This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa
File:                     AS25198.roa (raw, json)
Hash identifier:          r5SC+Nb2jdw9NGOrb43XjRxSBBjXQlGfeGXXu8j8ppQ=
Subject key identifier:   7E:99:44:E6:75:C5:AE:78:10:32:BE:99:A9:5C:34:3C:A8:74:89:89
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       7C539019F80ADA25FA33CD746FBBE797F0AB9BDE
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa
Signing time:             Mon 19 Jan 2026 08:49:13 +0000
ROA not before:           Mon 19 Jan 2026 08:44:13 +0000
ROA not after:            Mon 18 Jan 2027 08:49:13 +0000
asID:                     25198
IP address blocks:        40.27.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:53:90:19:f8:0a:da:25:fa:33:cd:74:6f:bb:e7:97:f0:ab:9b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jan 19 08:44:13 2026 GMT
            Not After : Jan 18 08:49:13 2027 GMT
        Subject: CN=7E9944E675C5AE781032BE99A95C343CA8748989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9f:61:70:41:55:2e:ac:99:50:f4:b5:44:a9:
                    b1:e8:61:d9:63:75:ec:8b:24:02:fb:46:a6:50:95:
                    7e:67:49:18:aa:e4:87:e9:d3:69:4f:76:9f:81:1a:
                    6c:49:26:f4:88:88:e3:8b:5a:04:d5:a4:bf:19:2d:
                    55:e7:dc:fa:05:db:0e:a3:27:05:8d:cb:3f:39:55:
                    da:4c:0c:d2:95:cc:fc:98:5a:c0:a0:c8:50:80:6c:
                    2f:49:24:71:f0:a2:e4:93:80:bd:87:b3:af:7c:69:
                    f3:c4:8b:8b:95:e9:16:7c:c7:57:8e:e4:fc:19:2f:
                    7e:01:f8:df:08:fe:83:cf:b7:c4:e7:be:8d:b6:b9:
                    84:07:a3:d9:1a:20:39:68:39:44:37:8e:16:a0:fe:
                    1c:1e:f7:af:ac:0d:b5:35:31:f6:ae:11:88:c6:9e:
                    b1:12:cb:d1:4a:52:3c:c8:08:90:14:2e:b4:9a:25:
                    87:cb:ce:9a:6f:20:ae:3a:14:d6:20:7f:b2:35:cc:
                    0d:55:6e:78:c3:22:09:0b:d5:83:bc:06:d0:8e:b4:
                    c5:23:ed:b2:e5:7d:b4:97:6a:20:c7:94:21:58:b6:
                    c2:e4:02:38:3a:da:4f:5a:93:6f:26:f6:56:a1:5e:
                    75:9c:48:80:d7:72:c4:fe:c4:32:f8:a1:52:86:ad:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:99:44:E6:75:C5:AE:78:10:32:BE:99:A9:5C:34:3C:A8:74:89:89
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:9a:bf:4e:5b:5f:1a:41:59:7a:10:d1:1c:3f:9b:a0:6a:
         6e:67:5e:13:b9:e3:71:ec:c0:cd:0f:d2:ff:ec:80:1d:de:45:
         08:a5:be:e5:48:4e:5e:e8:aa:25:27:ab:95:56:07:72:c1:ea:
         03:63:a4:01:5d:92:9a:4b:c4:a6:93:01:44:86:08:df:83:90:
         4f:1a:47:37:18:85:4b:60:86:df:7a:6e:22:77:7e:37:1d:13:
         9b:70:8b:8c:db:7b:29:45:b0:36:e2:1e:b2:c1:9b:e4:9a:3c:
         5e:f4:fe:ab:5e:21:9f:cf:39:e4:4c:77:3a:37:f1:0c:17:66:
         16:4f:ab:5d:07:f1:f3:14:40:78:3f:68:4c:f7:e2:5c:2d:b9:
         ff:e8:23:96:22:cd:2b:21:4b:fa:2f:bd:db:2c:3f:24:36:43:
         e0:43:c1:11:11:78:1a:be:29:27:c3:14:28:ba:be:20:09:f3:
         2c:40:c3:b6:ae:0a:f8:11:4d:de:4f:dc:d8:9c:eb:08:24:b6:
         2b:f9:eb:f5:1a:73:e3:57:73:29:c9:4f:de:99:dc:dd:89:6b:
         d0:0d:2b:55:73:14:5b:ab:f2:60:9e:27:44:64:ac:7c:8d:56:
         93:89:b2:ff:ff:0c:bf:56:68:86:d6:aa:12:90:5e:25:ce:86:
         89:21:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:55:57 2026 by rpki-client