This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32332d3234203d3e20383334.roa
File:                     38392e3230372e3137382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          wfyzxn6dr8Tlt40b6+5QWN5hC7k6Bm+KNetBNlnu4r4=
Subject key identifier:   F0:1E:B6:16:38:18:50:57:9F:20:26:91:FC:DE:F3:10:51:A6:9A:04
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       2362C20F39D4A3B58A9EB34F401A19A83BB5ECC5
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32332d3234203d3e20383334.roa
Signing time:             Thu 01 Jan 2026 00:07:48 +0000
ROA not before:           Thu 01 Jan 2026 00:02:48 +0000
ROA not after:            Thu 31 Dec 2026 00:07:48 +0000
asID:                     834
IP address blocks:        89.207.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:62:c2:0f:39:d4:a3:b5:8a:9e:b3:4f:40:1a:19:a8:3b:b5:ec:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jan  1 00:02:48 2026 GMT
            Not After : Dec 31 00:07:48 2026 GMT
        Subject: CN=F01EB616381850579F202691FCDEF31051A69A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:5e:02:07:6f:b6:6b:ed:8c:cd:03:30:2f:
                    19:ef:2d:96:9b:cc:07:03:08:9b:ba:60:53:fa:cc:
                    f8:f5:b6:a7:bf:c0:a9:60:e3:44:de:38:8e:a6:3b:
                    48:32:c3:c9:d8:61:6a:d9:8e:22:f5:64:8c:d2:5d:
                    36:e8:26:c1:81:57:bd:f8:9d:74:21:f3:03:d9:4f:
                    df:5c:5b:ad:a5:ee:2c:fd:c1:58:07:1b:d3:9e:53:
                    ea:43:e3:aa:76:b0:af:7c:bc:64:9b:3d:7c:fd:53:
                    e3:0a:6d:0c:83:01:94:29:d1:1a:6a:46:f5:66:93:
                    e6:15:bd:6e:0c:67:fa:ca:b2:37:30:b4:93:0b:bc:
                    70:80:c4:70:4a:28:c7:19:db:bd:da:33:f5:ca:53:
                    63:b2:63:1c:f8:03:68:14:6a:35:74:bc:6c:79:3a:
                    9a:f9:e6:fd:a4:f7:60:50:48:3d:ff:f9:43:e5:19:
                    70:e4:dc:4e:35:51:2a:ec:15:46:ee:7b:01:d1:d2:
                    0d:ad:90:3a:fb:f4:15:da:16:bd:9d:e8:54:ca:47:
                    2c:f0:0c:cf:88:9b:a1:4c:9e:29:01:51:56:42:3b:
                    bf:43:0b:e7:39:d5:8f:b1:70:a0:3c:28:c2:d7:d2:
                    e3:ec:12:c4:79:af:44:66:29:1a:fe:67:e4:21:43:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1E:B6:16:38:18:50:57:9F:20:26:91:FC:DE:F3:10:51:A6:9A:04
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:bc:05:de:7a:85:89:cb:dc:12:52:ac:df:4a:b6:c5:9a:c3:
         df:b8:30:f6:61:d6:7a:17:fc:19:dd:ab:ae:72:98:eb:50:a0:
         a7:20:8b:61:2c:29:ee:d8:95:32:45:b1:df:3d:dd:82:be:22:
         73:3e:5b:24:f0:b6:22:1b:8c:6e:f0:dd:38:1c:83:e5:46:81:
         17:f9:27:cf:35:7c:a8:01:c2:0a:0a:b2:68:16:92:7f:0b:cc:
         26:d5:b0:38:74:b4:2a:60:2f:96:aa:a2:c8:bf:b8:1c:7c:ff:
         f1:84:26:d6:53:97:1f:ab:10:29:5e:1f:a1:2e:a8:1c:74:09:
         80:73:a2:d2:82:08:0c:d6:92:ad:8f:89:26:4f:1b:a1:32:a0:
         96:1e:72:74:74:a7:82:94:ce:a8:23:c1:72:c7:8a:5a:7f:46:
         ad:0e:c1:94:14:ef:57:48:e6:78:31:90:a0:75:a7:b8:23:32:
         9f:3e:ca:ba:71:bc:a1:ba:f8:cf:9a:65:d0:6d:9f:96:73:6a:
         48:bc:cb:8b:b4:36:0e:4b:fb:9d:b2:c4:44:3c:5e:da:d3:bd:
         3b:65:0c:bc:66:05:8c:5a:64:df:2f:ee:6f:de:a0:f5:77:37:
         dd:66:ec:c2:6b:56:56:ae:17:87:81:11:69:55:63:62:98:2b:
         2e:bc:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:33 2026 by rpki-client