This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136322e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3136322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          PJ0fZsejjLptbNOlBWUGPPCkkTY2fJN/ctzt6okkQo0=
Subject key identifier:   A8:BD:2D:8B:88:66:1D:BD:EF:C6:3F:9A:35:97:5F:C1:B8:BC:A7:2E
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       240B59BF8CC66A8EA8D4E11797D2B36866665134
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 18 Dec 2025 00:06:01 +0000
ROA not before:           Thu 18 Dec 2025 00:01:01 +0000
ROA not after:            Thu 17 Dec 2026 00:06:01 +0000
asID:                     834
IP address blocks:        209.87.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0b:59:bf:8c:c6:6a:8e:a8:d4:e1:17:97:d2:b3:68:66:66:51:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Dec 18 00:01:01 2025 GMT
            Not After : Dec 17 00:06:01 2026 GMT
        Subject: CN=A8BD2D8B88661DBDEFC63F9A35975FC1B8BCA72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fb:3f:3d:74:0d:42:90:1f:c6:ef:c3:d1:50:
                    52:83:e2:eb:9b:9b:06:76:cc:31:31:07:6f:37:04:
                    40:67:4d:17:3e:eb:5c:7d:dc:40:66:c6:52:24:ce:
                    78:09:74:04:d5:da:92:c8:cd:af:2f:18:91:16:27:
                    66:38:f1:28:f7:d1:47:bd:17:5a:e4:47:7e:fe:bd:
                    87:61:4d:57:05:6e:9b:b8:56:2f:4c:5c:fe:a5:12:
                    b5:20:fd:36:79:dd:08:75:85:65:e7:70:72:cd:44:
                    d1:8a:94:77:2e:78:d9:1b:eb:9a:47:9c:4b:e4:0f:
                    2a:65:fe:66:2b:ef:6c:0a:95:31:67:fe:4a:f1:d3:
                    a0:ba:68:7d:63:a7:92:b1:29:1c:97:d4:5e:02:33:
                    6e:e1:03:77:8d:e3:a8:fa:ac:56:2c:3d:99:62:06:
                    77:d6:b6:f0:3d:eb:ce:d1:0f:1a:88:56:04:20:dc:
                    01:35:97:92:1c:d5:9b:39:35:af:3d:a1:af:a1:b3:
                    05:af:f6:e5:08:af:9a:27:f5:1f:02:7a:d5:44:01:
                    40:f3:a7:0c:11:1a:ca:c8:41:af:4e:b4:72:82:b5:
                    e8:a2:9e:17:b8:69:ac:9f:3f:bf:3c:36:96:60:36:
                    55:af:50:69:f3:0f:2b:57:2b:9a:0c:b8:72:eb:cf:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BD:2D:8B:88:66:1D:BD:EF:C6:3F:9A:35:97:5F:C1:B8:BC:A7:2E
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:81:33:e7:75:6b:a1:44:28:53:64:35:2e:76:ba:6a:be:
         e1:35:7f:ef:d9:59:d4:a9:95:6b:b0:6c:93:c8:b1:ea:0f:d1:
         00:0a:7d:0a:9e:f3:a3:b1:5e:8c:4c:5a:e2:bc:35:38:7e:df:
         c6:59:18:8a:09:83:63:58:cc:b1:c4:d2:08:7a:f7:3c:ac:e2:
         34:85:69:2f:86:7d:4b:f1:a0:36:72:8e:e0:e6:d1:2d:a7:21:
         72:80:12:85:57:83:82:67:45:fc:4d:13:31:37:70:3f:88:fa:
         97:40:b6:f6:76:1f:eb:14:a9:2c:a5:e6:a9:f4:28:14:d4:92:
         23:99:b4:26:c6:51:2b:7b:bb:54:ed:aa:ef:5f:07:af:f6:ae:
         e4:cc:49:92:59:4c:71:16:55:a6:dd:53:a2:c2:ec:91:9d:cf:
         dc:e2:26:77:de:19:b7:99:92:75:cf:1a:8f:1d:d7:45:b6:c7:
         23:48:f9:19:65:69:e9:93:8a:9c:af:56:48:50:5d:0d:49:e8:
         43:bd:ed:d4:f7:59:fb:b3:77:c1:db:b3:f0:4a:e6:af:2e:f9:
         6c:1b:79:92:9e:2c:a4:18:50:b0:c1:1f:c6:16:fc:05:f8:c7:
         23:9c:b4:bf:f2:5e:0b:9a:be:5a:5c:8f:31:6f:e0:c0:3d:c2:
         a2:40:84:15
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUJAtZv4zGao6o1OEXl9KzaGZmUTQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUxMjE4MDAwMTAxWhcNMjYxMjE3MDAwNjAx
WjAzMTEwLwYDVQQDEyhBOEJEMkQ4Qjg4NjYxREJERUZDNjNGOUEzNTk3NUZDMUI4
QkNBNzJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vs/PXQNQpAf
xu/D0VBSg+Lrm5sGdswxMQdvNwRAZ00XPutcfdxAZsZSJM54CXQE1dqSyM2vLxiR
FidmOPEo99FHvRda5Ed+/r2HYU1XBW6buFYvTFz+pRK1IP02ed0IdYVl53ByzUTR
ipR3LnjZG+uaR5xL5A8qZf5mK+9sCpUxZ/5K8dOgumh9Y6eSsSkcl9ReAjNu4QN3
jeOo+qxWLD2ZYgZ31rbwPevO0Q8aiFYEINwBNZeSHNWbOTWvPaGvobMFr/blCK+a
J/UfAnrVRAFA86cMERrKyEGvTrRygrXoop4XuGmsnz+/PDaWYDZVr1Bp8w8rVyua
DLhy689/wwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKi9LYuIZh2978Y/mjWXX8G4
vKcuMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5
Mzg4NGQyYTMwLzAvMzIzMDM5MmUzODM3MmUzMTM2MzIyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADRV6IwDQYJKoZIhvcNAQELBQADggEB
ACsRgTPndWuhRChTZDUudrpqvuE1f+/ZWdSplWuwbJPIseoP0QAKfQqe86OxXoxM
WuK8NTh+38ZZGIoJg2NYzLHE0gh69zys4jSFaS+GfUvxoDZyjuDm0S2nIXKAEoVX
g4JnRfxNEzE3cD+I+pdAtvZ2H+sUqSyl5qn0KBTUkiOZtCbGUSt7u1Ttqu9fB6/2
ruTMSZJZTHEWVabdU6LC7JGdz9ziJnfeGbeZknXPGo8d10W2xyNI+RllaemTipyv
VkhQXQ1J6EO97dT3Wfuzd8Hbs/BK5q8u+WwbeZKeLKQYULDBH8YW/AX4xyOctL/y
XguavlpcjzFv4MA9wqJAhBU=
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:54:45 2025 by rpki-client