This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401722.roa
File:                     AS401722.roa (raw, json)
Hash identifier:          DTVbj0sMeqbyTE8RjrGeHtvif2zbX3GUPVzh+coaP7s=
Subject key identifier:   94:1F:A8:E5:8E:18:1B:48:DB:12:14:EF:55:55:B2:3F:55:8A:8C:57
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2133CD459F33AB1F77333786DE19DB3C9690B7E5
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401722.roa
Signing time:             Fri 07 Nov 2025 13:50:10 +0000
ROA not before:           Fri 07 Nov 2025 13:45:10 +0000
ROA not after:            Fri 06 Nov 2026 13:50:10 +0000
asID:                     401722
IP address blocks:        40.27.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 01:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:33:cd:45:9f:33:ab:1f:77:33:37:86:de:19:db:3c:96:90:b7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov  7 13:45:10 2025 GMT
            Not After : Nov  6 13:50:10 2026 GMT
        Subject: CN=941FA8E58E181B48DB1214EF5555B23F558A8C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5c:41:60:6a:58:13:82:47:22:2f:fb:e3:43:
                    97:f5:6e:0d:67:d8:60:3b:d5:b9:95:45:52:c4:2f:
                    5e:c3:ac:ba:cc:05:e0:51:a7:ee:e3:28:3d:f2:37:
                    94:a3:18:d0:6b:4d:d3:05:4a:ae:7c:6e:fa:78:d5:
                    69:07:5c:b7:7a:19:98:43:57:de:d1:13:06:24:f2:
                    c6:85:52:82:25:92:a0:d2:57:a5:24:51:84:75:af:
                    4d:92:27:f7:7b:42:31:54:84:f4:f4:f9:4e:7f:81:
                    53:19:7e:51:18:65:71:80:ba:03:d9:30:1a:f4:4d:
                    14:cc:20:90:3d:50:e8:50:57:44:90:ab:5f:af:26:
                    42:1d:bb:a7:79:df:2a:ba:9e:40:2c:10:55:29:fd:
                    ad:63:d4:ee:83:43:f7:7e:79:58:5a:9f:52:8b:c8:
                    57:02:83:73:60:b2:b5:4d:d2:6a:56:16:33:55:f8:
                    ee:28:aa:d2:5f:ad:c1:08:16:82:57:ad:29:98:12:
                    5f:dd:09:eb:23:4e:ce:ce:47:4c:34:d2:e9:c9:fc:
                    25:b0:de:06:56:24:5c:f6:cc:dc:da:5c:c9:4d:64:
                    4f:c4:34:52:d3:70:15:cf:ac:64:ea:a0:8e:2d:80:
                    0a:f4:1b:b4:11:57:08:11:05:45:aa:a6:60:b7:6a:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1F:A8:E5:8E:18:1B:48:DB:12:14:EF:55:55:B2:3F:55:8A:8C:57
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401722.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:22:53:80:6a:1f:0f:8f:10:fd:b4:83:46:5c:af:97:96:9c:
         ca:00:87:ed:00:e5:ab:1f:e0:87:50:71:d7:85:fe:29:da:a1:
         b9:88:f4:21:0c:1d:ca:29:80:bc:f7:97:81:9c:31:76:d9:cf:
         42:7e:0f:91:3e:b1:86:6a:1b:36:13:26:1a:1c:da:d5:f1:dd:
         eb:56:9a:82:0a:fa:36:7e:97:bf:aa:ca:8a:d0:28:a1:53:c5:
         43:62:d2:09:47:74:db:50:07:fb:7a:51:06:f1:3a:b7:a2:97:
         64:c8:40:17:e6:c2:40:c3:a8:81:11:91:0b:c3:94:60:9a:26:
         b4:19:4b:6e:d6:8a:f5:3c:b4:a9:64:23:62:04:c0:b2:42:63:
         99:09:c8:bb:c2:d4:43:6e:b1:0b:ae:a1:8b:1d:57:77:93:47:
         14:2b:5d:d8:ce:be:5b:7c:4e:d6:5f:52:f3:a9:9b:d2:b2:9d:
         39:4c:b4:9b:18:58:88:39:34:2c:6c:78:bd:30:96:4c:56:fc:
         78:3c:cc:81:24:62:63:8e:84:e0:f8:12:a2:4c:ab:6f:a2:5f:
         b6:94:cf:4e:76:74:1a:a5:12:e5:46:d2:31:50:57:ea:67:19:
         f1:e3:fa:40:e5:7e:fa:33:ba:14:38:67:17:22:67:70:34:64:
         c7:75:78:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 14:07:40 2025 by rpki-client