This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136362e302f32332d3234203d3e20383334.roa
File:                     3230392e38372e3136362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          4EJA9pSo6mngrFM+qXrtTkI/43LozIbu9Ia1jcs1CLI=
Subject key identifier:   82:28:A0:89:AC:71:A8:30:0F:19:D7:F5:E5:8B:A9:A1:F5:2E:61:FE
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       66BD10C1099EA78D8A28D68A6DC7093FB5D78E4D
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136362e302f32332d3234203d3e20383334.roa
Signing time:             Fri 30 Jan 2026 00:15:53 +0000
ROA not before:           Fri 30 Jan 2026 00:10:53 +0000
ROA not after:            Fri 29 Jan 2027 00:15:53 +0000
asID:                     834
IP address blocks:        209.87.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Feb 2026 04:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bd:10:c1:09:9e:a7:8d:8a:28:d6:8a:6d:c7:09:3f:b5:d7:8e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jan 30 00:10:53 2026 GMT
            Not After : Jan 29 00:15:53 2027 GMT
        Subject: CN=8228A089AC71A8300F19D7F5E58BA9A1F52E61FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:bf:c4:cf:d3:07:43:da:f9:2c:5b:aa:50:
                    c4:4a:7f:1a:f6:73:57:98:82:31:5a:08:15:05:89:
                    47:fe:84:47:a6:de:38:f0:2a:40:d6:8f:70:3e:24:
                    9d:cf:0f:0c:2a:3d:a6:1b:0d:07:44:df:96:51:8d:
                    91:94:bc:d6:15:85:42:90:bf:f3:9b:7c:4f:12:2f:
                    3d:82:54:87:f0:cc:c4:20:9f:00:3a:0d:fa:74:8d:
                    6d:4c:04:c2:dd:a2:c5:cf:be:03:71:77:a5:df:4b:
                    71:d7:b0:8c:86:f5:df:3f:e6:27:f0:5d:60:3f:74:
                    14:17:57:7f:72:42:a1:9c:3d:70:6a:fd:b6:eb:3e:
                    b0:e2:7e:d3:b2:ac:e1:84:16:5e:b9:1c:3a:10:4f:
                    50:39:d2:5e:80:d9:30:81:d9:ce:a9:ee:b3:c4:ef:
                    91:c3:2a:db:28:c7:69:d7:94:c1:39:e3:24:72:a6:
                    d7:8f:30:2e:41:bb:1d:2b:9c:7e:b2:26:33:4e:8e:
                    8e:e6:de:e6:04:66:6c:f0:d4:d6:da:01:ef:17:00:
                    f3:9d:f5:c5:4b:48:9c:40:7a:f8:ed:6f:e4:91:38:
                    df:ff:19:50:08:a1:46:30:19:09:ca:d5:39:dd:3d:
                    ae:68:fe:eb:f3:bd:98:34:4a:da:d7:88:7c:91:63:
                    56:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:28:A0:89:AC:71:A8:30:0F:19:D7:F5:E5:8B:A9:A1:F5:2E:61:FE
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136362e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:bf:45:ce:73:08:71:ee:f5:2d:a6:2e:a1:9d:9f:34:80:
         b2:3f:b5:6a:39:ee:c5:2f:1d:57:db:5c:ec:e9:a6:8b:db:5a:
         34:9a:81:74:a4:1e:60:db:de:65:62:3c:91:42:34:f5:90:ab:
         cf:cc:e2:54:cb:cf:86:b4:f4:df:fe:09:32:0a:43:9f:94:b8:
         b6:a8:dc:e4:0e:b0:c7:dd:db:c7:af:35:f6:45:c2:90:d4:61:
         0d:34:0d:7a:87:a0:d9:df:fd:c3:59:0f:fd:19:7b:54:79:ae:
         2c:83:ba:94:16:fa:de:78:87:93:e9:4d:82:55:ff:c9:8c:9b:
         d6:c6:ca:3e:d0:17:4b:a1:40:d7:24:08:31:b9:11:9b:2c:af:
         2e:25:f1:71:81:66:74:3b:54:0e:24:50:21:e2:1f:b7:9d:b5:
         b2:c0:61:d7:4b:15:ce:55:73:58:10:9e:d8:6a:ef:ea:31:47:
         c0:40:5e:e9:fc:4f:0f:23:2a:5b:3b:15:e6:d8:17:31:8d:cf:
         6d:68:19:84:83:e3:8a:65:c8:26:aa:09:49:8b:f1:0c:99:e3:
         19:41:46:bf:0f:b5:06:56:e5:4c:7b:f7:96:2d:ee:1b:b3:53:
         06:f8:c8:88:19:dc:f9:0d:86:1d:d6:47:a6:01:a7:49:fa:f0:
         69:39:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:12 2026 by rpki-client