This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212384.roa
File:                     AS212384.roa (raw, json)
Hash identifier:          VMgVVs7Rv9UCtQGd0MaT0VsE2XRPP4SCM+UtD8D9TT4=
Subject key identifier:   0F:BB:D7:5B:B4:28:FA:0E:74:E0:B3:45:E6:42:48:9D:B5:78:93:34
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       0EBA4B76D85B93455ED94BA1C778E4D8235B3217
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212384.roa
Signing time:             Thu 27 Nov 2025 14:30:46 +0000
ROA not before:           Thu 27 Nov 2025 14:25:46 +0000
ROA not after:            Thu 26 Nov 2026 14:30:46 +0000
asID:                     212384
IP address blocks:        140.99.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ba:4b:76:d8:5b:93:45:5e:d9:4b:a1:c7:78:e4:d8:23:5b:32:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Nov 27 14:25:46 2025 GMT
            Not After : Nov 26 14:30:46 2026 GMT
        Subject: CN=0FBBD75BB428FA0E74E0B345E642489DB5789334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1b:c1:de:b0:56:db:ae:7d:1f:91:1a:b6:f9:
                    75:4c:59:c9:66:66:85:5f:fa:f0:98:24:7c:2a:c9:
                    87:1c:94:8c:c5:38:94:bf:f6:ae:67:16:da:a6:e2:
                    85:a1:27:4d:52:27:da:2c:48:b6:f5:d5:0f:70:4b:
                    f6:cb:9c:5d:b2:ae:f9:63:61:a3:3d:d6:d8:38:15:
                    b6:e3:6e:5b:bf:e1:d6:51:c9:65:f2:3d:cc:a0:23:
                    f2:61:6b:f7:c8:d8:7b:a4:13:58:e4:f5:6c:48:40:
                    86:09:6c:f4:5d:f7:8c:7c:c5:93:b0:55:6c:eb:21:
                    24:a0:45:72:01:9b:53:53:f8:b5:aa:c2:7d:1f:28:
                    e5:9f:fe:dc:5b:00:d7:6d:fe:fd:d4:10:3d:ae:72:
                    57:ce:63:ba:ca:7f:e1:99:d3:23:8c:54:d7:71:a9:
                    ac:b1:82:05:ca:6f:cd:e4:bc:0a:1a:26:45:7f:6f:
                    4e:a7:6e:af:df:57:be:a5:88:be:6a:47:2b:ef:82:
                    e8:bb:ca:4d:cb:aa:be:19:c6:fa:de:3e:af:a7:42:
                    49:c5:00:cd:cd:68:42:bf:0d:b0:8e:d0:53:d4:c7:
                    a8:38:fd:5d:d9:cb:10:02:e5:2a:84:51:3e:a4:ec:
                    30:a1:77:0c:30:80:5e:ec:18:b6:f3:4b:10:c6:7e:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:D7:5B:B4:28:FA:0E:74:E0:B3:45:E6:42:48:9D:B5:78:93:34
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:8c:58:a6:2f:e6:7f:61:99:b4:74:24:ec:ba:d6:fc:26:01:
         f7:d5:d6:30:fc:5a:bd:33:fa:e1:53:d0:17:9f:da:54:5f:2a:
         21:a4:cf:92:c7:b1:4c:e9:0b:c9:fe:e3:02:2a:2a:2d:3a:0d:
         c1:4b:23:2f:af:0d:80:9e:29:96:c5:28:25:84:80:5c:30:73:
         f3:89:60:0a:f8:98:f1:5f:8d:99:b6:6c:34:ed:73:5b:88:1d:
         3c:5c:8b:ee:ba:37:9a:67:14:d3:dc:25:4a:43:12:ab:84:0a:
         dd:68:05:05:59:8c:37:b1:b4:81:61:ab:e0:0f:50:37:8b:14:
         6e:fa:99:df:d1:20:3c:a7:bf:d7:cb:10:08:b9:82:fe:07:77:
         dc:12:1a:95:22:42:fa:61:6d:88:6b:f9:9a:ca:8d:6b:16:1f:
         d3:4e:d8:53:88:a6:23:cc:88:de:9e:cf:62:37:a1:4b:5c:43:
         98:4a:2d:85:84:bf:75:7f:47:88:40:b1:cd:b1:8b:dd:b0:f9:
         e3:d5:37:40:47:2c:41:c4:46:b5:c8:aa:db:f2:21:be:dc:47:
         0f:f1:ad:a6:9a:9d:8b:a9:83:59:f4:30:78:33:6f:28:6f:03:
         64:91:dc:63:85:d5:d7:ed:79:23:98:65:28:f5:a5:d7:b8:fb:
         b9:14:8a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 17:22:02 2025 by rpki-client