This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323132323338.roa
File:                     34352e34322e34302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          fdGNcPX68j6Q+ge4UwQRBIFEstMas23dgKy/0OMl5Ws=
Subject key identifier:   02:60:A6:BA:35:C1:20:33:41:8B:76:DC:15:DE:09:BE:C4:9F:8C:77
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       5EA8C9B0740F568138C4E18519196C2DF62CB1FF
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 02 Feb 2026 19:50:47 +0000
ROA not before:           Mon 02 Feb 2026 19:45:47 +0000
ROA not after:            Mon 01 Feb 2027 19:50:47 +0000
asID:                     212238
IP address blocks:        45.42.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Feb 2026 17:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a8:c9:b0:74:0f:56:81:38:c4:e1:85:19:19:6c:2d:f6:2c:b1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Feb  2 19:45:47 2026 GMT
            Not After : Feb  1 19:50:47 2027 GMT
        Subject: CN=0260A6BA35C12033418B76DC15DE09BEC49F8C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:6d:91:00:b8:5b:1a:07:63:5b:14:ff:0d:
                    26:af:38:ef:6a:eb:74:26:89:9e:96:03:da:30:96:
                    49:d3:47:75:ae:a8:50:82:34:0b:c5:18:07:7d:eb:
                    4c:e5:c6:cc:e9:e8:30:1c:f2:22:e2:fa:c4:8f:ef:
                    93:04:38:96:8d:28:4b:36:8a:f8:dc:bf:3c:d3:bc:
                    34:9b:e1:0a:79:ec:cc:cf:0a:9b:76:4d:8e:4f:0b:
                    36:ff:a8:99:d0:f0:24:0f:60:83:60:5e:05:8f:f1:
                    3b:e5:9a:c1:c5:20:d9:97:11:46:69:c6:ec:74:c2:
                    f3:4b:4d:60:37:2b:59:a5:77:5b:8d:f6:ff:7f:39:
                    76:71:5d:a9:63:9d:86:6e:45:96:9c:0e:f1:05:60:
                    5d:06:d3:5d:5b:a8:7f:82:95:ef:b6:8c:0b:83:7b:
                    bc:f0:29:4e:41:f6:aa:30:be:23:51:20:b7:10:41:
                    75:98:78:92:6c:3f:c1:17:b2:7e:71:0a:a5:04:09:
                    21:2d:74:3c:f9:a7:86:d6:35:4d:eb:3c:98:9a:c5:
                    5a:c0:06:11:5c:96:c7:86:1f:f5:8a:20:c6:b1:e2:
                    9f:32:01:6f:f8:6d:46:dd:4d:89:b1:8f:18:83:55:
                    74:cf:73:30:85:bb:87:d3:2f:43:45:39:b4:cd:f0:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:60:A6:BA:35:C1:20:33:41:8B:76:DC:15:DE:09:BE:C4:9F:8C:77
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:38:c4:6b:e3:a8:8e:7d:ff:e3:48:0a:59:eb:82:fe:8e:
         8f:28:3b:17:9f:fa:f1:aa:48:19:cb:7d:95:56:2c:49:e9:76:
         c1:6d:12:2f:24:03:a1:70:c0:f7:5c:97:3d:a0:36:e2:bc:c7:
         61:b3:0e:4d:65:4c:b7:70:d5:81:32:59:c1:78:17:30:83:99:
         93:31:d6:f3:90:d5:f4:6e:43:2b:e6:d0:87:71:b2:2d:96:c8:
         1c:9e:50:0b:f4:03:7f:c5:a5:04:b3:2b:57:4b:6a:2a:eb:63:
         da:a7:e2:99:b9:03:f2:08:1e:80:5c:0a:3b:03:08:d4:8f:7f:
         d7:33:e2:9b:a3:5f:3e:af:49:95:0d:36:45:02:c8:21:cb:1b:
         27:ff:52:68:2a:13:34:42:59:9f:0d:87:0d:aa:69:37:31:38:
         28:99:2d:ed:a1:50:c8:1d:8f:6c:aa:4e:3c:fe:95:b2:a9:8f:
         cf:01:3f:fb:44:16:da:64:02:95:bc:35:bf:f3:00:5f:83:0e:
         4b:41:32:a4:1a:92:7e:d5:be:01:ec:c8:ec:61:08:4a:a3:be:
         23:3a:cd:86:84:f5:98:1c:af:37:51:53:7c:c6:34:98:82:8b:
         a5:0d:ea:38:c7:92:fb:f2:dc:f1:0c:6e:46:16:3b:61:6f:cb:
         f1:da:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 00:32:33 2026 by rpki-client