This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235352e302f32342d3234203d3e203633323634.roa
File:                     3137322e3130392e3235352e302f32342d3234203d3e203633323634.roa (raw, json)
Hash identifier:          rQWhx0PIZB/Xh+YHiqsvsNmNruCTXqGJiNLLPryowo4=
Subject key identifier:   64:BD:73:DE:88:96:78:E1:DB:B0:93:FE:66:DC:3F:D6:92:38:D6:66
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       049DE5453ACDD49CAA436F9D5826AAA0D5755D42
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235352e302f32342d3234203d3e203633323634.roa
Signing time:             Sun 07 Dec 2025 15:03:19 +0000
ROA not before:           Sun 07 Dec 2025 14:58:19 +0000
ROA not after:            Sun 06 Dec 2026 15:03:19 +0000
asID:                     63264
IP address blocks:        172.109.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9d:e5:45:3a:cd:d4:9c:aa:43:6f:9d:58:26:aa:a0:d5:75:5d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Dec  7 14:58:19 2025 GMT
            Not After : Dec  6 15:03:19 2026 GMT
        Subject: CN=64BD73DE889678E1DBB093FE66DC3FD69238D666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:73:f2:9b:cd:63:f0:dd:05:d2:4f:0d:1a:
                    9f:7a:34:6b:9c:40:a6:e0:4a:e8:f0:e5:02:57:45:
                    7d:f9:cb:dd:59:e2:ef:ea:bb:98:63:49:6d:17:f2:
                    0c:98:08:06:8e:8e:f4:08:1d:e3:7d:ee:1f:61:74:
                    55:f5:92:95:27:d2:c6:64:95:a3:57:10:99:29:09:
                    4b:59:07:ab:99:d3:97:d4:4d:54:2a:27:9a:a9:70:
                    9a:54:fc:30:0e:a3:55:ad:4e:2c:dc:13:be:50:07:
                    e5:ac:e7:85:a4:0d:be:d4:86:07:15:05:ed:7e:17:
                    b0:57:74:af:e5:28:99:88:fa:bd:31:e5:2c:4d:2f:
                    f7:83:c9:09:20:d7:b8:94:19:fd:c3:f6:0b:28:ce:
                    39:24:73:33:e1:06:99:09:b5:ba:36:d2:3f:e3:f9:
                    8a:45:b0:59:37:61:5b:78:fb:69:47:c1:b2:01:dc:
                    b3:83:01:36:c2:78:fb:76:88:91:22:54:c8:de:fb:
                    d7:24:db:f2:9d:bb:2c:d6:ae:ad:c4:f3:87:87:79:
                    bf:10:ab:b7:ee:2e:7d:58:52:48:45:b6:e7:20:6d:
                    5d:46:35:e4:4a:40:1d:c1:a9:a1:a0:97:63:b5:36:
                    99:0b:3e:73:c7:af:fc:92:3d:19:4d:b9:42:d7:aa:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BD:73:DE:88:96:78:E1:DB:B0:93:FE:66:DC:3F:D6:92:38:D6:66
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235352e302f32342d3234203d3e203633323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:de:fb:9a:5c:cf:5e:b8:8f:a7:7b:e7:d7:09:a9:92:e0:fc:
         d3:ae:de:48:e1:c9:f2:3b:d8:4d:25:ac:9e:64:ab:73:b7:e3:
         6d:d7:bf:48:b6:11:9e:81:90:74:cd:63:04:8f:c4:ae:7e:a4:
         cc:a5:dc:f3:00:ba:7b:37:e1:f5:5c:ab:ce:e8:c3:83:cc:12:
         f6:8a:da:b7:1c:3e:f1:5c:fb:59:7b:63:97:c4:d2:23:67:66:
         17:00:38:d4:0b:26:5f:0f:c1:79:b3:04:29:b2:9b:dc:ea:7b:
         f5:b5:72:27:88:e0:91:06:39:7f:11:da:0c:30:89:91:84:9a:
         f1:de:2b:54:2f:49:0c:8c:98:1e:8e:08:dc:ba:37:98:53:22:
         e2:e7:ba:11:fd:7b:37:94:0e:af:11:3a:78:a1:ce:58:cc:f0:
         39:42:31:99:1f:8f:89:94:14:f9:b9:3b:90:d3:d0:98:ed:8d:
         89:a3:08:78:79:b2:f7:1a:a0:32:8f:f4:b9:02:03:8a:cf:4d:
         56:7f:b4:4c:c6:48:65:9f:03:ec:e1:82:6d:fd:58:09:71:25:
         6b:1d:70:28:68:0d:6b:f4:1c:72:07:dc:4a:cf:60:87:37:2e:
         e9:3d:c2:fe:f2:5c:c3:03:52:73:26:93:10:9d:81:77:cd:ab:
         7d:5b:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:01:03 2025 by rpki-client