This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a313a3a2f34382d3438203d3e203131333538.roa
File:                     323630323a663937653a313a3a2f34382d3438203d3e203131333538.roa (raw, json)
Hash identifier:          ykNCo19bJfTCz/j/3+v0aCVBJsJYkyozJ//8j29aLHs=
Subject key identifier:   56:AC:3B:C3:54:3C:D2:9B:5A:D6:9C:54:32:A8:DA:25:AC:E8:A3:29
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       316A3047A52419D6246BF6EF34D02D1BD65A977A
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a313a3a2f34382d3438203d3e203131333538.roa
Signing time:             Thu 06 Nov 2025 11:09:55 +0000
ROA not before:           Thu 06 Nov 2025 11:04:55 +0000
ROA not after:            Thu 05 Nov 2026 11:09:55 +0000
asID:                     11358
IP address blocks:        2602:f97e:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 20:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6a:30:47:a5:24:19:d6:24:6b:f6:ef:34:d0:2d:1b:d6:5a:97:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Nov  6 11:04:55 2025 GMT
            Not After : Nov  5 11:09:55 2026 GMT
        Subject: CN=56AC3BC3543CD29B5AD69C5432A8DA25ACE8A329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:14:f4:9a:fe:56:35:d5:6c:c3:67:9d:c5:
                    60:35:59:f1:85:ee:b3:a7:77:0d:5d:17:33:b8:87:
                    72:dd:97:d3:a7:1f:38:d5:0b:27:ba:8f:87:4a:d6:
                    9f:5e:c0:80:4a:d0:64:89:21:5a:ac:cc:54:85:be:
                    47:ff:50:05:cf:8a:24:83:e7:f2:e7:62:98:db:96:
                    cc:d2:42:af:59:52:e4:3c:f6:9c:72:b0:2e:87:6b:
                    c7:5e:fa:73:44:54:93:95:82:d2:b5:e3:47:42:d1:
                    59:24:89:6d:91:b9:50:0b:39:1a:8b:91:8c:62:96:
                    f6:49:89:70:18:69:54:90:a6:70:67:21:e3:7a:4c:
                    ec:38:0f:60:ea:a7:ab:d6:46:54:a6:3f:d5:b5:01:
                    10:39:7c:4d:6d:b0:50:fd:eb:7c:72:db:7d:60:db:
                    e8:85:89:6e:04:b7:0a:26:9f:a5:64:d4:3c:5a:ad:
                    4d:2f:78:6a:bf:34:3b:29:d9:1c:0f:7a:a9:de:31:
                    43:e8:7d:65:16:d6:57:17:79:4f:7e:83:ee:25:13:
                    44:63:d7:fb:bf:76:4c:4f:e4:22:22:08:7f:de:08:
                    07:98:6c:6c:77:ef:9a:c9:ee:f0:8a:07:bc:0b:e9:
                    c2:e3:61:14:63:ba:62:b8:b3:20:73:dc:97:2b:8d:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AC:3B:C3:54:3C:D2:9B:5A:D6:9C:54:32:A8:DA:25:AC:E8:A3:29
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a313a3a2f34382d3438203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:97:14:e1:1a:35:91:b8:ea:75:ba:75:a6:a3:37:46:a6:6b:
         99:b4:81:05:a3:a9:06:78:75:30:3d:82:7a:27:1d:ea:31:8b:
         2b:b1:c9:1b:4d:71:55:94:b1:1f:99:23:4d:0d:fc:ec:c7:22:
         2b:37:c8:c9:0d:0b:32:4a:33:20:5d:a3:f6:5c:87:94:98:f1:
         de:18:0d:f4:1c:01:6a:0c:16:29:d7:ed:48:bf:21:23:cc:23:
         3f:33:3b:bf:bb:a6:3a:62:f5:76:d1:ab:b8:9a:25:e0:b0:75:
         a2:22:66:10:e5:ce:0c:ab:dd:f2:37:70:e3:06:ab:65:12:86:
         8e:77:bc:f4:a9:3a:6e:07:6d:d2:14:ca:34:0b:36:9d:f8:2a:
         5e:87:7f:e7:c5:b5:73:e5:61:7e:c6:4f:48:75:f8:c4:bc:75:
         92:c1:5a:30:10:38:71:c0:49:e3:83:c0:ec:f5:45:67:c8:6a:
         9c:6b:54:31:d9:8a:4b:c2:43:cb:20:49:3f:9b:6d:25:4e:26:
         08:17:17:16:05:e4:ca:62:49:cd:ab:ba:8d:c3:39:6d:43:94:
         be:f0:5a:07:16:be:30:58:22:bc:c9:e1:13:e8:45:c4:4b:e1:
         bd:57:67:04:f8:5c:a7:58:98:48:48:7b:e8:b6:c1:8f:11:78:
         ea:e8:88:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:46:56 2025 by rpki-client