This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134303433.roa
File:                     3139322e3230382e31342e302f32342d3234203d3e20323134303433.roa (raw, json)
Hash identifier:          SuhclbiIV4qPLwhBW0Oh/F79+apD4a3sdy3Moul4Jc4=
Subject key identifier:   D5:5E:30:BC:0C:51:13:20:9F:B2:BC:C3:50:14:C6:BA:CB:3E:55:7C
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       29FF07DDCEABA7391B01ABF6EB4B91E5CCD5A23A
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134303433.roa
Signing time:             Mon 05 Jan 2026 14:19:03 +0000
ROA not before:           Mon 05 Jan 2026 14:14:03 +0000
ROA not after:            Mon 04 Jan 2027 14:19:03 +0000
asID:                     214043
IP address blocks:        192.208.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Jan 2026 19:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ff:07:dd:ce:ab:a7:39:1b:01:ab:f6:eb:4b:91:e5:cc:d5:a2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jan  5 14:14:03 2026 GMT
            Not After : Jan  4 14:19:03 2027 GMT
        Subject: CN=D55E30BC0C5113209FB2BCC35014C6BACB3E557C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:03:8a:aa:7b:d6:6e:8e:17:a4:b2:5a:d2:
                    37:e9:61:2e:2c:1c:37:b2:a4:7d:84:70:b9:26:0b:
                    64:17:79:29:b0:68:58:66:3a:6c:1f:5c:3c:45:5b:
                    e9:c9:f4:48:2a:4e:3e:1d:3e:89:53:cf:e2:85:06:
                    45:f2:18:aa:02:3b:69:19:90:48:d1:cd:d5:52:46:
                    6f:3a:31:23:e0:0b:d9:79:91:71:fa:fe:cf:ea:14:
                    74:e9:d2:e1:52:c9:8d:73:43:8a:74:d5:0f:2b:62:
                    85:0a:d4:ef:f1:42:76:68:2c:2f:12:a8:3e:42:38:
                    9a:8f:67:0b:da:79:9c:91:e7:7b:52:91:3f:b3:dd:
                    8b:44:53:a3:aa:d5:b4:46:cc:99:df:6b:7e:0a:be:
                    f1:3b:ff:b7:10:fb:e2:28:b4:a0:0d:28:8a:ce:ce:
                    9a:ce:44:fb:a2:bb:63:0c:5e:1f:dc:4a:6d:40:87:
                    89:ec:4f:2d:72:7f:38:45:45:a2:38:21:c5:26:77:
                    ef:82:c0:9e:6e:a7:0a:30:d7:29:d9:48:83:c7:ff:
                    40:5d:15:f1:4a:ab:20:cb:4c:82:d0:64:a2:d6:55:
                    1b:35:84:d5:be:66:2c:9c:2a:41:d0:a2:65:83:32:
                    43:41:2b:6f:a2:e3:ce:80:7d:2a:b4:e0:f9:f3:2e:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:30:BC:0C:51:13:20:9F:B2:BC:C3:50:14:C6:BA:CB:3E:55:7C
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:24:83:9b:ea:ed:4f:ef:70:12:7f:80:54:0b:0c:57:d0:95:
         0d:21:b5:e3:54:fe:7d:c3:79:c0:c8:9f:5d:ad:c1:24:5a:01:
         fd:64:1d:71:ad:14:2b:93:49:22:b7:79:c8:dd:ba:82:8f:69:
         1e:4e:0a:22:a6:5a:55:56:98:8a:11:9f:f0:ed:ff:30:91:f2:
         7e:26:af:b5:f0:a6:4a:90:fe:eb:19:54:cd:ff:a7:e7:a1:e3:
         5c:fe:2c:9e:85:52:f2:f8:26:e7:17:63:26:bb:f9:8a:d3:3b:
         9e:a9:6f:b1:ff:8f:b8:a8:4f:8a:3e:16:f1:7a:4c:da:e9:8e:
         5b:4e:a4:ed:ee:12:de:17:bb:b5:5c:20:85:e1:69:41:e5:85:
         d0:14:62:d1:1a:d3:e8:cd:53:57:04:79:81:9c:ea:f5:34:ad:
         2d:3f:0a:02:5e:e6:91:e0:89:39:64:fb:f8:34:6c:71:3a:08:
         88:32:33:0f:44:24:7b:a7:b5:cd:68:84:c4:6f:2e:4e:da:a2:
         24:77:65:4f:eb:2a:83:35:8d:a3:a5:10:2f:be:43:94:7a:06:
         d7:e4:49:19:2b:e0:ca:b7:f1:35:6d:3e:a8:91:bb:83:cc:1c:
         80:d6:08:da:60:8c:07:fb:bb:9a:5f:69:2b:cb:3d:21:15:fa:
         47:4b:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 06:03:16 2026 by rpki-client