This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32342d3234203d3e20323134303235.roa
File:                     3230392e38372e3136342e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier:          hSQ7Iw2mE4BZyXbfe1/KspwqAyAEpytYVXGRz5PtVmA=
Subject key identifier:   B0:ED:64:97:CE:E2:C5:99:F0:22:A5:4D:2C:E2:75:80:F6:DE:BC:76
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       41654C5DE574C9D690CCB1009229709AFA14978C
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32342d3234203d3e20323134303235.roa
Signing time:             Sun 18 Jan 2026 06:15:24 +0000
ROA not before:           Sun 18 Jan 2026 06:10:24 +0000
ROA not after:            Sun 17 Jan 2027 06:15:24 +0000
asID:                     214025
IP address blocks:        209.87.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Jan 2026 01:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:65:4c:5d:e5:74:c9:d6:90:cc:b1:00:92:29:70:9a:fa:14:97:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jan 18 06:10:24 2026 GMT
            Not After : Jan 17 06:15:24 2027 GMT
        Subject: CN=B0ED6497CEE2C599F022A54D2CE27580F6DEBC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:a4:03:cc:02:f9:71:a1:b4:ee:cb:0b:cc:
                    8c:20:fd:de:bb:c6:ae:63:ca:f1:6f:be:93:fd:53:
                    77:66:bf:25:f3:f6:e7:9a:2e:0a:a6:42:fb:f4:e2:
                    7f:73:45:45:bc:cb:86:c1:23:af:e1:85:a5:2c:56:
                    07:a2:46:4e:e0:62:56:20:30:65:fd:87:dc:01:32:
                    17:9d:94:ac:94:64:7a:c6:12:b1:6e:55:78:cd:1e:
                    f9:69:57:d1:2b:f5:85:0a:30:24:f8:4c:fa:d1:2b:
                    a4:51:c7:1c:1d:dc:51:6e:7d:ec:1a:6e:48:7c:fc:
                    7e:54:e9:fc:e9:de:aa:95:94:9a:93:b7:1e:c9:16:
                    38:2d:a3:55:8c:59:79:35:28:10:29:12:5a:9f:c6:
                    e2:1f:e4:5b:d3:ed:3c:20:66:6c:55:5a:4b:46:dc:
                    a2:ad:7b:04:9a:67:83:64:03:52:ce:5c:05:dd:9a:
                    0f:36:ba:6d:c1:c2:82:c1:08:f5:e0:af:93:99:9f:
                    6b:be:88:1a:69:82:23:99:33:06:c6:82:53:01:6f:
                    f6:16:28:b2:19:43:20:ce:84:5c:2c:03:33:14:cf:
                    d8:50:15:49:8e:6f:a2:56:7d:d5:8a:6d:c9:be:47:
                    7e:1e:ff:07:2f:80:58:13:b8:13:61:58:11:ad:ad:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:ED:64:97:CE:E2:C5:99:F0:22:A5:4D:2C:E2:75:80:F6:DE:BC:76
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32342d3234203d3e20323134303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ca:5a:11:e4:b9:cb:d8:47:36:ae:53:b5:ed:f5:5d:6c:9d:
         82:05:df:d2:87:51:6c:bf:e6:64:75:7e:5e:f8:50:78:08:61:
         51:35:e9:a9:24:2c:14:6d:27:1e:93:0b:40:a6:1e:08:77:79:
         fe:58:4c:84:9b:21:78:5c:af:de:84:4d:46:ed:91:d1:02:86:
         d9:03:85:dc:b0:d0:18:d7:3c:d5:2b:aa:82:e7:ba:23:da:2b:
         f0:2a:69:f4:47:72:ef:65:38:5b:89:42:a7:dd:4a:9b:b1:ab:
         79:f1:d7:58:6b:82:bf:cb:35:4d:dd:03:50:dd:15:59:3c:aa:
         77:83:fb:a9:da:cb:97:37:26:0d:dc:aa:60:f6:01:94:55:e7:
         f8:0c:4f:32:fc:26:7c:02:64:61:20:8f:33:c2:82:7d:78:9f:
         0d:f8:ee:82:ca:27:3c:21:0f:12:06:c8:33:95:82:4e:14:cc:
         49:87:d0:bf:35:42:68:44:d7:2f:b0:69:04:af:c5:ae:0f:d9:
         de:6f:56:91:e7:2b:85:65:78:6d:6b:39:cb:c1:75:9f:ca:b7:
         6e:4a:18:d9:de:4d:37:da:50:0a:bd:85:b7:a5:da:78:7f:5e:
         50:92:67:c4:cc:ac:f5:73:78:48:33:8c:bc:aa:da:ae:ef:98:
         a4:c7:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 05:21:50 2026 by rpki-client