This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          rKdMgZlS2JaAsFA+QIGO+FYJJsX2SPuG6nblhlv78pg=
Subject key identifier:   5A:39:2F:1F:84:B9:AC:3F:34:52:50:42:B5:C2:96:A6:AB:BF:2B:A1
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2C06D410C30CB464BD943FEAA584109954759DC8
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
Signing time:             Sun 30 Nov 2025 11:57:46 +0000
ROA not before:           Sun 30 Nov 2025 11:52:46 +0000
ROA not after:            Sun 29 Nov 2026 11:57:46 +0000
asID:                     9304
IP address blocks:        40.27.12.0/24 maxlen: 24
                          40.27.248.0/24 maxlen: 24
                          40.27.249.0/24 maxlen: 24
                          40.27.250.0/24 maxlen: 24
                          40.27.251.0/24 maxlen: 24
                          40.27.252.0/24 maxlen: 24
                          40.27.253.0/24 maxlen: 24
                          40.27.254.0/24 maxlen: 24
                          40.27.255.0/24 maxlen: 24
                          40.183.192.0/24 maxlen: 24
                          40.183.224.0/24 maxlen: 24
                          40.183.225.0/24 maxlen: 24
                          40.183.230.0/24 maxlen: 24
                          40.183.231.0/24 maxlen: 24
                          40.223.16.0/24 maxlen: 24
                          40.223.17.0/24 maxlen: 24
                          40.223.189.0/24 maxlen: 24
                          40.223.190.0/24 maxlen: 24
                          40.223.191.0/24 maxlen: 24
                          40.223.240.0/24 maxlen: 24
                          40.223.241.0/24 maxlen: 24
                          40.223.244.0/24 maxlen: 24
                          40.223.245.0/24 maxlen: 24
                          40.223.246.0/24 maxlen: 24
                          40.223.248.0/24 maxlen: 24
                          40.223.249.0/24 maxlen: 24
                          40.223.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 07:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:06:d4:10:c3:0c:b4:64:bd:94:3f:ea:a5:84:10:99:54:75:9d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov 30 11:52:46 2025 GMT
            Not After : Nov 29 11:57:46 2026 GMT
        Subject: CN=5A392F1F84B9AC3F34525042B5C296A6ABBF2BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:30:25:76:90:03:04:75:5b:6b:5c:ed:04:3a:
                    df:fa:99:72:57:58:65:4c:8b:79:5c:f7:3f:0f:a4:
                    c0:b7:a1:71:8d:c5:b3:fe:66:2c:05:ee:c5:77:71:
                    a5:ad:f0:b2:0c:8f:a2:6e:ab:5f:ef:fe:ac:99:dc:
                    f3:d1:58:ab:3a:ba:57:55:05:22:1e:11:60:e0:71:
                    ab:07:7d:27:43:2c:06:31:7e:db:10:1a:a3:8f:80:
                    31:1b:5a:a4:db:57:36:24:3c:e1:3b:b4:ed:b5:85:
                    4e:71:96:12:e1:53:1c:56:e2:ce:a6:73:80:ed:f6:
                    f7:af:3f:ab:cd:60:b4:45:50:71:c0:ce:14:96:30:
                    04:86:e9:dd:09:5f:53:be:4c:38:70:bb:e1:e4:06:
                    72:63:c4:ba:fc:dc:55:7b:9f:a6:99:c8:30:b4:41:
                    cd:2c:1e:44:35:ff:a7:44:89:63:18:e6:b3:bb:46:
                    a1:86:0d:e0:ca:e2:ef:c9:09:9a:15:f2:13:82:89:
                    7a:fa:89:80:95:5c:3d:6a:50:e2:ea:81:bf:d1:40:
                    a5:fb:99:01:44:03:39:93:03:f4:97:7f:67:82:64:
                    11:2e:c1:55:2f:9a:e3:8e:ef:e9:62:f6:63:b2:a9:
                    98:3a:d7:71:ab:3a:14:a3:e4:a1:e9:76:5e:a3:9f:
                    e1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:39:2F:1F:84:B9:AC:3F:34:52:50:42:B5:C2:96:A6:AB:BF:2B:A1
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.12.0/24
                  40.27.248.0/21
                  40.183.192.0/24
                  40.183.224.0/23
                  40.183.230.0/23
                  40.223.16.0/23
                  40.223.189.0-40.223.191.255
                  40.223.240.0/23
                  40.223.244.0-40.223.246.255
                  40.223.248.0-40.223.250.255

    Signature Algorithm: sha256WithRSAEncryption
         ad:9c:a6:69:82:58:da:be:34:96:e6:18:53:ef:c9:7d:ca:9f:
         e4:88:4e:22:f8:53:d4:ba:7b:70:f2:50:ba:31:b3:ca:8a:00:
         57:a7:9e:bb:64:fa:4f:08:ee:98:f2:b9:f1:74:ab:ee:bf:46:
         bc:7f:b1:c9:87:f7:19:c0:c1:48:fc:a6:32:e6:a0:c4:96:7e:
         38:33:92:30:2a:3b:90:1c:66:5d:9a:94:a5:14:de:eb:7d:86:
         e4:74:e8:e5:c6:3c:31:f7:23:c5:16:19:07:b6:fe:41:66:d2:
         5d:14:13:63:de:5f:fc:c7:44:a5:dd:f0:1a:3a:0d:89:24:d5:
         9e:9e:3f:85:0b:71:c8:d2:d4:42:b4:97:01:fb:39:aa:ed:4b:
         1c:43:b1:73:fa:8a:f0:42:4c:7a:bd:56:bb:d2:a5:74:0c:c4:
         70:9e:cd:23:f2:98:20:43:aa:3a:5a:39:ec:07:fd:be:01:d5:
         ab:bb:f9:29:5c:4b:2b:c2:18:8a:6f:d0:72:4f:1e:df:99:85:
         f2:55:e8:35:ae:8c:d3:48:ac:ba:50:a9:35:50:ef:13:d8:bd:
         4a:68:5a:dd:0b:b2:9c:3e:d7:c3:6d:2f:eb:16:c2:cc:f4:7f:
         42:37:f7:a4:17:c4:80:9f:35:ba:a4:3d:00:e5:c0:32:ab:7f:
         0a:77:3a:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:21:07 2025 by rpki-client