This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          WTDpuRN4Tt8oOQ7RMjkJUV7vBoLFSbVNhtHpZupweOc=
Subject key identifier:   37:A3:62:11:90:BD:7E:45:74:8B:1E:AF:65:C5:60:58:38:26:B6:E1
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       7F520A9490393B99A67D155AAF78EA7A30839E
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
Signing time:             Tue 06 Jan 2026 01:36:05 +0000
ROA not before:           Tue 06 Jan 2026 01:31:05 +0000
ROA not after:            Tue 05 Jan 2027 01:36:05 +0000
asID:                     14618
IP address blocks:        40.27.55.0/24 maxlen: 24
                          40.183.0.0/18 maxlen: 24
                          40.183.80.0/22 maxlen: 24
                          40.183.100.0/24 maxlen: 24
                          40.183.121.0/24 maxlen: 24
                          40.183.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Jan 2026 22:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:52:0a:94:90:39:3b:99:a6:7d:15:5a:af:78:ea:7a:30:83:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jan  6 01:31:05 2026 GMT
            Not After : Jan  5 01:36:05 2027 GMT
        Subject: CN=37A3621190BD7E45748B1EAF65C560583826B6E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:63:4a:d1:f5:74:46:eb:a3:d2:93:49:1e:
                    28:68:86:da:b2:b6:96:0b:f9:f4:f3:8a:66:54:77:
                    f5:d9:a8:95:33:2a:d6:74:02:16:45:e3:a2:a0:c1:
                    fb:96:57:fa:a8:96:4e:19:4f:a0:60:27:c5:ff:43:
                    7f:f2:d1:6f:6a:07:21:16:4c:26:eb:3c:ad:49:0c:
                    26:a7:70:1c:0d:47:f8:f0:07:01:e0:36:0f:60:02:
                    74:42:f3:40:69:b6:a3:3a:fe:cf:08:0c:c2:35:af:
                    fe:f1:d1:7c:1b:5a:a2:43:16:c0:60:a4:35:55:e4:
                    b4:d7:c9:7a:e4:55:6e:9b:83:f0:87:d0:cd:91:52:
                    3e:f9:a3:a1:ab:07:bd:a3:ae:f2:46:79:cc:0d:32:
                    61:60:da:11:b3:dc:5c:9b:cb:a4:0d:d0:ea:a7:f4:
                    2a:bb:ba:c2:22:c9:3e:e5:67:31:80:00:c9:00:36:
                    fa:04:02:be:d7:ba:7c:86:ec:a7:50:07:f8:b2:ec:
                    7f:17:a5:82:58:43:dc:31:78:fd:ab:d7:0a:c2:ea:
                    0a:50:14:ba:c5:b2:75:6c:9a:8d:9f:53:0f:05:12:
                    88:4b:7a:68:88:20:28:50:33:eb:6e:5d:4b:9c:13:
                    24:11:be:8d:62:19:f9:62:8a:66:1d:7c:be:20:e8:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A3:62:11:90:BD:7E:45:74:8B:1E:AF:65:C5:60:58:38:26:B6:E1
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.55.0/24
                  40.183.0.0/18
                  40.183.80.0/22
                  40.183.100.0/24
                  40.183.121.0/24
                  40.183.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:33:90:c9:fe:98:39:50:43:b7:5a:45:5f:bc:4d:0f:d0:3a:
         c9:7a:8f:58:35:93:de:82:57:e2:7f:61:00:0a:12:45:6e:d9:
         3f:85:05:9b:29:3c:fd:0d:a1:9d:40:a9:0d:73:1d:c6:4b:9e:
         23:b0:a9:aa:5a:92:37:26:75:d4:44:1a:e6:cd:b1:27:35:f7:
         dc:ed:45:65:78:b1:61:1c:4f:ec:e6:98:b2:17:ff:55:9a:47:
         a0:6a:96:e1:17:7d:15:70:7a:91:51:0a:fd:d4:16:fa:48:84:
         0b:f5:90:a3:b3:ec:5e:fc:57:13:61:c6:e0:3e:cd:01:65:f2:
         aa:09:cc:ef:6d:a6:40:d9:29:c7:d9:d3:94:c8:57:9d:58:d4:
         e3:ea:4e:bf:8e:0c:c5:c6:34:74:3c:13:b1:c5:60:91:07:61:
         da:a2:c1:6d:93:6d:56:0e:3c:9a:91:1a:3c:ee:6b:f6:3f:6e:
         9c:83:c3:36:93:58:46:38:aa:ca:74:bb:b2:bc:92:bb:2f:e6:
         d4:8f:37:54:e0:a9:08:2c:02:c9:29:f9:e5:b6:f5:1a:6d:6f:
         8c:a9:3a:e7:42:25:e7:18:07:39:8c:5f:a9:38:c6:27:6b:b7:
         f4:a9:0f:f9:c9:66:a2:1e:95:bb:dd:3a:69:7a:4b:1e:f0:88:
         bb:86:98:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jan 7 23:48:17 2026 by rpki-client