This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32312e302f32342d3234203d3e20333936393933.roa
File:                     3134322e3234382e32312e302f32342d3234203d3e20333936393933.roa (raw, json)
Hash identifier:          IxTb/c5ET+69vpJmaOWUXhmH4482nVJYoNPwRDT9oic=
Subject key identifier:   0E:29:97:53:D8:4C:C5:D6:F9:4E:1F:EC:AD:BF:7C:3F:FB:97:3D:4A
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       125F19607E66262168C9D16640C9954EDA3AD62B
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32312e302f32342d3234203d3e20333936393933.roa
Signing time:             Thu 06 Nov 2025 22:13:32 +0000
ROA not before:           Thu 06 Nov 2025 22:08:32 +0000
ROA not after:            Thu 05 Nov 2026 22:13:32 +0000
asID:                     396993
IP address blocks:        142.248.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Dec 2025 16:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5f:19:60:7e:66:26:21:68:c9:d1:66:40:c9:95:4e:da:3a:d6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Nov  6 22:08:32 2025 GMT
            Not After : Nov  5 22:13:32 2026 GMT
        Subject: CN=0E299753D84CC5D6F94E1FECADBF7C3FFB973D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2f:32:1f:6b:c4:85:90:77:91:d2:b5:33:76:
                    12:91:82:5f:72:7a:cc:1d:a9:7f:33:6f:c9:cf:cd:
                    b5:3f:69:15:5d:42:b1:2e:40:ec:97:c2:21:e7:1e:
                    d2:16:3f:1c:9b:12:4b:f4:cc:ca:af:e5:0d:4a:cd:
                    fe:5d:b5:87:8e:f6:77:d3:16:76:0c:fb:89:ff:44:
                    9b:40:c5:f1:7b:95:9e:ad:51:d5:92:ec:58:ac:f3:
                    ed:91:d0:6d:8c:59:c5:d9:6e:77:9a:ac:ca:6a:b7:
                    8c:b2:37:40:f1:0a:8f:85:9f:61:e1:4e:38:25:69:
                    aa:3f:43:c0:be:2f:bd:da:4a:b8:9a:31:69:5a:3a:
                    07:a6:e9:02:3d:df:e4:46:a7:7a:f8:60:03:21:54:
                    22:97:5b:81:1a:f4:35:6a:b1:66:ef:24:45:23:91:
                    c5:0e:4a:9e:f3:a7:ef:f1:f5:d6:e2:c6:4e:23:0c:
                    ae:e6:f0:5c:4a:bc:10:25:9f:e4:5e:b3:65:cd:a0:
                    03:2e:f8:43:25:71:ab:ef:24:28:45:77:c1:64:86:
                    f1:2e:81:ce:29:1b:ba:c6:e6:21:df:40:a8:22:31:
                    bf:da:0c:91:e4:9d:bf:12:0a:82:f7:6e:b8:76:d3:
                    33:62:6b:48:89:ad:2b:64:bc:2e:bd:83:22:44:ee:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:29:97:53:D8:4C:C5:D6:F9:4E:1F:EC:AD:BF:7C:3F:FB:97:3D:4A
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32312e302f32342d3234203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:e5:52:36:68:1a:36:96:cb:0b:45:70:40:3a:c7:12:87:
         71:27:c6:7e:ca:07:05:25:04:4d:60:21:01:4c:c9:6d:b3:1d:
         cb:17:94:39:8f:43:69:b2:26:d4:93:39:b6:14:3c:13:99:b1:
         02:f1:5a:e1:13:09:e4:c6:d5:7c:91:e7:3d:b1:f8:85:12:bc:
         df:90:aa:55:c7:65:e9:ad:79:33:2a:b8:56:13:f6:0c:e6:d8:
         56:5a:d5:55:98:58:79:d3:08:13:d7:08:b2:7a:54:f8:36:e7:
         2b:da:97:64:f8:13:af:52:50:73:a5:f9:5f:76:d7:a9:33:6e:
         4f:0b:0d:a7:49:e4:11:c0:e9:a6:f4:c6:a5:39:7a:f4:f6:00:
         60:97:a5:d0:ff:31:bd:fb:b3:13:8b:aa:52:0c:bf:3c:07:21:
         ab:94:24:97:b7:85:1a:1a:50:80:01:b7:ab:58:89:2b:65:48:
         33:10:31:8e:26:be:11:f0:ea:8e:82:f2:d1:35:fa:bf:02:87:
         05:33:82:8e:29:14:7d:15:60:72:0c:65:f6:46:9b:1a:3c:1c:
         24:fc:b5:6b:5a:3c:f2:14:d3:27:21:d9:3e:15:f6:6b:00:ae:
         e3:3c:23:dc:2b:e3:1f:43:68:e2:80:15:3f:d1:af:25:25:85:
         03:9b:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 19:11:14 2025 by rpki-client