This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401721.roa
File:                     AS401721.roa (raw, json)
Hash identifier:          2EVlG+t0tcELxJ74Y8WpbSHh5UMjuKWgaYn9d1Kzl10=
Subject key identifier:   95:08:6F:BF:EA:A0:F9:02:D0:84:A4:D5:47:29:11:87:06:C3:D3:AD
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       27BBECE0CE0C8519DCD7A4B57D8E0E145008B965
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401721.roa
Signing time:             Fri 07 Nov 2025 13:50:08 +0000
ROA not before:           Fri 07 Nov 2025 13:45:08 +0000
ROA not after:            Fri 06 Nov 2026 13:50:08 +0000
asID:                     401721
IP address blocks:        40.27.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 01:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bb:ec:e0:ce:0c:85:19:dc:d7:a4:b5:7d:8e:0e:14:50:08:b9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov  7 13:45:08 2025 GMT
            Not After : Nov  6 13:50:08 2026 GMT
        Subject: CN=95086FBFEAA0F902D084A4D54729118706C3D3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:ce:3a:c0:8a:dc:9d:66:18:9b:ba:28:7f:
                    30:b8:4a:1a:44:37:a4:8d:2e:46:3c:2d:11:b0:c0:
                    bb:45:be:be:1c:fe:90:2a:fc:95:f9:c1:93:8f:5d:
                    e0:fe:40:a2:6b:d4:f5:ea:6d:0f:2a:14:af:b1:29:
                    1c:ef:84:7e:e5:67:ba:2f:8d:ad:97:ea:44:4a:c0:
                    d2:75:ad:73:00:9b:ce:3a:6a:6b:ac:e6:ed:29:3f:
                    2f:34:b7:bd:92:77:0f:a9:1c:0c:ea:43:94:9f:48:
                    89:c5:e0:ad:c7:f2:54:03:fa:66:0a:6d:14:64:bb:
                    aa:9a:20:a4:29:b3:6c:05:4a:11:5d:f5:d9:29:ce:
                    1f:0b:b5:cb:58:c1:2a:83:e3:49:fc:62:e8:6b:a8:
                    34:1c:c8:74:88:de:fc:7a:3c:26:c0:31:99:a5:28:
                    1d:9c:15:99:28:fa:e8:e8:73:45:7d:34:d6:23:55:
                    7e:9d:0b:c5:02:b0:82:e0:53:16:d0:fd:00:58:5c:
                    c7:cb:b5:9f:50:de:4f:f1:d3:db:1c:ae:af:1f:22:
                    bd:f7:3c:e0:ca:4d:14:1d:56:e5:30:e5:63:09:da:
                    30:77:cf:37:d6:d0:7d:2d:7d:7b:cc:a2:ed:74:03:
                    68:8d:5f:6c:c4:d3:2a:d7:66:cc:7a:12:f2:d2:61:
                    a3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:6F:BF:EA:A0:F9:02:D0:84:A4:D5:47:29:11:87:06:C3:D3:AD
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401721.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:27:14:3d:03:ed:d4:79:03:85:62:57:c2:4f:94:7b:1f:
         cf:e2:ab:df:5b:ec:6c:51:13:8d:cc:6f:d3:a6:0f:41:f7:1a:
         27:47:17:82:79:9e:12:b0:dc:44:ed:52:18:82:dd:f7:b4:4c:
         2f:96:38:8a:a2:6c:26:af:12:1a:c2:5d:1b:af:7f:e6:51:a5:
         c7:85:8d:5f:03:8d:f3:68:83:3d:0b:64:7c:ec:7e:c6:f6:ca:
         96:e7:cc:64:31:e0:74:6d:18:a0:87:e9:91:29:a9:9e:49:6b:
         01:24:f5:cd:7a:ec:51:fa:b2:90:8f:50:8a:df:3a:f2:14:37:
         00:40:4e:6e:f6:04:3d:7d:5a:e4:d0:94:25:be:68:f7:be:3d:
         49:67:49:33:13:8b:e3:a1:36:b8:82:c5:69:f4:2b:86:e3:bd:
         68:68:6e:08:f8:fb:be:1d:24:e7:cb:e0:2d:ea:7d:c2:59:bf:
         e9:fa:c7:be:f0:ff:51:b3:42:c2:88:d7:17:92:37:b6:b1:d9:
         f5:05:ff:7a:89:0f:27:76:c0:ba:a6:6e:a0:a7:ae:b8:9b:2b:
         cf:4a:c5:00:71:47:cb:53:00:4d:87:cd:b3:0e:b0:69:89:94:
         e9:8c:a6:e0:6f:b7:fd:3a:d4:5b:c6:d7:2d:dd:f7:a0:9f:83:
         a8:ac:1b:27
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUJ7vs4M4MhRnc16S1fY4OFFAIuWUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMTA3MTM0NTA4WhcNMjYxMTA2MTM1MDA4
WjAzMTEwLwYDVQQDEyg5NTA4NkZCRkVBQTBGOTAyRDA4NEE0RDU0NzI5MTE4NzA2
QzNEM0FEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqLOOsCK3J1m
GJu6KH8wuEoaRDekjS5GPC0RsMC7Rb6+HP6QKvyV+cGTj13g/kCia9T16m0PKhSv
sSkc74R+5We6L42tl+pESsDSda1zAJvOOmprrObtKT8vNLe9kncPqRwM6kOUn0iJ
xeCtx/JUA/pmCm0UZLuqmiCkKbNsBUoRXfXZKc4fC7XLWMEqg+NJ/GLoa6g0HMh0
iN78ejwmwDGZpSgdnBWZKPro6HNFfTTWI1V+nQvFArCC4FMW0P0AWFzHy7WfUN5P
8dPbHK6vHyK99zzgyk0UHVblMOVjCdowd8831tB9LX17zKLtdANojV9sxNMq12bM
ehLy0mGj9QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJUIb7/qoPkC0ISk1UcpEYcG
w9OtMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzQwMTcyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACgbFjANBgkqhkiG9w0BAQsFAAOC
AQEADuInFD0D7dR5A4ViV8JPlHsfz+Kr31vsbFETjcxv06YPQfcaJ0cXgnmeErDc
RO1SGILd97RML5Y4iqJsJq8SGsJdG69/5lGlx4WNXwON82iDPQtkfOx+xvbKlufM
ZDHgdG0YoIfpkSmpnklrAST1zXrsUfqykI9Qit868hQ3AEBObvYEPX1a5NCUJb5o
9749SWdJMxOL46E2uILFafQrhuO9aGhuCPj7vh0k58vgLep9wlm/6frHvvD/UbNC
wojXF5I3trHZ9QX/eokPJ3bAuqZuoKeuuJsrz0rFAHFHy1MATYfNsw6waYmU6Yym
4G+3/TrUW8bXLd33oJ+DqKwbJw==
-----END CERTIFICATE-----
Generated at Fri Dec 5 14:07:40 2025 by rpki-client