This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203633313939.roa
File:                     3139392e39312e3130302e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          TYb+kBnx8iIdz76Wvc2B1305sLxgCuKPi8cyavSwfHs=
Subject key identifier:   45:87:EE:6F:50:C8:3B:28:A9:D0:E1:0B:32:A1:3D:44:34:6A:44:BD
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       41C25A76AAF7A9AC9DF5C9548E89C87F6C496D27
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203633313939.roa
Signing time:             Mon 12 Jan 2026 07:36:33 +0000
ROA not before:           Mon 12 Jan 2026 07:31:33 +0000
ROA not after:            Mon 11 Jan 2027 07:36:33 +0000
asID:                     63199
IP address blocks:        199.91.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Jan 2026 06:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c2:5a:76:aa:f7:a9:ac:9d:f5:c9:54:8e:89:c8:7f:6c:49:6d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jan 12 07:31:33 2026 GMT
            Not After : Jan 11 07:36:33 2027 GMT
        Subject: CN=4587EE6F50C83B28A9D0E10B32A13D44346A44BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:3c:8f:9c:c2:99:cc:86:16:cb:8c:13:96:
                    af:eb:58:cb:0f:8c:da:6e:fb:28:85:c9:70:b7:a1:
                    c1:41:c5:87:ee:db:d1:16:f4:a4:2f:7b:79:e7:61:
                    36:f8:2c:79:40:8e:4a:24:fd:61:0d:e6:6e:53:cf:
                    5e:52:5d:16:fb:3e:d0:3a:3d:01:33:cc:ed:26:8f:
                    5b:52:1a:7d:d1:62:ce:ac:9a:4a:b5:8e:50:d2:7c:
                    56:b6:73:92:6e:f9:71:75:d6:f9:33:76:25:c8:9a:
                    11:03:eb:9f:34:7d:33:05:b6:e4:5b:7a:f1:94:9f:
                    b4:79:d9:8e:8e:84:76:63:54:06:6d:5e:f8:ad:82:
                    88:07:94:a5:b4:7e:9c:b4:8d:27:a2:1a:50:1a:4e:
                    bb:d4:47:cd:3a:1a:93:ba:65:50:e4:08:ec:b9:bb:
                    48:af:d2:0b:97:78:37:24:1e:48:ba:06:64:9f:68:
                    d3:c3:ba:3b:47:70:db:01:b1:96:96:b7:db:cd:e5:
                    83:ff:c9:57:c4:1f:d3:78:09:84:c7:db:d1:ca:c9:
                    df:14:ac:66:bb:10:20:45:bc:39:de:fb:20:43:d3:
                    39:52:d4:e2:ef:de:ae:4d:ff:f9:ce:b7:15:4d:f8:
                    cc:73:00:a4:41:f8:4f:41:bb:83:0d:62:85:86:3f:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:87:EE:6F:50:C8:3B:28:A9:D0:E1:0B:32:A1:3D:44:34:6A:44:BD
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:85:17:2d:57:26:8c:67:57:29:05:02:f4:91:e8:20:95:
         c8:ed:94:e1:09:82:61:eb:86:99:89:15:c6:2d:bd:ce:26:fa:
         0b:0c:f7:6c:0a:67:a1:d8:c4:08:4c:be:08:51:64:16:89:be:
         3a:0c:a6:6c:e3:4d:1f:3a:09:d5:fa:df:81:83:34:4a:27:69:
         ce:5d:bc:79:ac:a3:d6:6b:96:ca:44:a8:97:3e:f7:23:f1:71:
         6f:86:b3:bc:4f:9e:e4:ce:f1:3a:de:07:39:44:38:dc:ed:b4:
         5e:2d:c6:c4:e8:61:9a:cd:d5:46:6d:b3:eb:b1:b5:ce:fa:b9:
         7d:af:e4:8d:2a:a1:3b:5a:b6:f1:e1:6a:ae:39:62:b5:7b:ce:
         76:b4:a6:3e:ec:cb:b3:04:6b:09:1b:2b:d5:0f:4d:e5:e3:3a:
         02:0b:c7:79:1e:b1:10:65:14:d8:bd:cf:f3:4d:cf:48:b0:a1:
         82:40:61:44:1b:a2:cd:00:3a:15:59:3f:45:ee:70:6a:50:8f:
         2a:a4:45:45:3d:6b:0b:1a:2f:54:a0:f2:16:fe:eb:e9:5f:05:
         b0:31:8f:b9:41:88:a7:f4:3f:b7:79:a5:f4:6a:85:87:56:30:
         94:d0:ac:0c:d2:9d:b1:3e:37:7b:6f:75:c3:cf:f5:7b:a1:a6:
         ce:c0:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:08:57 2026 by rpki-client