This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136322e302f32342d3234203d3e203633313939.roa
File:                     3230392e38372e3136322e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          vBTDJlGvWQbi5NG3pmKwWhNIBLnmgNr+q66aMD03gMI=
Subject key identifier:   B9:CD:9C:14:8B:29:BC:8D:4A:F5:7B:AD:FF:2E:39:22:B5:35:C0:B9
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       6DE414D100DB36CA7585B45019844F7E92DA2501
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136322e302f32342d3234203d3e203633313939.roa
Signing time:             Sun 30 Nov 2025 10:11:45 +0000
ROA not before:           Sun 30 Nov 2025 10:06:45 +0000
ROA not after:            Sun 29 Nov 2026 10:11:45 +0000
asID:                     63199
IP address blocks:        209.87.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Dec 2025 20:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e4:14:d1:00:db:36:ca:75:85:b4:50:19:84:4f:7e:92:da:25:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Nov 30 10:06:45 2025 GMT
            Not After : Nov 29 10:11:45 2026 GMT
        Subject: CN=B9CD9C148B29BC8D4AF57BADFF2E3922B535C0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6f:8f:4d:88:90:fa:18:36:4e:d5:a6:6a:8c:
                    28:10:fc:f0:17:56:9c:52:e9:f2:c6:1b:2c:4d:ee:
                    05:73:d7:8d:28:89:c5:ae:09:09:f4:74:49:d7:ba:
                    67:68:37:f3:8c:ae:35:8c:85:87:4a:38:1d:eb:1b:
                    b6:30:60:73:a1:44:ad:f5:f2:dc:30:8f:20:da:5c:
                    25:ad:ab:87:72:a0:2b:90:fe:a5:05:4f:a2:5e:6c:
                    7b:7c:d8:f3:e1:5d:09:30:8e:40:06:c5:59:d4:1e:
                    8a:c2:37:d3:e0:9a:f3:39:ee:8e:1c:59:8e:e0:f6:
                    95:09:a3:4e:bd:b5:99:8a:6c:bb:cf:81:a4:eb:9d:
                    ac:26:e3:34:c4:2d:b1:ec:ec:b5:b4:70:72:6a:2a:
                    c6:c1:74:ad:ac:44:68:c3:da:f1:e7:35:a8:68:b6:
                    5e:90:ec:ad:8e:ae:c6:9a:a5:9b:3b:bd:6b:29:f0:
                    63:28:d2:5c:cc:a4:c7:d1:65:b6:13:0c:37:27:29:
                    c8:21:4a:78:50:55:12:00:0c:e0:78:c0:0d:de:a5:
                    54:60:43:7d:61:10:d8:40:7b:c1:06:73:fb:5f:98:
                    08:c2:62:f7:c1:ea:3b:dd:87:eb:73:19:90:6c:01:
                    7c:f9:9c:07:a2:c4:db:50:e6:ba:a2:f5:08:06:db:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CD:9C:14:8B:29:BC:8D:4A:F5:7B:AD:FF:2E:39:22:B5:35:C0:B9
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136322e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:00:68:33:5e:3b:8e:8d:4c:60:1d:be:86:0c:1e:57:cf:d0:
         6f:78:67:db:cf:b0:10:01:9f:b3:7b:4e:b0:96:99:6f:ce:4c:
         cb:83:a8:f7:e3:28:4a:bb:c9:db:2a:31:3e:20:48:61:6b:2b:
         36:e8:89:0f:cc:48:ff:32:94:48:2e:62:88:f5:77:2c:47:be:
         ab:fc:de:27:5c:eb:1c:23:67:5c:39:5b:da:4e:ec:38:af:0b:
         3f:ff:61:5c:b9:e0:c5:f8:38:68:63:06:65:99:0a:42:f4:ed:
         95:9b:7f:99:62:37:6f:07:55:23:d2:3f:a4:10:99:a1:be:5b:
         83:d3:e2:17:51:dc:a3:1b:a9:29:68:98:1f:8f:66:24:ce:7b:
         b2:97:98:84:bc:1b:2b:f3:0d:53:5c:26:e2:81:55:08:a2:c9:
         f4:c9:23:c9:64:1c:5d:ec:de:3b:54:03:0c:17:66:49:a8:2e:
         64:03:9a:ae:76:b8:80:a1:c7:59:21:81:e4:d6:8d:0d:29:90:
         ce:66:cc:e2:1d:96:d6:04:ec:1c:28:1f:d7:5f:ac:9f:b3:9f:
         d3:ed:a3:af:b5:3d:14:e1:7c:17:b2:43:68:2a:d4:bb:14:92:
         ef:c7:b6:16:29:fa:c3:b7:cd:54:0c:cd:e3:da:ee:b1:35:98:
         7a:53:af:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 12:24:09 2025 by rpki-client