This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa
File:                     3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa (raw, json)
Hash identifier:          Ez6nERrfW9heX1xHc9ZhgAsBeLZ8Jp9Yv4vk5CLBE7E=
Subject key identifier:   FF:45:B3:9D:FA:29:D2:9D:1C:E4:55:16:4D:1B:06:6F:BB:07:50:51
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       553F5F0A98282C90493004D030DACBFF9AEF6C40
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa
Signing time:             Wed 19 Nov 2025 06:03:17 +0000
ROA not before:           Wed 19 Nov 2025 05:58:17 +0000
ROA not after:            Wed 18 Nov 2026 06:03:17 +0000
asID:                     27162
IP address blocks:        172.109.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 18:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3f:5f:0a:98:28:2c:90:49:30:04:d0:30:da:cb:ff:9a:ef:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Nov 19 05:58:17 2025 GMT
            Not After : Nov 18 06:03:17 2026 GMT
        Subject: CN=FF45B39DFA29D29D1CE455164D1B066FBB075051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:f0:c5:99:7a:54:d5:d0:6e:68:ac:35:82:
                    0a:58:6e:fe:67:bc:f8:72:27:8f:ff:fa:e7:86:ff:
                    75:b2:07:bc:29:bb:23:e2:75:0c:fd:8a:e7:09:6e:
                    59:ee:b2:77:ef:25:3f:a9:fa:8f:8a:97:e9:31:d8:
                    02:09:83:4c:83:2b:dd:f8:2e:39:6a:15:78:69:b2:
                    fe:c3:87:4d:be:b4:c2:16:6e:5f:ce:04:37:a9:ab:
                    96:cc:7c:95:72:43:db:e7:22:c7:60:e6:ce:ac:b7:
                    9c:c2:48:13:b7:c7:17:9d:64:67:ab:fb:53:08:77:
                    8a:65:3e:94:e6:58:44:c4:b1:12:70:73:84:73:84:
                    5c:47:5e:3b:39:2b:2d:08:b2:c5:a2:f8:da:7f:41:
                    6a:52:86:e3:05:cc:ac:6a:84:ef:2e:2b:1c:d8:09:
                    f6:e0:70:97:44:2a:33:44:30:2e:3e:fd:e0:3d:18:
                    68:fa:4b:8a:a5:d7:2c:4e:24:80:24:5c:d5:1c:4d:
                    c1:46:42:93:7e:85:f2:96:3c:11:55:4a:62:d6:11:
                    f0:bd:e1:fa:65:e8:73:69:0d:e5:a5:50:b4:e2:be:
                    eb:73:73:3e:92:c6:22:80:71:40:b6:31:c2:04:0e:
                    eb:ae:fb:c4:da:20:2d:7b:65:4a:24:9e:df:16:c0:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:45:B3:9D:FA:29:D2:9D:1C:E4:55:16:4D:1B:06:6F:BB:07:50:51
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:25:84:ae:4c:bc:62:09:2b:65:06:41:e7:f8:6a:f3:29:ae:
         54:8a:03:70:85:34:28:04:4e:04:e6:9f:7c:07:5d:b3:23:b8:
         f5:ba:ce:b2:12:3f:3f:6f:bf:ab:e3:2a:ef:fd:6f:b1:9c:a1:
         f5:f7:9d:1d:5a:48:2d:cd:eb:e5:91:8b:d0:c8:3c:2a:af:16:
         d8:d7:d1:93:63:83:38:bc:41:a8:f6:64:1a:11:96:8d:2d:ac:
         16:96:1b:1e:96:dd:7c:cc:d8:82:04:32:29:89:96:bf:a8:48:
         4c:f8:4c:2d:0c:4a:a2:09:bd:f8:79:2f:76:5f:84:c6:25:9b:
         ca:03:4e:4f:0c:b4:ab:90:a7:ab:5d:1e:2f:08:2d:fa:55:5d:
         84:79:c5:1b:f0:fa:65:24:6e:90:bd:cf:6d:33:d1:e6:cd:e2:
         0a:f0:d3:01:1a:8f:95:36:53:73:46:10:97:0b:7d:74:1b:24:
         d8:07:0a:e8:48:6e:16:c5:67:a2:b4:f4:82:fa:cb:de:ce:53:
         09:52:22:e6:6e:87:5a:21:00:bf:19:e1:69:e1:3e:aa:e7:5a:
         80:24:aa:8a:00:6b:01:29:70:8f:e5:aa:26:6f:50:a9:6c:6c:
         49:e3:1d:0e:5f:70:37:50:72:ec:6b:1a:ce:7b:1e:85:76:84:
         e0:cf:93:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 09:07:23 2025 by rpki-client