This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e2035363530.roa
File:                     36342e3235332e38362e302f32332d3234203d3e2035363530.roa (raw, json)
Hash identifier:          tgpO+th5vasTe2582mb2ElcDhUJ1zqPrjt/tNYyCwok=
Subject key identifier:   F0:B4:1B:F7:24:D9:1B:8F:CB:F2:83:AA:D1:E2:CC:09:BD:21:15:18
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       2E4498E1E870A386376A4CF5A6D8AD251C81D671
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e2035363530.roa
Signing time:             Tue 06 Jan 2026 08:37:15 +0000
ROA not before:           Tue 06 Jan 2026 08:32:15 +0000
ROA not after:            Tue 05 Jan 2027 08:37:15 +0000
asID:                     5650
IP address blocks:        64.253.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:44:98:e1:e8:70:a3:86:37:6a:4c:f5:a6:d8:ad:25:1c:81:d6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jan  6 08:32:15 2026 GMT
            Not After : Jan  5 08:37:15 2027 GMT
        Subject: CN=F0B41BF724D91B8FCBF283AAD1E2CC09BD211518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:24:c4:d3:18:32:e0:02:00:25:a6:de:2e:
                    66:a5:0f:73:58:e0:3e:c0:78:e1:19:a9:4f:d3:91:
                    94:ed:4d:cd:9a:dd:0f:87:8e:bf:c3:78:68:9c:c4:
                    0a:b8:07:8a:e0:14:f2:fe:43:87:6c:bb:04:6b:fd:
                    c6:23:ea:4f:03:75:36:82:15:62:1b:5d:ab:79:89:
                    47:75:4d:cf:19:dd:93:01:ee:b0:9f:95:ed:50:d4:
                    f4:aa:53:e7:25:6a:db:04:38:cc:d6:a2:f5:05:fc:
                    ec:9a:9c:06:f1:77:be:2c:ff:78:da:8c:7f:be:a0:
                    86:4b:27:8b:e7:bd:f0:ab:8b:31:71:49:ab:da:c6:
                    fa:35:19:e7:65:01:bb:17:27:41:8a:33:85:60:93:
                    68:63:08:5b:95:7c:51:af:de:a0:3c:c2:01:38:c6:
                    78:08:25:a7:8c:42:63:f4:42:37:8c:1c:1d:23:1c:
                    48:d4:7e:06:d9:14:0c:5e:6c:5b:a2:dd:02:43:d9:
                    eb:17:bb:48:25:c2:b0:a9:f1:e2:a2:68:ce:ac:7d:
                    da:b0:b2:c0:91:45:ad:30:d2:12:3d:c5:eb:d8:a8:
                    8d:b3:92:5c:0e:6d:a0:81:70:1a:bb:f0:7b:b0:49:
                    0a:d8:97:8d:5e:99:65:c7:84:d6:f6:03:c5:db:e9:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B4:1B:F7:24:D9:1B:8F:CB:F2:83:AA:D1:E2:CC:09:BD:21:15:18
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:7b:e2:0e:39:89:a1:5e:48:ee:9d:ae:f1:16:1d:72:e4:14:
         ec:aa:c2:fe:d8:87:0b:2a:0b:34:f0:2b:98:d8:db:2d:8d:88:
         16:78:6b:41:23:39:af:46:32:c1:cc:86:5d:2c:04:ce:4a:ce:
         aa:0e:14:85:23:c2:e4:75:f3:dc:4a:4c:e6:20:9e:54:d1:2b:
         d2:f6:4f:8f:6b:aa:65:f2:4d:73:bd:0c:44:ab:18:46:ca:a4:
         19:bb:58:3a:4d:ee:b7:ff:21:14:bc:78:f7:73:1c:05:db:a8:
         18:2c:da:45:fd:99:28:4f:ac:97:1b:d0:c6:84:62:fe:27:14:
         2b:17:4d:a6:a2:4d:2d:f3:7d:dc:63:c0:eb:bc:c3:e3:9c:00:
         a0:61:79:4a:dd:bd:cb:90:f8:15:cd:1c:c1:ed:e5:38:75:16:
         b7:28:92:15:7f:91:cb:95:c6:0c:b2:e0:9a:15:e7:33:0a:dd:
         59:48:56:28:ef:c0:36:15:3f:52:61:d6:97:31:2c:16:4a:49:
         c2:94:82:0d:8c:f4:ce:ad:ad:ae:16:dc:48:29:35:41:a2:06:
         f9:a4:1b:06:00:e5:a1:22:83:29:ea:87:a1:0c:8b:be:c8:43:
         3f:e3:bc:35:99:88:1c:da:65:78:7d:55:9d:27:d6:d0:b2:e1:
         22:72:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:16 2026 by rpki-client