This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32332d3234203d3e20383334.roa
File:                     3231362e3135312e3136382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          YLouq6/5EP29+bK366jaWXyK4d8nDPAPyhlEwEIK0jQ=
Subject key identifier:   E0:CE:3F:68:84:6F:93:F0:F0:6E:AC:05:24:62:19:52:B7:8A:04:5D
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       2A2B2126274A11E73BC85D9CFEDDEA7343C5F117
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32332d3234203d3e20383334.roa
Signing time:             Tue 30 Dec 2025 11:50:34 +0000
ROA not before:           Tue 30 Dec 2025 11:45:34 +0000
ROA not after:            Tue 29 Dec 2026 11:50:34 +0000
asID:                     834
IP address blocks:        216.151.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 12:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2b:21:26:27:4a:11:e7:3b:c8:5d:9c:fe:dd:ea:73:43:c5:f1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Dec 30 11:45:34 2025 GMT
            Not After : Dec 29 11:50:34 2026 GMT
        Subject: CN=E0CE3F68846F93F0F06EAC0524621952B78A045D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:51:48:d3:0c:8e:a9:6f:c3:1f:2e:8a:2e:2e:
                    fb:8c:63:c9:8d:02:86:3f:cf:f8:b3:63:fc:37:a5:
                    2c:94:95:e9:19:a4:e0:29:df:8c:fc:5e:48:6f:a8:
                    01:33:86:ff:f1:f7:2d:a9:22:fb:5a:9f:24:28:e2:
                    26:5c:b1:75:f9:74:64:e2:47:66:2d:b8:e3:4f:b2:
                    32:04:59:f8:0d:86:65:b8:ec:87:4a:ec:9e:63:f9:
                    51:70:5c:c6:10:23:f2:09:c9:5f:f9:db:00:48:68:
                    18:af:43:0d:7f:c3:36:89:d8:ac:40:89:9d:97:6a:
                    7b:75:4d:89:74:2d:c4:5a:50:01:bb:37:0d:28:4d:
                    2d:22:8a:35:76:bb:24:61:a9:1c:56:b8:b5:5c:48:
                    14:d6:7f:d6:fa:5c:3e:77:36:91:54:50:7a:fd:bf:
                    fe:c0:c0:11:8a:98:15:7f:43:21:12:9a:d6:d1:71:
                    92:9a:9a:56:d6:17:13:39:82:01:7e:36:a6:b7:a0:
                    b8:77:40:dc:71:73:8d:ce:4e:e7:1e:63:0e:34:a5:
                    d5:58:96:72:7c:5a:71:6c:81:4a:61:ce:be:01:c7:
                    67:f0:e0:4d:fd:79:1f:ec:e1:23:2d:85:3c:ba:25:
                    3a:5a:66:ea:89:b8:31:37:86:5f:d6:6c:35:61:b0:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CE:3F:68:84:6F:93:F0:F0:6E:AC:05:24:62:19:52:B7:8A:04:5D
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:17:dd:18:3b:af:2a:e8:6e:3f:c5:70:95:4b:2f:f4:4c:
         9f:81:af:46:cc:66:25:30:cb:52:d1:6f:a0:98:1d:e8:55:85:
         20:73:44:d2:41:5d:05:9f:3e:81:93:d2:ff:77:a3:ee:29:94:
         d8:fc:eb:20:51:db:e0:cf:b0:cc:fd:03:e4:53:86:eb:1a:ce:
         97:4a:68:e9:d8:bc:7e:8a:19:57:8b:5e:bb:10:6f:b4:1b:09:
         f4:dd:b3:9f:ed:a4:28:1c:5b:e1:c2:4a:42:55:1f:12:6a:a9:
         be:da:e0:17:d4:40:45:5c:ce:f3:ef:0e:9c:56:0b:84:0a:58:
         a9:02:83:5e:24:89:c4:e2:3f:11:ff:08:dd:14:1d:57:7c:9d:
         43:e9:3b:76:74:53:44:3c:a2:bb:8a:d8:51:85:08:98:d9:3f:
         e3:80:f7:60:52:a9:6e:a8:a5:f4:da:b3:64:35:b2:f5:26:86:
         11:10:ba:fe:4c:89:52:43:86:ab:2f:45:3f:45:d2:c9:c3:86:
         81:25:dc:a7:e9:c4:43:6b:e2:30:39:83:04:d2:5f:51:be:f9:
         f9:82:fd:9c:91:85:b9:e3:58:1e:1a:6d:e2:76:76:0d:34:9b:
         10:e5:a2:32:7f:4e:bf:66:ec:92:4a:71:24:8e:3f:21:c7:24:
         fb:52:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 21:05:14 2025 by rpki-client