This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a32323a3a2f34382d3438203d3e2030.roa
File:                     323630323a663937653a32323a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          OKJN78dGwpV6X48Ywdg9f1dXh6wFuWwSkEiTgdpkCjY=
Subject key identifier:   B2:F8:DE:8D:3E:EB:72:25:3E:41:1D:7F:5A:44:60:36:92:21:0D:C9
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       32B54B4BDEEE497926A8C239ADB091CE2DF5F7E7
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a32323a3a2f34382d3438203d3e2030.roa
Signing time:             Thu 06 Nov 2025 22:43:37 +0000
ROA not before:           Thu 06 Nov 2025 22:38:37 +0000
ROA not after:            Thu 05 Nov 2026 22:43:37 +0000
asID:                     0
IP address blocks:        2602:f97e:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 20:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b5:4b:4b:de:ee:49:79:26:a8:c2:39:ad:b0:91:ce:2d:f5:f7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Nov  6 22:38:37 2025 GMT
            Not After : Nov  5 22:43:37 2026 GMT
        Subject: CN=B2F8DE8D3EEB72253E411D7F5A44603692210DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:eb:a7:21:f8:4a:64:62:8d:fe:d8:05:27:
                    e5:34:02:03:de:0e:71:4a:fe:18:4e:85:44:9c:89:
                    80:e2:0f:c9:e6:43:f2:a3:76:b9:1f:d9:f3:5a:c0:
                    8e:32:58:b2:c4:63:5a:6e:0e:8e:38:34:a2:ab:7c:
                    42:72:3a:7f:62:5e:f1:34:58:7f:71:9a:7c:fd:8b:
                    fc:4f:4f:2a:9d:7a:75:37:00:99:cd:72:e8:d1:7c:
                    bb:58:c1:ad:3c:4f:80:03:1a:15:5d:d7:89:29:df:
                    88:56:9f:73:fb:9a:78:f5:9c:bc:21:7b:96:1e:60:
                    ac:3e:0b:6e:34:af:9e:33:3f:ff:7f:aa:1d:64:9c:
                    aa:76:b7:71:b7:10:50:1c:d1:96:47:90:85:e9:f1:
                    6e:b0:24:30:72:50:be:58:75:7f:df:44:fb:08:db:
                    04:20:f6:fb:dd:39:b0:aa:7d:c9:95:e1:aa:9b:71:
                    61:81:d7:50:cc:f8:86:90:c4:91:69:73:45:c1:62:
                    3d:b2:44:4e:39:e0:a2:9b:df:43:97:e3:ce:ee:c5:
                    10:f2:47:78:2a:e1:6f:9b:e5:cb:de:4d:0c:25:89:
                    a4:49:1a:ba:ee:58:02:0a:26:67:ef:f5:64:85:70:
                    bf:0b:11:2d:a7:d2:ec:e3:5c:f0:16:d4:72:1e:04:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F8:DE:8D:3E:EB:72:25:3E:41:1D:7F:5A:44:60:36:92:21:0D:C9
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a32323a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:f6:5e:0b:66:98:ca:c4:15:a9:20:b6:af:aa:0e:a9:60:16:
         75:68:25:f7:2a:9f:ef:c6:8e:2f:bd:d4:94:bb:a6:19:57:45:
         44:bd:90:6f:f2:14:14:f3:49:0c:0f:c4:95:d2:c3:e0:87:f9:
         6d:35:44:55:34:23:7a:f8:0e:2d:65:72:19:bd:ae:0b:42:4f:
         0b:f0:91:5f:35:8d:c4:91:a1:01:4a:c6:ca:b8:6a:4d:85:5f:
         ff:eb:f6:bc:c3:7b:1b:b7:8e:ed:5d:1f:eb:98:66:17:20:d9:
         cb:27:1e:00:f9:88:1f:47:6d:1f:cc:42:c5:75:ce:17:17:76:
         db:2f:15:14:2e:81:de:6f:c7:a1:5b:9b:70:34:a5:87:5f:55:
         4f:32:92:e5:67:81:c7:17:78:52:41:80:60:cd:85:55:0e:7b:
         c7:b6:ca:37:dd:49:1f:aa:80:0b:60:0f:c5:59:ea:ae:ca:42:
         62:d4:ca:99:84:2d:49:ef:0a:88:6f:a7:21:4c:20:3d:a3:6e:
         14:c3:61:a7:47:f5:e6:46:4d:46:51:18:d3:ec:db:7d:bb:f7:
         6d:8c:62:f9:10:86:07:01:ff:ca:7d:10:fd:ce:1d:54:3f:ff:
         88:87:bb:6b:f3:24:5c:a5:37:36:5c:bf:c4:ff:32:38:00:85:
         cc:56:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:34:54 2025 by rpki-client