12:66:1e:0c:07:2e:af:9e:ce:9b:72:cb:09:57:3a:37:c2:92:
         e5:b4:18:90:24:7f:9b:66:f4:53:8b:50:58:ec:0b:a8:a0:36:
         a0:7b:90:26:d0:c9:27:48:3a:87:96:82:cd:ed:3b:07:58:18:
         5b:d2:a3:0f:e6:05:e6:7b:6c:cc:9b:38:fe:25:b1:4b:c3:ee:
         ef:73:82:6f:b5:3f:b5:dc:82:88:c8:e7:41:36:57:71:04:9e:
         72:dc:a6:35:0c:9a:1a:13:db:7f:68:fd:68:49:5c:36:3d:c6:
         c3:8e:84:ed:d8:08:94:bf:db:35:e0:fa:92:5d:85:52:7c:83:
         ab:24:d2:56:c5:5b:94:65:f5:80:4c:db:28:bb:74:43:ba:2d:
         54:57:37:de:99:60:2d:a9:04:ba:ef:7e:44:92:91:57:5b:6b:
         cf:25:f7:ec:18:34:2a:4a:0d:b6:ea:86:95:f6:6c:53:9f:3f:
         78:36:ef:5e:a9:16:33:60:3a:a7:ff:3a:1e:f8:45:a3:5b:d6:
         20:be:a2:f7:9c:53:9f:24:e9:f8:cc:a7:7e:e5:ca:ae:1a:6f:
         e6:6c:42:a1:b0:e6:35:0c:30:22:1d:87:f3:bd:a9:f2:43:c9:
         4e:e4:c2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:01:44 2025 by rpki-client