This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203539363738.roa
File:                     323630323a666139623a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          4fdrE+VqoUyRsJunom4oo6VAB4lZ/g7yqBdcRND7x3o=
Subject key identifier:   96:D4:18:76:66:FF:0D:EE:06:8E:1C:BF:C7:0E:8F:0F:F9:4C:E9:F9
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       452FE5B7F3A5EF24C86AA77E68293D061B24E7C5
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203539363738.roa
Signing time:             Mon 29 Dec 2025 12:59:53 +0000
ROA not before:           Mon 29 Dec 2025 12:54:53 +0000
ROA not after:            Mon 28 Dec 2026 12:59:53 +0000
asID:                     59678
IP address blocks:        2602:fa9b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2f:e5:b7:f3:a5:ef:24:c8:6a:a7:7e:68:29:3d:06:1b:24:e7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Dec 29 12:54:53 2025 GMT
            Not After : Dec 28 12:59:53 2026 GMT
        Subject: CN=96D4187666FF0DEE068E1CBFC70E8F0FF94CE9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:87:b3:c0:67:ef:fa:0d:df:3f:4a:ef:40:
                    fb:66:bf:0f:32:a0:6d:19:ed:58:19:fc:37:e0:43:
                    0f:2e:9b:4e:73:4f:1f:8a:db:01:19:3c:55:01:67:
                    84:fa:1b:1f:03:07:81:46:0c:49:b7:c7:71:41:89:
                    61:f2:a8:8e:c2:55:d5:70:d2:40:0a:40:d8:77:ad:
                    55:56:64:f7:fd:f5:dc:83:86:72:33:7f:9c:cb:11:
                    85:57:b9:e9:9e:97:6a:75:0b:9c:4a:65:2f:e9:a2:
                    04:e2:b2:86:83:c0:7f:f0:6e:32:64:36:40:b6:41:
                    48:21:be:c2:20:02:40:26:ed:aa:ab:37:f7:fe:f0:
                    41:ea:ad:b9:ee:28:45:09:ae:5c:27:96:1f:19:34:
                    15:e3:b2:96:cb:56:c4:8a:81:7e:53:2c:5b:f6:22:
                    51:a9:7f:48:d9:2f:4e:bc:d6:fe:b1:a1:cf:10:d7:
                    47:41:45:0b:13:4c:ba:31:f4:40:52:38:19:20:0e:
                    3e:ba:89:dd:41:d5:62:3a:90:e2:46:74:3d:14:27:
                    87:4a:42:3b:80:42:86:40:c1:46:75:c8:0d:06:6d:
                    12:d3:f5:35:38:1a:20:a4:94:5d:ec:c9:db:12:e3:
                    ed:ac:d1:75:93:f3:0c:14:bd:c1:f2:70:06:b5:1a:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D4:18:76:66:FF:0D:EE:06:8E:1C:BF:C7:0E:8F:0F:F9:4C:E9:F9
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b::/48

    Signature Algorithm: sha256WithRSAEncryption
         e8:93:2e:10:c9:06:66:9f:76:8c:43:78:51:8c:45:0a:2d:08:
         a5:72:1c:bd:44:54:3a:73:19:80:6a:85:52:3a:ee:5a:f4:79:
         23:4e:f5:2b:7c:c8:c4:cc:e4:da:2d:ec:0c:c7:84:40:2d:db:
         ae:a5:5e:6e:d7:46:40:e1:21:5b:ec:75:ac:27:88:49:18:15:
         c8:9c:78:43:0e:61:e4:54:71:a6:fa:b6:68:1a:8c:1f:4f:fc:
         94:d1:f0:d8:e4:56:39:18:83:b5:ea:e9:43:7b:fd:99:c7:b1:
         a3:80:49:5a:40:67:f9:c4:c0:b2:25:d8:f4:50:8f:66:d0:97:
         55:18:23:48:3a:46:23:ec:d2:48:d7:6d:4d:ef:ce:46:27:d0:
         eb:46:1a:02:ed:a8:ad:b7:f2:c3:ec:68:22:14:ce:0f:38:c6:
         16:2e:01:b1:ac:b4:b1:2f:54:3f:e7:db:e8:bb:5a:d3:ac:74:
         96:2b:7f:75:9e:46:44:f0:9e:b8:c7:fa:db:72:65:cf:58:02:
         69:a9:3a:f3:e8:fb:13:57:7f:29:d6:ef:e8:e0:43:83:55:04:
         1c:88:48:9c:49:9c:b1:49:97:72:16:b2:5d:5a:b1:a1:e6:25:
         7c:8d:67:bb:28:83:fb:ee:51:d1:c1:6d:eb:94:25:eb:1a:e3:
         18:fb:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 17:36:41 2026 by rpki-client