This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa
File:                     AS25198.roa (raw, json)
Hash identifier:          Rs1PL8ec1Api7deSagNU0wXodtOaONuQvX9Mx/NDPwg=
Subject key identifier:   D4:56:9C:83:C8:69:E5:9A:53:47:1D:EB:BD:77:C4:90:3E:5F:58:34
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5AAEC6F04332EAD4C911389CC77319CED2919FF9
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa
Signing time:             Sat 22 Nov 2025 03:30:26 +0000
ROA not before:           Sat 22 Nov 2025 03:25:26 +0000
ROA not after:            Sat 21 Nov 2026 03:30:26 +0000
asID:                     25198
IP address blocks:        40.183.143.0/24 maxlen: 24
                          40.183.159.0/24 maxlen: 24
                          40.223.80.0/24 maxlen: 24
                          40.223.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 01:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ae:c6:f0:43:32:ea:d4:c9:11:38:9c:c7:73:19:ce:d2:91:9f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov 22 03:25:26 2025 GMT
            Not After : Nov 21 03:30:26 2026 GMT
        Subject: CN=D4569C83C869E59A53471DEBBD77C4903E5F5834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:89:78:22:97:77:aa:e6:70:79:1d:0a:0a:
                    7b:b7:ac:4e:ed:4b:be:bd:dc:27:93:0e:fd:2f:50:
                    e7:9f:8b:15:51:cb:b9:aa:85:f5:66:15:57:8d:ef:
                    17:37:b9:3b:c4:e8:91:d7:a5:3d:48:bb:78:ee:dc:
                    e5:fc:a9:d9:9b:41:9e:e5:d0:9c:b9:ad:c9:c2:57:
                    f4:d8:55:a1:99:1e:e7:cc:ee:a2:15:18:ec:9a:62:
                    fd:15:40:83:07:8b:b7:93:94:06:a5:74:67:12:13:
                    74:a6:51:36:ca:23:df:3f:42:d2:d2:69:36:5f:e9:
                    ed:83:de:1e:54:56:98:04:21:27:88:0c:d0:09:f9:
                    32:32:e2:9b:e4:2c:84:20:ae:f0:54:f2:20:d5:18:
                    57:b5:88:24:0a:fc:57:43:56:15:1d:4a:6f:80:93:
                    e6:43:23:29:f3:ad:5f:86:92:cf:a9:3b:d0:21:7d:
                    2e:5d:70:17:6d:ba:ae:fc:02:64:59:57:7a:e6:30:
                    22:01:61:8f:d5:47:05:15:50:94:3d:fe:c2:2b:f1:
                    dc:ec:ee:96:d4:58:e2:fa:f2:36:6b:5d:a6:b9:40:
                    56:6e:80:95:6b:3c:ac:21:7e:bc:02:34:11:b0:ca:
                    63:e0:10:48:e5:5e:cb:40:1e:71:a3:30:a2:d3:79:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:56:9C:83:C8:69:E5:9A:53:47:1D:EB:BD:77:C4:90:3E:5F:58:34
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.143.0/24
                  40.183.159.0/24
                  40.223.80.0/24
                  40.223.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:9b:98:05:ab:39:cd:56:6d:8d:f7:10:06:f3:ce:10:e0:12:
         fe:df:a8:46:21:cf:b5:fb:50:69:0e:4f:39:16:ca:b2:2c:0e:
         2d:74:0e:ab:c6:b4:1b:57:ca:d7:e7:08:03:c6:35:90:60:54:
         cc:d7:e2:11:0e:25:4d:4a:7d:e9:94:e4:19:aa:0a:d2:88:cc:
         fe:ac:15:8c:e2:e9:cf:7f:79:7a:1f:5f:6d:8c:9e:89:56:64:
         e1:c8:18:2d:d4:dd:b3:6c:de:fa:70:2f:c7:bb:d1:2a:1c:ec:
         bf:18:ad:bd:38:fd:f8:c6:ac:52:60:a6:ff:d0:42:f2:cd:92:
         8c:11:04:9c:3c:5e:96:cc:ae:d4:36:d7:3b:ce:ca:f8:7d:95:
         5d:53:91:dd:fd:3f:bf:d7:74:63:6f:23:3d:78:d3:b4:20:9e:
         19:48:58:e5:30:24:04:e6:09:2e:f6:9c:84:71:4f:25:aa:ac:
         d6:b3:8f:7b:d4:e4:c4:67:52:db:3f:31:7f:75:04:36:67:1c:
         c6:a7:1e:64:47:0f:35:4a:ea:11:98:34:60:fb:95:28:f8:12:
         fe:71:a6:2b:0b:a5:2d:37:4d:2f:9a:f0:1f:42:21:05:43:63:
         da:38:00:fa:e7:9e:ab:72:b1:a4:f3:7a:ee:6b:79:b4:61:bc:
         ae:e0:77:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 14:06:08 2025 by rpki-client