This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20323134343332.roa
File:                     3139392e36382e3231382e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier:          Z4oxMd9NLC/IFAsFGTLSROdndb8UC4yq1afbHtyDHeE=
Subject key identifier:   33:8C:3A:51:F6:3A:7F:5D:8C:E0:05:FA:68:90:1F:E1:9B:66:5D:63
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       646DF964B7E058D65F3271FDC4F859A482B2AED7
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20323134343332.roa
Signing time:             Wed 04 Feb 2026 14:03:47 +0000
ROA not before:           Wed 04 Feb 2026 13:58:47 +0000
ROA not after:            Wed 03 Feb 2027 14:03:47 +0000
asID:                     214432
IP address blocks:        199.68.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Feb 2026 22:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6d:f9:64:b7:e0:58:d6:5f:32:71:fd:c4:f8:59:a4:82:b2:ae:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Feb  4 13:58:47 2026 GMT
            Not After : Feb  3 14:03:47 2027 GMT
        Subject: CN=338C3A51F63A7F5D8CE005FA68901FE19B665D63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c3:1f:c3:ae:00:df:8c:85:ef:c4:49:d5:38:
                    f9:42:c7:59:00:64:ac:70:c6:3e:70:46:2a:72:d1:
                    8e:d7:1a:4d:bf:51:fd:34:eb:c4:a6:27:64:ab:64:
                    4b:fa:da:50:50:1c:9f:af:95:3d:de:3f:cc:f5:b1:
                    cc:b0:45:e9:54:87:63:ff:14:11:13:31:eb:f4:3f:
                    41:c9:9f:7d:2a:e2:1d:64:ed:b5:17:2f:ae:76:54:
                    97:e3:09:9c:c2:b6:d7:96:70:3b:52:08:ef:5d:f1:
                    b4:4c:01:28:06:48:31:90:8e:e2:b5:b4:45:c1:47:
                    e2:32:99:e0:e4:f8:84:af:d6:6a:5c:6a:14:f2:22:
                    ad:68:1a:11:30:6b:6f:ae:f8:90:ad:08:51:ed:44:
                    ff:b4:67:f2:f3:6e:e7:a8:b5:e8:21:a6:bc:25:e8:
                    0f:1f:b2:4d:02:ab:ca:f1:88:b6:34:e0:32:41:d1:
                    0b:7f:78:d1:e2:91:84:79:77:b9:d6:7b:ae:26:cd:
                    da:c3:45:19:81:d4:50:ea:e1:3e:17:c6:f5:86:be:
                    24:2e:18:fd:df:88:c1:98:86:7f:60:87:10:7b:59:
                    00:18:79:15:9f:d0:68:74:f4:3d:8c:b1:e0:60:49:
                    10:78:c4:a9:52:20:9c:f4:ec:c3:48:6b:a4:73:60:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8C:3A:51:F6:3A:7F:5D:8C:E0:05:FA:68:90:1F:E1:9B:66:5D:63
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20323134343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:99:f7:7c:f0:f6:a4:a2:58:36:b7:f4:73:3d:ee:d2:b7:3c:
         f0:d6:7d:17:13:14:01:99:18:0f:da:de:64:3b:f7:94:94:c5:
         05:3a:2e:fa:30:74:28:e3:00:b5:74:af:0a:20:f7:0b:83:1b:
         16:06:ea:6b:1c:74:fe:13:da:72:7c:cc:24:4e:82:70:8f:ae:
         83:e5:5b:b0:c4:8c:5f:55:ef:4d:45:8a:85:43:e1:13:56:32:
         5b:7d:b4:32:df:e6:93:18:6e:e9:fb:b8:c0:ea:15:a3:0b:d3:
         d0:de:45:7c:5f:ff:60:6f:0c:26:c5:f5:89:22:ca:87:71:4d:
         41:04:9c:95:7f:ff:ec:f7:33:3b:43:de:02:12:ba:89:1d:ce:
         0d:73:7f:2c:09:f3:9c:e2:d5:a2:69:83:1b:08:a5:dc:96:3e:
         97:78:b6:c4:87:a2:8a:2d:c6:c2:c1:0b:07:56:e7:7a:1e:01:
         4c:d4:80:1d:7e:fe:e5:52:e4:46:ad:6a:fb:03:4c:ca:ea:f0:
         31:8b:7a:3f:a3:6c:b2:a4:e7:bf:86:9c:33:91:46:20:e5:74:
         0d:d5:fe:11:ce:8b:04:77:cd:c0:d8:c9:67:fa:7f:fa:04:d0:
         42:af:6a:48:78:a0:de:bf:49:fd:61:75:9d:e5:ff:b5:89:c2:
         f8:64:2b:e7
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUZG35ZLfgWNZfMnH9xPhZpIKyrtcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm
NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjYwMjA0MTM1ODQ3WhcNMjcwMjAzMTQwMzQ3
WjAzMTEwLwYDVQQDEygzMzhDM0E1MUY2M0E3RjVEOENFMDA1RkE2ODkwMUZFMTlC
NjY1RDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcMfw64A34yF
78RJ1Tj5QsdZAGSscMY+cEYqctGO1xpNv1H9NOvEpidkq2RL+tpQUByfr5U93j/M
9bHMsEXpVIdj/xQREzHr9D9ByZ99KuIdZO21Fy+udlSX4wmcwrbXlnA7UgjvXfG0
TAEoBkgxkI7itbRFwUfiMpng5PiEr9ZqXGoU8iKtaBoRMGtvrviQrQhR7UT/tGfy
827nqLXoIaa8JegPH7JNAqvK8Yi2NOAyQdELf3jR4pGEeXe51nuuJs3aw0UZgdRQ
6uE+F8b1hr4kLhj934jBmIZ/YIcQe1kAGHkVn9BodPQ9jLHgYEkQeMSpUiCc9OzD
SGukc2DMEQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDOMOlH2On9djOAF+miQH+Gb
Zl1jMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv
MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl
ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy
YzFiMTllMGM1ZS8wLzMxMzkzOTJlMzYzODJlMzIzMTM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTM0MzQzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0TaMA0GCSqGSIb3DQEB
CwUAA4IBAQBfmfd88Pakolg2t/RzPe7Stzzw1n0XExQBmRgP2t5kO/eUlMUFOi76
MHQo4wC1dK8KIPcLgxsWBuprHHT+E9pyfMwkToJwj66D5VuwxIxfVe9NRYqFQ+ET
VjJbfbQy3+aTGG7p+7jA6hWjC9PQ3kV8X/9gbwwmxfWJIsqHcU1BBJyVf//s9zM7
Q94CErqJHc4Nc38sCfOc4tWiaYMbCKXclj6XeLbEh6KKLcbCwQsHVud6HgFM1IAd
fv7lUuRGrWr7A0zK6vAxi3o/o2yypOe/hpwzkUYg5XQN1f4RzosEd83A2Mln+n/6
BNBCr2pIeKDev0n9YXWd5f+1icL4ZCvn
-----END CERTIFICATE-----
Generated at Sat Feb 7 12:14:56 2026 by rpki-client