This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3332203d3e203631313338.roa
File:                     3132382e3235342e3230342e302f32322d3332203d3e203631313338.roa (raw, json)
Hash identifier:          LZ60hWZBkwYAUS+2Dm7rBZqkcnRxlbKLMY7piGy/gd4=
Subject key identifier:   9C:1F:5D:AB:FC:79:96:90:72:9F:4E:3A:67:4E:59:55:A3:F1:B0:95
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       1CC9A5FB7E8B941A2E2E2F0D2E31469496164287
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3332203d3e203631313338.roa
Signing time:             Mon 15 Dec 2025 03:40:48 +0000
ROA not before:           Mon 15 Dec 2025 03:35:48 +0000
ROA not after:            Mon 14 Dec 2026 03:40:48 +0000
asID:                     61138
IP address blocks:        128.254.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 04:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c9:a5:fb:7e:8b:94:1a:2e:2e:2f:0d:2e:31:46:94:96:16:42:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec 15 03:35:48 2025 GMT
            Not After : Dec 14 03:40:48 2026 GMT
        Subject: CN=9C1F5DABFC799690729F4E3A674E5955A3F1B095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:7c:23:66:08:69:24:c8:dc:d0:38:aa:3c:
                    73:9a:38:1a:0b:43:0e:c4:7a:33:4b:af:6e:2e:24:
                    9b:f5:13:87:aa:9e:c9:5f:1c:46:94:af:03:25:94:
                    bc:f8:8f:5d:76:75:89:ad:68:71:50:f5:71:bb:ab:
                    b7:fb:d0:5e:ed:3a:8a:3b:7a:a0:08:04:98:8e:b6:
                    d1:a9:6e:37:32:7d:09:c0:59:c7:1f:57:18:f2:4e:
                    c3:e7:a7:06:20:7b:58:46:6f:28:21:70:ab:a1:71:
                    6b:9a:ff:1e:17:97:e0:ab:c2:6d:ff:2f:9c:ef:b8:
                    97:72:bf:92:91:4b:b8:2b:e7:83:c5:57:ff:23:07:
                    7d:02:e5:a7:20:75:0f:65:aa:79:d9:85:4e:1a:b9:
                    f4:3d:32:ef:00:83:93:8b:ba:3a:17:05:7f:33:c6:
                    44:2d:39:ae:4b:b2:77:1d:8b:ff:1f:0a:9e:06:e5:
                    2c:5e:e2:36:c1:5a:7e:1c:f9:e9:90:c3:f4:14:fa:
                    9d:54:cb:93:32:36:aa:c1:8f:06:7a:4e:0f:be:0e:
                    69:7a:a8:88:6f:57:87:ea:6f:10:d6:cd:94:e9:f5:
                    6e:6d:23:f1:dc:3c:bf:47:83:e9:bc:a8:2d:f1:a3:
                    8d:e7:ba:97:49:46:e3:c4:09:4b:94:09:f0:f4:90:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1F:5D:AB:FC:79:96:90:72:9F:4E:3A:67:4E:59:55:A3:F1:B0:95
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3332203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:6b:29:c9:9d:b2:f0:96:48:25:86:f7:0e:b3:e9:3d:fe:c4:
         f3:06:97:32:93:75:b0:20:a9:8b:00:58:86:04:0b:ab:9d:83:
         ac:37:3d:8c:58:ad:ea:8d:23:82:7d:ed:13:d6:5d:9f:b8:58:
         a1:ad:68:72:45:22:4d:fd:73:a1:84:76:85:3b:1b:9b:40:f3:
         d6:fa:e5:3d:c8:24:08:1a:f6:35:f4:d9:1b:6f:cb:d1:c6:3e:
         21:33:54:98:bd:5a:37:54:c4:71:92:76:ee:86:f2:90:55:11:
         92:5d:e3:43:72:b2:ef:ea:0e:49:3f:aa:9b:30:82:d3:46:10:
         d0:48:ee:fb:33:56:de:62:60:b8:b1:9a:70:1e:88:b6:11:33:
         7f:26:c4:13:77:f5:59:89:05:bb:cf:1c:27:c0:99:9f:5c:df:
         e0:c5:09:ce:d0:10:d3:02:5a:6d:f5:0b:b2:d7:ab:b6:4b:57:
         6f:66:55:0d:a6:b6:ad:3d:bc:22:26:0d:63:15:2b:78:88:42:
         2d:65:a1:c1:d7:8c:c4:6b:2a:98:7a:d0:02:b8:9a:a1:83:41:
         92:92:28:23:2e:ad:b0:19:69:3f:4a:0d:c7:b5:4e:d5:00:21:
         0c:d6:6d:55:96:7e:31:ab:58:fa:d1:2d:91:bd:06:c9:fa:17:
         37:ca:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:17:13 2025 by rpki-client