This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS206650.roa
File:                     AS206650.roa (raw, json)
Hash identifier:          y7+ZLvc34tlPjMefJYQeKlEsOQ7ZBWonNcuA+sKMckI=
Subject key identifier:   2A:0E:1E:E2:78:29:5F:13:F9:A3:95:B2:3A:61:44:7B:D3:A4:CF:57
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1F9C24A9AAA115295F8835A0D4C17E3C36181FF3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS206650.roa
Signing time:             Tue 02 Dec 2025 23:44:25 +0000
ROA not before:           Tue 02 Dec 2025 23:39:25 +0000
ROA not after:            Tue 01 Dec 2026 23:44:25 +0000
asID:                     206650
IP address blocks:        72.11.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Dec 2025 07:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9c:24:a9:aa:a1:15:29:5f:88:35:a0:d4:c1:7e:3c:36:18:1f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  2 23:39:25 2025 GMT
            Not After : Dec  1 23:44:25 2026 GMT
        Subject: CN=2A0E1EE278295F13F9A395B23A61447BD3A4CF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:75:ca:6d:30:ea:74:21:ee:d2:85:91:c6:6b:
                    8d:d3:6f:5c:86:2e:62:ea:b2:04:bf:68:21:7a:1f:
                    89:52:fd:67:ef:89:db:4e:d3:0f:71:19:61:43:06:
                    c2:f5:66:a4:41:8d:6e:c1:d8:cd:7e:d4:0e:29:17:
                    a1:91:52:48:dd:5d:68:a2:25:6c:51:de:a4:af:77:
                    6f:dd:0c:50:8b:53:4a:22:f2:ec:2b:25:e7:7c:96:
                    08:59:71:df:39:6c:a5:a3:1c:b6:ea:36:89:f7:2f:
                    eb:90:95:aa:a7:ef:08:04:43:28:a6:e9:3b:0a:38:
                    d7:ce:0f:1e:af:8a:8b:0d:26:20:a7:1b:92:7a:cf:
                    46:a2:3b:49:ee:77:1d:c6:44:ff:03:7d:76:df:94:
                    c5:b1:8f:d1:e0:81:13:60:78:42:e6:69:5c:65:30:
                    1a:e5:81:7d:14:33:f0:5b:85:2a:16:26:78:53:83:
                    09:ac:22:a5:65:dc:b5:8d:4a:05:db:55:04:93:9e:
                    ec:99:f4:a0:ef:f6:82:6e:34:e6:04:28:96:74:3b:
                    71:fc:f3:72:01:a9:86:6e:50:d4:c2:be:ba:e4:fb:
                    42:5f:96:1c:66:3d:db:bd:ca:ae:6b:9a:41:7a:e6:
                    90:04:0b:3b:e5:ca:46:63:c2:fc:2b:87:20:27:3d:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0E:1E:E2:78:29:5F:13:F9:A3:95:B2:3A:61:44:7B:D3:A4:CF:57
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS206650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:ee:af:7e:5f:e9:e8:0e:eb:74:df:32:49:6a:64:ae:a9:88:
         a8:79:8d:b6:d3:9c:ea:7b:0a:59:37:b8:c1:5a:1f:af:a0:be:
         3d:4e:75:2c:c5:41:b5:02:32:f9:aa:5a:ab:a3:24:88:41:ba:
         b7:ea:26:63:1e:17:6e:60:3a:12:f2:07:40:9b:61:b4:78:3c:
         88:f7:02:4e:9f:8f:95:cf:7a:99:5d:ac:cf:4a:65:81:6c:f8:
         46:8f:d6:41:d6:eb:79:2a:20:64:f5:79:09:44:bd:b4:0c:45:
         eb:2f:e0:fc:ed:1b:d7:f7:0e:73:e8:c9:ca:f4:37:8b:d8:46:
         be:a9:b8:68:52:21:30:1b:8a:71:cd:8c:ae:59:3b:cf:4f:60:
         97:85:a6:5d:97:10:49:24:f0:50:d1:4d:79:5b:a3:16:3a:a5:
         70:d0:d2:31:2b:d9:78:76:17:2a:54:e9:0d:1c:8b:a3:1f:10:
         e8:18:34:fc:7c:f7:1a:1c:86:e1:b8:7a:92:a0:ed:47:57:5e:
         d4:fa:be:6e:4a:0f:18:ed:a2:0b:48:9a:e3:c4:b5:27:ae:b9:
         08:bc:7d:6b:a5:d4:70:15:ea:5d:76:96:b6:01:19:0e:84:64:
         b9:7a:29:24:75:6e:bc:38:70:f0:b3:8e:11:4b:c7:e3:74:75:
         5f:e9:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 07:22:22 2025 by rpki-client