This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32342d3234203d3e20383334.roa
File:                     3139322e302e32322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          70hcewYdGdNrgkFIy2DhKvKt5MOVRlD+miYYnS1RWiY=
Subject key identifier:   2F:99:D0:0B:C1:0E:3B:C6:A6:0D:FB:A5:A3:04:F2:B5:A9:27:9D:74
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       212777EAA779403328980CE7E86E8EDB8B9E1949
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 25 Dec 2025 01:46:20 +0000
ROA not before:           Thu 25 Dec 2025 01:41:20 +0000
ROA not after:            Thu 24 Dec 2026 01:46:20 +0000
asID:                     834
IP address blocks:        192.0.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 09:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:27:77:ea:a7:79:40:33:28:98:0c:e7:e8:6e:8e:db:8b:9e:19:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Dec 25 01:41:20 2025 GMT
            Not After : Dec 24 01:46:20 2026 GMT
        Subject: CN=2F99D00BC10E3BC6A60DFBA5A304F2B5A9279D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:0e:27:a6:38:0c:38:f9:c1:24:c3:f2:65:
                    d8:b3:41:47:24:6f:33:e7:65:08:09:ae:ce:81:2a:
                    ae:55:05:c0:54:73:ee:a2:98:0c:14:a5:b3:2e:19:
                    02:ae:83:e2:d4:e3:18:2b:a7:a6:fd:dc:ad:51:f6:
                    ff:87:98:a6:06:6e:1f:01:47:81:39:1a:1c:a2:15:
                    ea:92:ce:f2:72:37:a2:f4:cf:77:54:f6:f0:3e:cc:
                    58:4d:16:0f:fc:3a:e5:97:a8:a8:e8:4d:37:b2:07:
                    12:6d:e9:f7:57:7c:3a:23:a6:64:ff:7e:94:30:2f:
                    de:cd:c0:73:00:7e:b9:2b:8b:9e:71:b4:6c:35:c6:
                    a3:3a:23:9a:a1:cc:17:1a:d3:6d:aa:ed:2b:d1:67:
                    d6:b8:58:b3:32:90:f3:d4:89:b6:ed:8c:09:25:08:
                    b5:9e:03:5f:88:4d:a7:31:5d:24:4a:e8:0f:6e:54:
                    fd:2c:4d:69:d3:50:05:7e:41:b2:49:d7:55:e2:2b:
                    54:47:fc:e6:9a:92:a0:54:0e:63:ad:88:67:6b:f2:
                    49:b9:db:6f:77:00:2d:fb:fb:a7:87:5d:d8:c3:41:
                    27:92:b1:12:a4:bf:44:f0:9c:d8:dd:7a:db:c3:45:
                    3d:6e:f6:34:7e:cf:8f:53:34:5b:5a:fb:62:b5:4f:
                    a3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:99:D0:0B:C1:0E:3B:C6:A6:0D:FB:A5:A3:04:F2:B5:A9:27:9D:74
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:f8:8d:a3:81:59:85:16:44:92:ed:68:14:26:7a:35:74:
         27:ce:1b:12:3d:62:fd:ff:c8:22:c4:99:5a:dd:6a:ef:63:a8:
         8b:2f:0e:77:f8:fa:31:ec:9b:2b:31:84:1f:8b:4d:73:90:c9:
         c7:81:89:a7:13:6d:e6:b5:34:19:e3:6f:f3:d1:7e:c4:d2:d1:
         3e:6e:97:8b:26:35:12:71:3a:47:cc:1d:f1:a0:44:72:8b:da:
         76:42:55:cd:ef:93:d9:a0:27:d9:57:71:21:14:f5:1f:85:89:
         2d:79:90:8a:02:0a:a1:87:d2:4a:e3:df:0e:f6:ee:e5:f6:1a:
         02:e6:d0:8c:e5:fa:a0:71:7b:0d:70:30:66:fd:e7:bf:51:25:
         df:ab:43:ea:2a:4b:6d:97:54:31:ec:7f:67:3a:67:02:77:86:
         de:12:75:a5:8e:3b:40:bd:80:70:91:43:f8:d2:ba:24:cc:84:
         22:9e:43:ef:17:12:d0:a8:5a:b2:6a:96:80:01:a0:bb:a6:3f:
         3e:21:b5:0e:b4:b1:3d:b8:a2:e9:4f:be:36:52:ca:3a:b4:e8:
         e7:2e:c0:78:66:3d:51:44:3b:d3:44:5b:43:43:3b:79:e8:4c:
         ff:41:4c:b2:15:1b:68:37:d3:26:69:b2:c6:05:1f:d7:d4:41:
         2c:3f:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 21:13:16 2025 by rpki-client