This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62998.roa
File:                     AS62998.roa (raw, json)
Hash identifier:          sdoMbHk8wfQ6zTmdKj5obOY+yNHGJ0LmkBv1gGA3M7o=
Subject key identifier:   89:37:83:E5:09:C6:EB:C1:B0:0B:E2:D9:6C:E7:7C:66:C6:BD:5F:90
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       066EDAE79C9EAF16FB491535A3091FE4969CEC96
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62998.roa
Signing time:             Mon 08 Dec 2025 03:05:56 +0000
ROA not before:           Mon 08 Dec 2025 03:00:56 +0000
ROA not after:            Mon 07 Dec 2026 03:05:56 +0000
asID:                     62998
IP address blocks:        107.150.26.0/24 maxlen: 24
                          107.172.23.0/24 maxlen: 24
                          107.172.186.0/24 maxlen: 24
                          107.174.106.0/24 maxlen: 24
                          155.94.130.0/24 maxlen: 24
                          155.94.138.0/24 maxlen: 24
                          155.94.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 02:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6e:da:e7:9c:9e:af:16:fb:49:15:35:a3:09:1f:e4:96:9c:ec:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  8 03:00:56 2025 GMT
            Not After : Dec  7 03:05:56 2026 GMT
        Subject: CN=893783E509C6EBC1B00BE2D96CE77C66C6BD5F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:39:1a:e5:82:41:fa:ca:49:a6:93:df:78:
                    79:54:95:f6:10:2c:2f:f9:5b:a2:ff:75:45:d1:29:
                    ff:c6:a2:30:1e:9c:00:9d:cc:38:02:af:9b:81:ac:
                    7b:f6:c0:49:8f:f6:f0:82:c0:e6:4d:d7:20:e1:0a:
                    48:64:27:94:16:99:d0:0e:25:97:50:08:e3:17:dd:
                    ab:47:9e:fc:d9:00:c8:1e:b7:0f:90:36:c0:71:49:
                    c5:7b:50:c3:a3:94:c0:3d:41:32:78:e4:d2:17:88:
                    f7:18:c9:3c:74:23:33:1f:e8:74:c6:7e:9a:0e:ac:
                    2f:a6:2c:51:4f:33:be:f1:ae:4d:87:cf:96:7b:8c:
                    26:86:5b:9f:ed:db:ef:4d:84:fa:dd:40:39:2d:07:
                    66:a9:ca:1a:90:2d:5b:ff:5a:ec:7b:26:a9:87:4f:
                    5b:a3:4a:13:e9:ae:40:83:88:76:26:38:68:90:ae:
                    af:f2:bf:28:cc:f2:63:20:4d:1c:06:5b:46:5a:77:
                    6b:ff:df:dc:3d:e5:0a:4f:5b:d6:cc:04:76:ec:ff:
                    3f:6b:fe:6e:84:44:79:64:6a:4d:e1:ad:a9:b1:f6:
                    5f:90:ac:6c:1d:93:11:26:db:31:7c:0f:96:c4:75:
                    3b:9d:5d:87:e9:b5:4a:43:c8:fe:57:d0:b7:48:95:
                    7e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:37:83:E5:09:C6:EB:C1:B0:0B:E2:D9:6C:E7:7C:66:C6:BD:5F:90
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62998.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.26.0/24
                  107.172.23.0/24
                  107.172.186.0/24
                  107.174.106.0/24
                  155.94.130.0/24
                  155.94.138.0/24
                  155.94.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:30:21:20:39:b3:d5:40:35:2e:40:8b:bf:7b:d1:2f:14:04:
         6a:37:fc:90:ed:15:72:16:2d:39:b1:31:df:b8:d1:26:73:26:
         4e:8c:22:58:e8:3d:a3:b5:46:e5:f0:25:24:0d:4d:d2:10:55:
         3c:ee:b2:02:f9:3f:ca:eb:25:ae:76:d7:04:5b:39:3c:cb:14:
         ef:11:06:8e:3b:2d:f8:ef:e8:a7:e8:9b:1f:c4:fd:fc:a1:21:
         52:d2:7c:a0:c7:ec:e5:90:de:49:e2:6c:09:b5:73:13:10:d4:
         5b:20:92:59:a0:b4:bf:55:28:72:39:2a:d4:33:7a:f6:ff:84:
         ee:24:60:56:af:b0:03:ca:b3:00:ed:8b:c5:e9:8d:ab:10:8d:
         89:8c:5e:2f:61:48:63:4b:96:bb:e0:4a:6e:54:ae:b2:0b:c9:
         9b:94:84:20:45:d3:92:87:15:44:34:87:62:d0:03:67:f5:03:
         68:0d:92:b0:60:f2:47:95:f0:2c:ba:a2:ed:15:6e:6c:28:a4:
         3b:d6:f2:33:5d:c6:eb:33:58:74:3f:74:56:7d:10:1d:e1:47:
         ae:59:9c:b5:f2:2a:97:22:e9:80:e2:48:99:b0:dc:3e:cd:9b:
         fc:f3:4a:7e:2f:86:a1:61:76:9e:9b:02:8a:fe:2c:fd:d0:cd:
         30:f6:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:53:16 2025 by rpki-client