This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e203231363431.roa
File:                     3139392e3233312e37302e302f32342d3234203d3e203231363431.roa (raw, json)
Hash identifier:          0xNeAfARX2rR06/CXDU/TqGae4jCXeL9FtNsrABswbc=
Subject key identifier:   65:F5:50:D3:5D:DD:EC:E9:83:DE:60:AC:A5:F2:07:E7:3F:C9:8A:9E
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       7BA824AA000B60CFBD95C31C8297DDC9653A3ACA
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e203231363431.roa
Signing time:             Mon 22 Dec 2025 23:30:49 +0000
ROA not before:           Mon 22 Dec 2025 23:25:49 +0000
ROA not after:            Mon 21 Dec 2026 23:30:49 +0000
asID:                     21641
IP address blocks:        199.231.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 03:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a8:24:aa:00:0b:60:cf:bd:95:c3:1c:82:97:dd:c9:65:3a:3a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Dec 22 23:25:49 2025 GMT
            Not After : Dec 21 23:30:49 2026 GMT
        Subject: CN=65F550D35DDDECE983DE60ACA5F207E73FC98A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:89:8d:18:f9:39:97:71:cc:3d:ce:7b:12:
                    8e:db:3c:84:02:be:85:9f:eb:3b:71:6a:3c:1b:7b:
                    b5:33:aa:f5:37:4a:5b:e3:95:36:56:6e:64:29:e4:
                    95:64:88:9d:39:34:2a:64:63:3b:43:51:52:14:e7:
                    2d:b1:f0:c5:ef:23:61:ea:5c:35:b6:2d:27:ff:2d:
                    15:7f:a0:ee:84:14:e5:89:15:56:47:c2:d6:74:d1:
                    02:7e:fd:e6:d1:19:76:7f:06:b0:66:51:34:70:20:
                    17:13:e8:48:37:c9:08:92:e5:82:9f:e9:c6:34:16:
                    c2:55:65:07:05:ca:07:97:1b:08:83:50:a7:4e:a6:
                    dc:04:d5:01:91:a4:c4:c3:2b:f4:f9:51:6a:1e:e5:
                    17:cd:1e:0d:32:82:3a:75:30:11:8d:65:d2:9f:7a:
                    ba:89:88:81:c7:64:e5:cd:41:60:5b:5d:3e:08:8e:
                    42:e5:28:59:08:0b:5d:20:2d:d0:76:aa:56:af:aa:
                    4c:9f:5b:18:15:dc:1e:dd:fe:2b:5d:09:fa:e6:eb:
                    f4:2f:a1:ad:c2:82:83:3d:c6:0e:de:61:2b:57:ea:
                    59:4a:c5:bd:15:93:fa:42:01:c2:1c:cf:8f:af:1f:
                    f6:89:5c:52:63:33:b3:d1:37:e8:9a:d3:d5:be:0b:
                    83:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F5:50:D3:5D:DD:EC:E9:83:DE:60:AC:A5:F2:07:E7:3F:C9:8A:9E
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e203231363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:6d:35:90:8f:c9:e3:81:9a:a9:c1:7a:fb:68:7f:f1:e7:79:
         7d:38:bf:ab:c6:7b:c9:24:d8:9b:56:5a:c5:d0:9d:0f:7a:55:
         3c:53:d2:e7:b6:0e:02:ad:1d:fb:8b:8c:3b:40:73:d3:fc:15:
         5c:1a:e0:f0:ae:02:bb:53:c1:09:03:00:53:3c:2f:2a:03:c3:
         8c:60:43:ff:9c:f2:6b:52:ab:6f:6a:51:99:d6:10:69:ce:8f:
         18:47:e3:5e:9a:a4:50:b7:57:07:7a:87:fb:c8:6d:ba:35:6f:
         1a:17:2e:59:fb:31:e7:65:a7:67:29:5a:58:74:95:31:af:27:
         c2:e0:31:2a:4b:40:be:f0:c0:0d:25:a0:71:4c:a5:41:10:36:
         1c:40:9f:21:e5:90:50:13:41:71:bd:cf:78:01:1d:fa:a6:aa:
         52:d0:29:80:a1:f9:4e:43:61:83:7b:6e:6c:b0:00:01:42:69:
         49:a8:91:e6:d0:90:a3:e7:8b:e2:c9:5c:4f:65:54:af:b1:6d:
         66:14:71:df:b8:bd:e7:dc:2b:05:3d:88:db:e6:8e:1b:e0:03:
         80:69:b6:3a:96:2b:7c:ea:d7:09:0d:00:3a:49:af:e0:f4:3c:
         a1:c4:4e:b2:29:6b:1e:b2:66:bf:23:f9:33:66:2f:7c:59:70:
         0e:ef:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:14:43 2025 by rpki-client