This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS395878.roa
File:                     AS395878.roa (raw, json)
Hash identifier:          JoceDudMWuQf0lEKs3ELa7VOHNdIvMicVb5Emm+/eQ0=
Subject key identifier:   57:EA:63:21:22:8F:6F:D2:8D:DC:11:6C:97:F5:1D:14:10:F4:D7:15
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3997607CEBEE962EB99833F63314DCC784E1A24C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS395878.roa
Signing time:             Sat 13 Dec 2025 00:03:29 +0000
ROA not before:           Fri 12 Dec 2025 23:58:29 +0000
ROA not after:            Sat 12 Dec 2026 00:03:29 +0000
asID:                     395878
IP address blocks:        40.27.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:97:60:7c:eb:ee:96:2e:b9:98:33:f6:33:14:dc:c7:84:e1:a2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Dec 12 23:58:29 2025 GMT
            Not After : Dec 12 00:03:29 2026 GMT
        Subject: CN=57EA6321228F6FD28DDC116C97F51D1410F4D715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:a3:45:af:ef:7e:97:fb:31:5c:7c:4f:61:
                    a0:3d:25:67:66:b3:06:ef:7f:70:b8:81:4a:87:3a:
                    ec:d4:e1:6b:e0:e5:03:eb:35:d3:58:a3:0e:fc:a7:
                    7c:7b:66:04:91:61:a2:bd:21:d1:7a:f0:1e:24:95:
                    fc:fa:a1:1a:94:b2:02:d6:8a:f1:19:0e:72:d9:62:
                    61:c7:c9:ce:cf:fb:c0:c5:1b:bd:0a:24:ea:8b:03:
                    16:cf:03:fe:04:64:ca:fe:aa:62:39:83:d4:85:d2:
                    5d:24:54:3c:dc:62:3d:de:1e:39:a6:e2:d9:ed:3e:
                    99:b8:87:93:57:0f:a4:a7:0d:00:36:ad:9a:24:3f:
                    5d:7d:93:7a:6a:2f:79:8f:14:c3:45:c9:b0:b3:ed:
                    51:5f:da:b9:da:11:98:8e:f8:c1:ee:13:fa:c3:fc:
                    df:45:5d:81:a7:f9:54:e0:a3:35:fa:ed:c6:e0:35:
                    c2:8c:d5:d9:98:b6:e5:41:ef:67:79:19:67:35:d8:
                    9e:5d:c8:8d:7c:4e:3a:60:91:d7:6f:13:b8:f7:cb:
                    f5:c8:65:6f:18:27:3a:c6:e6:5a:a9:4b:88:41:cf:
                    f3:68:3c:ec:3d:a8:36:e0:09:de:fa:fc:3e:1b:3d:
                    13:0c:e2:4b:43:23:4b:ac:7b:17:1a:c7:53:fc:dd:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EA:63:21:22:8F:6F:D2:8D:DC:11:6C:97:F5:1D:14:10:F4:D7:15
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS395878.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:d5:0b:6b:81:5c:09:bc:ca:0d:b5:d4:f5:28:45:b9:bf:e6:
         88:b5:67:be:37:d7:30:89:a3:be:1c:e6:78:53:39:2c:7d:f8:
         33:fb:53:9d:57:1a:fd:94:da:5d:12:b6:d1:98:32:c8:41:a2:
         2e:a0:6e:0c:a6:23:64:5e:1c:b0:04:58:da:02:d4:d6:10:23:
         5b:e9:4b:2d:f0:7c:fd:38:dd:96:ab:ce:32:d0:25:1c:7b:93:
         04:08:1e:db:de:77:58:13:f1:e4:65:71:8a:fd:5b:b3:0a:33:
         7a:07:f0:25:23:28:78:83:c5:86:d5:45:ee:70:f9:20:23:cd:
         32:4c:be:dc:d5:ab:d8:41:9b:bd:55:bb:03:f3:34:42:b9:f1:
         ab:81:8c:fc:18:9a:d4:a9:56:77:be:09:a7:ec:ee:be:58:ed:
         a8:03:61:89:9e:8a:1b:67:3c:b0:81:32:55:e0:b5:78:06:69:
         e2:7e:c3:4a:9d:05:d7:05:25:82:cb:01:99:38:99:8a:5b:5b:
         ee:d2:a1:94:50:9d:21:65:83:0e:73:33:33:54:c5:7c:99:3f:
         ee:1b:d1:3b:17:f7:74:59:19:89:1b:c3:cb:95:84:5c:02:7e:
         31:76:8c:0f:92:ae:2f:8b:1a:92:a0:3f:6f:f2:25:2d:46:a7:
         81:10:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:54:35 2025 by rpki-client