This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214025.roa
File:                     AS214025.roa (raw, json)
Hash identifier:          xKVjtg1HSdK1NMPjo1cKm1SS0reo6G4a+QmI0n2Cse4=
Subject key identifier:   CE:29:41:7F:5E:EC:CB:5C:52:26:73:F9:6C:44:C8:43:88:61:4B:91
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6427AD54B1CC3551EF5C3C019905022E2285A86E
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214025.roa
Signing time:             Thu 18 Dec 2025 08:25:38 +0000
ROA not before:           Thu 18 Dec 2025 08:20:38 +0000
ROA not after:            Thu 17 Dec 2026 08:25:38 +0000
asID:                     214025
IP address blocks:        40.27.77.0/24 maxlen: 24
                          40.27.88.0/24 maxlen: 24
                          40.27.226.0/24 maxlen: 24
                          40.183.110.0/24 maxlen: 24
                          40.183.136.0/24 maxlen: 24
                          40.223.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:27:ad:54:b1:cc:35:51:ef:5c:3c:01:99:05:02:2e:22:85:a8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Dec 18 08:20:38 2025 GMT
            Not After : Dec 17 08:25:38 2026 GMT
        Subject: CN=CE29417F5EECCB5C522673F96C44C84388614B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:b3:85:a8:39:e7:40:7e:1e:d3:cb:c2:79:
                    1a:29:a9:0d:2a:1c:ed:49:b9:47:f6:57:02:e3:7e:
                    c2:84:be:82:63:0d:d4:62:dc:fc:75:28:d3:c7:23:
                    0b:c5:98:90:6f:05:e9:6f:b0:55:64:2f:6e:d9:c0:
                    6c:75:64:35:d9:a6:1e:10:fa:09:35:97:34:9d:d8:
                    b0:48:22:94:cf:1e:35:97:89:9d:fe:03:89:1e:13:
                    d3:14:d6:04:10:5a:80:d8:b3:15:8b:2c:f0:52:80:
                    07:e3:94:ae:32:e8:ee:7a:e2:99:4a:a3:dc:c4:cc:
                    ab:a1:c1:72:25:94:d9:5b:d2:ae:e8:96:c2:89:2a:
                    5b:81:23:e4:a3:05:74:e0:fd:df:2b:37:df:57:78:
                    80:1f:f6:bb:0c:93:f8:56:4d:03:29:85:93:cb:c4:
                    58:8e:b3:97:42:85:1b:fa:f8:e3:1d:19:ba:83:42:
                    26:ba:1e:8b:a9:33:a4:0b:28:eb:6e:2d:b3:5f:07:
                    e2:1f:d6:91:85:da:7e:f5:19:51:7e:24:c9:90:36:
                    92:e1:e0:e6:91:55:8c:6f:89:6b:f5:44:57:bd:a7:
                    f0:f3:4d:64:f9:98:91:05:61:d8:27:84:03:d1:ae:
                    5a:b7:1a:6a:02:17:06:6b:84:39:c3:52:bd:4e:03:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:29:41:7F:5E:EC:CB:5C:52:26:73:F9:6C:44:C8:43:88:61:4B:91
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.77.0/24
                  40.27.88.0/24
                  40.27.226.0/24
                  40.183.110.0/24
                  40.183.136.0/24
                  40.223.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:cf:28:69:df:15:22:21:03:2e:ca:2f:94:32:26:4c:c0:23:
         78:0e:0b:f1:fb:28:47:a6:80:ad:4d:4b:d7:69:30:58:3f:5a:
         8d:8b:75:39:78:d9:98:b3:c5:71:05:68:1a:22:8c:14:68:ed:
         46:01:04:04:45:ea:e4:bf:98:23:96:52:e7:ad:68:c4:af:10:
         84:4c:b2:b9:14:af:33:c3:ab:ef:c2:d9:e7:1b:e2:16:3a:35:
         b9:e4:48:d7:57:28:dd:80:20:f7:72:d1:55:a1:e9:6c:a6:12:
         8e:f6:74:7d:64:6c:ff:28:37:38:2e:4c:3f:ab:c8:a7:78:12:
         78:0a:ec:18:21:ea:08:19:5e:eb:98:f2:d3:7a:ee:6b:0f:3d:
         58:4f:bb:6b:15:ae:83:61:e8:6c:3c:d2:12:66:e9:37:fb:89:
         fb:73:dc:7e:e9:5b:47:05:0c:ec:8e:53:37:2c:19:e7:40:92:
         6f:81:1c:7d:84:7d:8c:ca:a2:28:80:7a:c9:a0:a1:2e:d2:5e:
         6c:46:d4:1d:af:f3:21:b6:92:7a:57:c7:24:7a:6b:71:79:fd:
         e3:47:aa:bf:5f:33:63:6c:3a:a0:89:bd:1b:2a:52:57:8a:e6:
         f1:e7:09:0b:00:82:75:d7:7d:59:29:23:d5:ae:32:46:cf:1b:
         26:29:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:03:21 2025 by rpki-client