This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e203235313938.roa
File:                     3231362e3135312e3136332e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          j7cg32g8gSz2aWwzSV33TeMTgbs7EIy2526/50tpKMI=
Subject key identifier:   2C:0B:47:F9:18:FF:D9:A2:B1:D8:17:AD:DF:48:A0:AD:8C:D3:93:36
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       5CC77D64B56E99F5D5299E4C748FB14F83945346
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e203235313938.roa
Signing time:             Tue 18 Nov 2025 16:33:15 +0000
ROA not before:           Tue 18 Nov 2025 16:28:15 +0000
ROA not after:            Tue 17 Nov 2026 16:33:15 +0000
asID:                     25198
IP address blocks:        216.151.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 06:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c7:7d:64:b5:6e:99:f5:d5:29:9e:4c:74:8f:b1:4f:83:94:53:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Nov 18 16:28:15 2025 GMT
            Not After : Nov 17 16:33:15 2026 GMT
        Subject: CN=2C0B47F918FFD9A2B1D817ADDF48A0AD8CD39336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:95:d4:e0:ef:f7:66:4e:ec:02:ee:37:64:
                    99:4c:cb:18:a2:a9:df:f1:ef:65:1a:34:0f:4b:82:
                    17:23:74:98:fe:ec:b8:65:7c:74:58:e5:8a:0b:8d:
                    ff:60:ef:2a:b0:1f:35:17:7c:c7:ee:ad:78:0e:2a:
                    43:3a:d6:e1:f4:2f:0b:69:5e:38:6d:ae:c2:a4:40:
                    2a:f8:0c:d8:98:2d:ab:e7:d6:0a:c7:fe:1a:77:d3:
                    fa:12:73:22:07:e7:76:43:f8:4d:1b:0d:da:6f:a0:
                    2c:57:cd:17:5b:ce:cd:5d:25:72:0a:0b:8a:3f:f0:
                    34:4e:c9:9a:19:1a:f9:b4:a2:c3:1d:ce:c4:cf:3f:
                    7e:a8:c0:ed:58:d8:ab:17:4b:ad:8d:b9:f3:ba:cb:
                    4d:31:fd:97:19:01:32:6d:b2:a5:a2:3b:c5:d1:1b:
                    84:57:08:8b:02:98:66:8b:bb:12:2d:90:11:de:c0:
                    95:5c:d7:13:f3:de:45:80:f6:ee:5c:39:2c:ca:c2:
                    01:6f:14:3d:3a:f4:e8:27:91:bb:4e:0f:9d:b0:3c:
                    22:f1:6a:c9:97:cf:d4:77:f2:e9:55:65:e5:24:4b:
                    ba:82:d8:8c:e0:04:b2:31:0f:86:e3:52:23:9e:77:
                    26:05:d1:4f:45:a7:af:64:5d:02:ca:26:7f:fe:80:
                    d2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0B:47:F9:18:FF:D9:A2:B1:D8:17:AD:DF:48:A0:AD:8C:D3:93:36
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:e5:d7:a0:69:27:ff:9c:67:de:6b:66:10:9f:4e:59:b3:
         ee:12:d7:66:16:5e:b6:89:75:e8:a5:56:b8:aa:a2:79:ab:9a:
