This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400618.roa
File:                     AS400618.roa (raw, json)
Hash identifier:          qFKORn9gawCQXT/3khkkQPztB3m/JefWdIAZjmLnflc=
Subject key identifier:   14:B5:49:31:91:0F:AE:35:12:97:26:55:1F:05:B1:CE:E0:0A:4C:A1
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5DD3EDC5A56EAF9E49BD215A219DF35F2BAAD823
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400618.roa
Signing time:             Thu 18 Dec 2025 04:30:49 +0000
ROA not before:           Thu 18 Dec 2025 04:25:49 +0000
ROA not after:            Thu 17 Dec 2026 04:30:49 +0000
asID:                     400618
IP address blocks:        104.234.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 04:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d3:ed:c5:a5:6e:af:9e:49:bd:21:5a:21:9d:f3:5f:2b:aa:d8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 18 04:25:49 2025 GMT
            Not After : Dec 17 04:30:49 2026 GMT
        Subject: CN=14B54931910FAE35129726551F05B1CEE00A4CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:10:80:e5:f8:3b:25:f6:c1:93:65:26:12:
                    b9:b8:f6:eb:20:14:27:37:6c:b9:b9:97:c9:47:70:
                    9a:93:db:46:7b:8f:2e:c8:07:04:3d:70:a5:87:6c:
                    d1:5c:d0:50:f1:d3:be:2a:ef:ec:0e:30:a5:fe:d6:
                    04:57:fa:64:fd:d8:f1:b6:14:8c:c6:16:e7:38:2f:
                    8e:af:06:5d:0f:6f:6f:1b:75:04:56:44:a3:c1:06:
                    a7:e2:6d:bf:b5:1b:c8:e8:04:2c:fb:26:fc:fa:33:
                    00:2e:5b:68:78:73:f7:83:b7:67:65:03:0a:96:81:
                    74:6e:a0:6c:d1:75:f8:28:25:c2:eb:ab:79:98:75:
                    a2:06:35:87:a7:35:d6:d8:dc:91:12:b6:8f:9a:82:
                    89:b6:e3:99:f0:57:de:3f:fc:d4:ae:26:8f:1d:b2:
                    d6:77:cc:64:42:c0:67:b6:bf:ab:b0:9f:65:e2:94:
                    8f:79:0f:e4:f3:de:c7:64:a9:09:35:58:ac:72:b2:
                    b8:d9:77:86:59:70:a9:09:9e:62:70:0b:5f:cd:7f:
                    6d:1c:b2:b3:50:03:05:70:ca:e3:f3:53:f0:0f:b7:
                    4e:13:bf:2d:b6:cd:45:36:b2:eb:af:1c:3c:7f:fc:
                    9c:d9:2f:af:b7:51:8e:96:e2:f3:6f:0a:f9:54:56:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B5:49:31:91:0F:AE:35:12:97:26:55:1F:05:B1:CE:E0:0A:4C:A1
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:cc:48:04:4e:4e:18:6c:fa:48:32:3d:4b:67:95:4d:5f:ad:
         37:7b:ca:9d:17:d1:07:cd:f0:76:82:45:66:a5:b1:f3:2b:1e:
         01:47:4f:92:fb:10:d6:d2:30:d7:64:2a:fc:52:5b:aa:de:4e:
         76:3a:7a:07:79:f1:be:09:02:a3:c2:a6:08:de:97:8a:fd:10:
         b6:80:42:4d:69:95:b7:e3:9b:81:a8:c5:3c:2c:ec:7f:22:6c:
         6f:bc:21:64:87:57:48:3f:97:80:08:aa:bf:38:4d:cb:2d:0f:
         d6:7b:c8:25:66:57:60:9d:1c:1e:a4:55:fc:4a:fe:2e:68:00:
         cf:62:3e:97:f6:de:67:09:17:da:27:a4:c1:b8:44:f4:fb:31:
         34:0d:94:94:ab:fc:26:e8:d4:f9:26:76:79:2b:95:b0:5b:23:
         d4:23:ac:3a:e5:e3:dd:6a:2a:23:9a:1f:f2:b8:ab:f4:ef:5d:
         45:7f:4a:cc:0b:2d:8a:ae:17:38:d5:d4:d7:de:2a:73:13:d6:
         a6:1c:78:93:d1:79:35:7b:e3:6b:d0:2c:8e:e4:56:c1:fd:2b:
         d4:22:a7:dd:0b:72:30:08:c4:18:b7:f2:e3:5c:6e:23:1c:0a:
         e4:83:dd:d0:c6:4f:d0:76:08:70:5b:99:fa:54:70:86:67:48:
         80:88:ea:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:21:55 2025 by rpki-client