This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a36333a3a2f34382d3438203d3e20343030383137.roa
File:                     323630323a3239363a36333a3a2f34382d3438203d3e20343030383137.roa (raw, json)
Hash identifier:          CppARg55ciM07jAmpDoeTyyq9RopgA9vq4NlYR2UZhQ=
Subject key identifier:   18:25:24:22:DB:C4:62:8B:5A:27:BA:8D:A5:58:1A:1E:EC:E1:C4:87
Certificate issuer:       /CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
Certificate serial:       3310175A1CBE175F4E0A5A679D3B42B7ADEC7955
Authority key identifier: 18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a36333a3a2f34382d3438203d3e20343030383137.roa
Signing time:             Wed 17 Dec 2025 12:49:37 +0000
ROA not before:           Wed 17 Dec 2025 12:44:37 +0000
ROA not after:            Wed 16 Dec 2026 12:49:37 +0000
asID:                     400817
IP address blocks:        2602:296:63::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 09:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:10:17:5a:1c:be:17:5f:4e:0a:5a:67:9d:3b:42:b7:ad:ec:79:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
        Validity
            Not Before: Dec 17 12:44:37 2025 GMT
            Not After : Dec 16 12:49:37 2026 GMT
        Subject: CN=18252422DBC4628B5A27BA8DA5581A1EECE1C487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:2c:37:8f:06:bc:53:a7:23:f5:86:98:27:
                    61:dc:e0:ec:10:e6:d7:4c:7c:93:2b:c5:4e:ee:28:
                    bc:98:37:f4:3b:6b:a5:85:6a:8a:ea:3a:24:14:6c:
                    4d:a1:5c:37:5b:9e:49:60:5b:97:e5:df:9d:9e:d5:
                    59:52:27:de:a0:76:ec:3f:1f:8e:d8:dd:2c:d5:26:
                    97:b2:7e:1b:bb:68:e4:11:d6:6d:5b:8a:4e:26:58:
                    b5:1a:52:a0:26:2e:6f:6b:81:c6:8d:e6:31:a9:ef:
                    d9:c8:e3:fc:1e:11:11:ef:77:24:22:98:f4:65:f6:
                    53:a3:56:e9:c1:dc:34:12:ef:28:f8:d3:a1:fd:c4:
                    be:95:00:23:16:77:f9:48:66:e3:5c:1a:cd:c1:b6:
                    b6:1e:61:0d:29:47:8d:52:dc:08:f7:fa:c6:c3:11:
                    80:f3:83:b1:aa:2a:a7:90:c5:5d:07:12:43:68:2f:
                    9e:11:14:9a:4a:73:51:c6:8f:86:0f:b5:e6:0a:ee:
                    21:9c:06:72:ad:c4:01:92:21:f8:95:e0:2f:1b:0c:
                    7d:7a:6c:3f:86:17:ae:59:cb:c7:71:a6:01:63:8c:
                    9e:57:ac:cb:1c:bf:ab:bb:e5:46:dc:a9:5d:3f:aa:
                    cc:df:e9:3f:d9:6e:34:d7:55:82:b1:90:fc:a5:76:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:25:24:22:DB:C4:62:8B:5A:27:BA:8D:A5:58:1A:1E:EC:E1:C4:87
            X509v3 Authority Key Identifier:
                keyid:18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a36333a3a2f34382d3438203d3e20343030383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:296:63::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:34:fc:83:e0:36:f3:45:26:20:9c:a9:41:35:81:fd:a5:f4:
         78:4e:75:65:bd:18:94:9c:73:4d:51:c5:54:b0:8d:2e:60:2c:
         04:b2:fe:af:f7:be:64:67:dd:79:a4:dc:04:8d:9d:37:61:cf:
         18:4f:74:9d:84:3b:06:6a:c8:da:80:64:e2:e5:e6:37:bc:a0:
         dc:52:6e:39:e3:89:fb:bf:30:3b:b8:94:ad:b2:c9:f9:ea:ce:
         98:64:39:35:6d:88:48:b7:f4:fd:d9:48:9d:2b:a2:4b:76:06:
         83:11:80:ea:61:36:54:42:fb:08:2d:fb:a5:90:ac:53:2b:15:
         f3:65:4b:90:a1:bd:b7:ab:cc:97:e0:24:5d:08:0b:8c:f6:6a:
         1a:22:e9:3f:fe:29:02:4e:e5:08:55:d7:4c:c9:da:35:3d:8f:
         e8:a9:2a:da:de:3a:f5:14:da:ab:66:db:f4:ee:67:13:b1:21:
         ce:fd:a3:4e:76:40:c9:a6:ee:35:94:17:4f:c5:bc:12:1a:db:
         ea:89:7b:74:da:a5:20:b2:60:85:8e:4d:c9:da:60:8a:d2:1d:
         af:c0:bf:a4:bd:e9:04:93:df:af:f6:a6:0b:d7:37:41:83:ea:
         9e:4c:ae:b3:d2:13:f4:47:8d:16:a2:e2:64:4c:17:b7:74:2f:
         9b:58:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:22:14 2025 by rpki-client