         43:6a:43:3d:da:09:18:76:36:76:28:50:21:53:c0:e0:3e:ae:
         2e:20:5c:8f:bc:ee:0c:49:ed:30:93:e4:96:8a:84:44:ba:2b:
         0c:3a:bb:23:a4:00:e0:93:51:67:e5:41:b0:68:0d:50:17:86:
         f5:16:f5:f6:c9:ad:a0:46:f8:25:44:24:af:79:cc:3a:db:e9:
         bf:da:ba:9a:e3:53:eb:85:db:d9:c9:ea:92:6d:40:27:4e:f8:
         d5:e2:2b:07:d8:2f:79:c7:ca:01:7b:ff:24:ce:84:fc:28:19:
         45:65:0f:aa:86:f4:eb:06:42:5b:03:aa:db:ce:84:df:d9:84:
         39:d5:66:f5:7a:69:54:66:ee:f1:cf:ba:59:f6:48:1c:33:ab:
         2a:80:b6:5d:1d:d5:68:3d:66:de:aa:af:43:33:7c:9f:45:4e:
         d4:2d:24:05:9b:b5:cd:fb:d0:75:9d:cf:52:84:27:63:68:58:
         a7:76:00:f7:be:68:af:f8:29:80:24:15:dd:4f:e2:21:9a:9f:
         ef:e7:1e:9d:b8:0f:7d:d6:75:3b:de:67:fb:ff:71:93:e7:8a:
         df:bc:90:60
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUXMd9ZLVumfXVKZ5MdI+xT4OUU0YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2UyYmI0ZTU2Y2RmZTJmNDBmODI0YWJkY2NkOWI1MjM0
NjZlY2NkZGIzMDZjOTBjNWIwHhcNMjUxMTE4MTYyODE1WhcNMjYxMTE3MTYzMzE1
WjAzMTEwLwYDVQQDEygyQzBCNDdGOTE4RkZEOUEyQjFEODE3QURERjQ4QTBBRDhD
RDM5MzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ2V1ODv92ZO
7ALuN2SZTMsYoqnf8e9lGjQPS4IXI3SY/uy4ZXx0WOWKC43/YO8qsB81F3zH7q14
DipDOtbh9C8LaV44ba7CpEAq+AzYmC2r59YKx/4ad9P6EnMiB+d2Q/hNGw3ab6As
V80XW87NXSVyCguKP/A0TsmaGRr5tKLDHc7Ezz9+qMDtWNirF0utjbnzustNMf2X
GQEybbKlojvF0RuEVwiLAphmi7sSLZAR3sCVXNcT895FgPbuXDksysIBbxQ9OvTo
J5G7Tg+dsDwi8WrJl8/Ud/LpVWXlJEu6gtiM4ASyMQ+G41IjnncmBdFPRaevZF0C
yiZ//oDSXQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCwLR/kY/9misdgXrd9IoK2M
05M2MB8GA1UdIwQYMBaAFMOj2Rf0OZvCbApodxgr6jzZ/vQCMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGZkZWQxYTAwMTkwMDZlOTdjYjEyOGVmLzAv
QzNBM0Q5MTdGNDM5OUJDMjZDMEE2ODc3MTgyQkVBM0NEOUZFRjQwMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1L2VmYTAxYWNiLTUxZWMtNDA0OC04NTg5LWQwOTM5MDc5MWFlZC83ZTJi
YjRlNTZjZGZlMmY0MGY4MjRhYmRjY2Q5YjUyMzQ2NmVjY2RkYjMwNmM5MGM1Yi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThmZGVkMWEwMDE5MDA2
ZTk3Y2IxMjhlZi8wLzMyMzEzNjJlMzEzNTMxMmUzMTM2MzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JejMA0GCSqGSIb3DQEB
CwUAA4IBAQAG++XXoGkn/5xn3mtmEJ9OWbPuEtdmFl62iXXopVa4qqJ5q5pDakM9
2gkYdjZ2KFAhU8DgPq4uIFyPvO4MSe0wk+SWioREuisMOrsjpADgk1Fn5UGwaA1Q
F4b1FvX2ya2gRvglRCSvecw62+m/2rqa41PrhdvZyeqSbUAnTvjV4isH2C95x8oB
e/8kzoT8KBlFZQ+qhvTrBkJbA6rbzoTf2YQ51Wb1emlUZu7xz7pZ9kgcM6sqgLZd
HdVoPWbeqq9DM3yfRU7ULSQFm7XN+9B1nc9ShCdjaFindgD3vmiv+CmAJBXdT+Ih
mp/v5x6duA991nU73mf7/3GT54rfvJBg
-----END CERTIFICATE-----
Generated at Fri Dec 5 09:27:17 2025 by rpki-client