This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e203535323031.roa
File:                     3139322e3230382e31352e302f32342d3234203d3e203535323031.roa (raw, json)
Hash identifier:          gfHRO+D8Xw3ALiEcjHuNHJduP8iQTx++Nh7Z3egfWiw=
Subject key identifier:   30:5A:8E:71:60:91:48:0F:6C:A7:FD:C3:F3:AE:14:97:83:9B:A0:E7
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       0CF53F8FEB3F372EA3209DD1D36A6793409BF6AF
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e203535323031.roa
Signing time:             Tue 20 Jan 2026 06:49:19 +0000
ROA not before:           Tue 20 Jan 2026 06:44:19 +0000
ROA not after:            Tue 19 Jan 2027 06:49:19 +0000
asID:                     55201
IP address blocks:        192.208.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Jan 2026 05:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f5:3f:8f:eb:3f:37:2e:a3:20:9d:d1:d3:6a:67:93:40:9b:f6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jan 20 06:44:19 2026 GMT
            Not After : Jan 19 06:49:19 2027 GMT
        Subject: CN=305A8E716091480F6CA7FDC3F3AE1497839BA0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5f:f5:5d:bd:53:e3:09:1b:a4:6f:4e:4d:dc:
                    90:e0:bf:27:f9:5e:c3:3c:c8:99:d6:26:93:ef:62:
                    9f:e3:d3:21:6f:a3:78:5e:ed:67:2f:2a:de:84:af:
                    59:84:7b:a9:ad:06:d8:52:21:68:87:4c:ef:de:e9:
                    3f:d2:ac:30:e2:22:88:1d:da:74:67:23:09:03:eb:
                    a2:b4:9c:23:d9:9c:31:a4:6d:be:16:c2:08:78:56:
                    93:f4:88:f9:78:96:da:9f:19:7d:e5:db:83:f6:fb:
                    da:e6:e5:08:58:86:65:46:36:85:8e:95:87:9f:20:
                    a4:5b:64:ac:bd:a3:31:db:36:83:3d:22:53:6a:03:
                    8a:9b:fb:26:1f:e2:5b:88:59:0c:87:cc:cc:8e:74:
                    04:19:84:9e:0c:de:4a:1f:2a:69:c8:64:41:2c:c5:
                    fe:da:69:db:b4:08:0b:3c:13:65:ae:37:1f:d6:8f:
                    bc:7e:59:5e:14:00:f5:64:a1:22:82:0c:0b:ae:a7:
                    26:ba:1a:0a:01:0b:44:57:bf:8a:02:1c:37:32:b0:
                    26:64:72:ee:24:f8:f8:fd:e5:d7:a4:97:31:ac:73:
                    89:a3:e7:b2:98:b8:3f:65:1a:de:7f:7a:65:ce:91:
                    86:a4:82:70:75:51:9a:47:96:23:4d:33:68:87:fe:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5A:8E:71:60:91:48:0F:6C:A7:FD:C3:F3:AE:14:97:83:9B:A0:E7
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e203535323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:53:d5:7c:b2:50:c4:fe:b7:83:89:07:99:3d:09:f4:4c:
         6d:62:27:c0:46:13:ec:96:55:44:da:2c:96:9c:9b:5b:cd:82:
         3d:37:5e:ae:bb:83:f1:51:0a:91:29:e6:78:8d:68:ed:63:53:
         85:f9:27:49:50:e5:1c:dd:09:9e:c4:3f:8f:8c:52:45:02:04:
         90:76:a6:8c:fd:d4:1e:12:2c:38:94:10:09:f2:94:48:cc:49:
         86:58:23:c4:04:34:36:45:a8:7e:15:fd:aa:ab:7e:33:fc:74:
         a1:dd:b7:24:24:dc:69:a1:60:3e:4c:68:7e:f2:5b:3a:eb:5a:
         47:65:93:da:2e:69:bf:6b:10:36:d4:37:d4:ca:22:be:42:89:
         67:55:5b:4c:05:de:01:54:bd:e4:40:a5:9c:8d:5b:66:30:4c:
         df:bd:62:85:03:1a:90:4b:f1:e2:18:e0:ef:b6:74:1d:72:8f:
         6d:9a:37:ec:26:9c:9d:d2:7e:a9:23:86:aa:1f:ea:3a:a4:f2:
         70:13:57:49:93:26:27:3c:e9:7e:b0:09:0c:b5:98:35:4f:9a:
         d9:48:26:d4:08:af:be:1e:63:94:15:77:7e:5a:24:f2:ad:49:
         c8:2d:c8:25:22:1d:a1:f2:4e:c1:e1:d0:f4:37:76:c5:2c:82:
         a3:29:c9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 11:13:57 2026 by rpki-client