This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          RL7iG4UZh1TAKPRWNSHpJBl+rPoWpmL8Vi86OKW5n8E=
Subject key identifier:   ED:87:68:15:88:D7:46:51:75:EA:EA:26:8E:26:AE:79:9C:D2:77:8E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3E8A8F89CCE7069E591C0D26948006CDD18C6C39
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa
Signing time:             Tue 11 Nov 2025 15:00:42 +0000
ROA not before:           Tue 11 Nov 2025 14:55:42 +0000
ROA not after:            Tue 10 Nov 2026 15:00:42 +0000
asID:                     16509
IP address blocks:        157.254.2.0/23 maxlen: 24
                          157.254.141.0/24 maxlen: 24
                          157.254.200.0/22 maxlen: 22
                          157.254.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8a:8f:89:cc:e7:06:9e:59:1c:0d:26:94:80:06:cd:d1:8c:6c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov 11 14:55:42 2025 GMT
            Not After : Nov 10 15:00:42 2026 GMT
        Subject: CN=ED87681588D7465175EAEA268E26AE799CD2778E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:45:72:c0:34:de:15:49:d7:6f:13:ea:14:
                    b6:d6:72:9c:3d:ce:f1:b1:03:45:3e:9e:9b:1a:cd:
                    bf:bd:dc:c4:95:24:74:0c:f4:c8:94:8a:18:3e:84:
                    a1:07:2d:c3:24:29:e6:66:31:09:88:0e:4e:3b:8e:
                    6b:e3:41:23:90:24:b9:b9:0d:2f:5e:ab:86:a5:36:
                    7b:d2:d0:2d:64:43:c3:25:91:bc:1e:f1:6f:d5:52:
                    9c:f1:97:ab:36:d4:cc:51:cc:fd:f6:37:26:f1:87:
                    41:24:c7:36:9f:0f:e2:f8:dd:42:aa:f0:47:05:25:
                    7f:13:e0:eb:45:95:d0:43:b0:c9:a2:ee:be:30:a1:
                    d6:e5:50:e2:1d:7b:5b:5a:c0:80:07:4c:16:4b:60:
                    52:6d:a8:51:79:a4:27:fa:61:06:3f:84:da:b0:63:
                    06:82:c9:83:f8:67:04:57:c0:f9:3a:ca:47:30:65:
                    9a:06:3e:da:85:5c:9d:93:06:16:3c:d6:bd:7b:7a:
                    97:bc:ba:f9:74:5c:ed:ee:aa:2c:35:9c:1a:a7:89:
                    70:46:3a:66:e3:24:2a:9d:01:30:ad:45:21:42:9b:
                    7a:41:40:95:9a:b2:fd:7c:cc:d5:82:18:e4:6f:7e:
                    4e:d8:1c:7e:69:f7:e7:db:ea:52:51:18:42:62:31:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:87:68:15:88:D7:46:51:75:EA:EA:26:8E:26:AE:79:9C:D2:77:8E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.2.0/23
                  157.254.141.0/24
                  157.254.200.0/22
                  157.254.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:df:bb:d8:e2:4b:6a:bc:87:40:48:7b:a8:a9:7a:25:48:c4:
         c7:0c:96:54:d2:89:17:e1:db:4e:2e:74:ef:b0:95:ad:5c:fa:
         1f:62:32:8c:8f:8e:4f:d5:bd:d8:46:12:5b:83:bb:c6:52:46:
         da:29:e6:26:63:60:47:10:9b:45:99:6c:00:6b:3f:fd:2e:5f:
         13:e1:dc:ff:44:72:32:d6:67:13:f5:72:5e:ca:4c:17:8c:fc:
         79:0e:cd:07:cf:a4:22:d7:07:09:3e:ff:7c:bc:f9:6c:77:0f:
         bd:5e:c4:19:44:79:97:46:6e:d5:a8:a8:93:41:40:dc:45:15:
         f8:07:97:22:2e:53:79:d6:8a:e9:8e:97:5a:12:37:d1:67:4a:
         b4:ea:41:e0:1b:a7:12:8c:ee:d2:71:0d:cf:ec:cb:6b:32:30:
         49:00:f2:85:93:64:3d:c8:f9:1d:8c:df:7e:66:a0:d4:d8:3b:
         b2:28:f7:e4:a0:12:b6:63:d1:5b:06:db:4c:92:f1:cb:1f:bb:
         06:92:fb:b1:db:42:f4:f4:f7:ec:40:ee:d7:e4:b1:7d:f2:46:
         af:0f:8e:5e:34:f7:19:0c:d9:7f:b6:0a:31:60:68:39:71:b1:
         4b:b5:0d:32:4e:48:32:6f:e1:07:50:09:c6:3e:c8:e8:aa:df:
         34:2b:76:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:28:25 2025 by rpki-client