This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS64267.roa
File:                     AS64267.roa (raw, json)
Hash identifier:          xwy5Q626KPfVNwQfntSJC4T1htmTpI/2eoAzi48kVSg=
Subject key identifier:   12:6F:CC:BD:BD:68:83:F0:61:30:AB:93:D0:1F:CD:EE:E5:4F:A3:A9
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2D48A905DF3789D5A5496878B3410BD9C1FD4AD1
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS64267.roa
Signing time:             Sun 23 Nov 2025 23:59:12 +0000
ROA not before:           Sun 23 Nov 2025 23:54:12 +0000
ROA not after:            Sun 22 Nov 2026 23:59:12 +0000
asID:                     64267
IP address blocks:        40.27.229.0/24 maxlen: 24
                          40.183.144.0/22 maxlen: 24
                          40.223.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 01:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:48:a9:05:df:37:89:d5:a5:49:68:78:b3:41:0b:d9:c1:fd:4a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov 23 23:54:12 2025 GMT
            Not After : Nov 22 23:59:12 2026 GMT
        Subject: CN=126FCCBDBD6883F06130AB93D01FCDEEE54FA3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:4e:3f:58:17:a4:94:8b:0e:e2:2a:8a:5b:
                    8b:46:d8:b0:45:7f:cd:7f:78:bf:0a:10:ff:1e:82:
                    f8:a3:35:55:3a:36:5c:90:78:34:69:fa:ec:f1:20:
                    6e:ef:20:1c:a2:bf:c5:a5:ac:51:8a:5a:06:bf:87:
                    ef:6f:3a:b3:d9:03:1a:c6:a5:5e:52:47:80:2b:33:
                    c7:08:aa:e3:c3:3a:a8:1b:44:8d:86:85:ed:0e:38:
                    b8:8e:80:89:f2:23:ae:39:1b:38:43:91:01:20:48:
                    2f:7f:77:c1:20:57:16:98:b4:a7:4c:28:36:cd:59:
                    cb:3f:9a:bc:ca:88:f1:fd:49:fe:2e:74:eb:fc:6b:
                    e3:09:f7:40:e0:be:1b:fd:3d:b3:a9:37:04:7f:44:
                    39:7b:1e:43:e3:a3:5e:3b:5e:d6:61:d6:9a:ad:f8:
                    d2:98:63:17:55:0b:70:f4:51:16:9f:17:cc:74:c7:
                    ff:db:aa:5e:02:a8:d7:f5:59:5f:64:b3:40:a2:9f:
                    2d:98:20:6d:6c:d4:f5:23:ce:1a:6f:bf:bc:f8:f3:
                    a8:c3:2c:a8:c8:2d:af:cc:78:a3:c3:67:88:38:d3:
                    e7:02:2d:07:cc:db:79:6e:75:7f:5e:23:fb:31:54:
                    80:66:53:0c:fc:90:69:74:1e:20:6a:31:32:d7:90:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6F:CC:BD:BD:68:83:F0:61:30:AB:93:D0:1F:CD:EE:E5:4F:A3:A9
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS64267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.229.0/24
                  40.183.144.0/22
                  40.223.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:9b:b4:aa:2a:e2:1e:0f:84:3b:0e:5d:76:9c:a7:78:cd:54:
         10:5c:80:13:77:46:fa:63:d4:fa:27:69:1b:00:a5:b8:63:4b:
         a6:5b:28:a9:ca:f4:ea:5d:21:ab:15:cb:10:05:f5:1f:c0:92:
         47:52:87:54:d1:3f:37:64:43:49:52:09:19:b5:41:22:58:71:
         b2:97:0b:b8:51:a2:33:9c:42:5f:a5:d2:cd:d6:86:9f:5a:7a:
         5b:0f:f1:05:f2:0b:c7:bf:e6:75:3b:0b:4b:3e:16:00:6e:89:
         77:69:81:73:65:4c:cc:9c:85:e8:1e:c7:4d:33:8d:ba:93:2d:
         b2:5f:15:3e:cb:d0:df:05:d1:13:1e:69:b2:27:28:d5:5d:15:
         cd:a1:23:4a:99:43:af:be:24:0c:e5:02:dd:8e:d2:54:3d:62:
         72:9a:91:50:ef:42:cb:56:e0:8e:68:f6:41:ea:c1:a6:c7:d6:
         d9:c2:70:f2:cf:e0:f7:cb:ea:70:6f:47:9d:40:7a:c4:b8:ed:
         3b:78:f3:b0:0c:56:b0:c6:94:3c:e4:70:ac:3b:f9:93:a7:9f:
         76:75:10:1f:fb:28:e7:6c:60:73:2b:e4:fa:36:69:42:f3:b0:
         8a:30:4b:9a:f7:32:67:f1:e3:69:82:74:b1:ed:a0:13:56:30:
         be:88:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 03:46:51 2025 by rpki-client