This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3139312e302f32342d3234203d3e20343031323933.roa
File:                     36342e35372e3139312e302f32342d3234203d3e20343031323933.roa (raw, json)
Hash identifier:          elroLsKltddShTlvxb8n7brpJ7oBTk8tcjb14vmQWmA=
Subject key identifier:   41:AD:CC:55:C2:50:BE:C7:F0:84:97:04:26:34:98:74:0B:7D:ED:66
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       76C68091114CB38D1BF8EEB940470AE64A24F63F
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3139312e302f32342d3234203d3e20343031323933.roa
Signing time:             Fri 28 Nov 2025 04:20:38 +0000
ROA not before:           Fri 28 Nov 2025 04:15:38 +0000
ROA not after:            Fri 27 Nov 2026 04:20:38 +0000
asID:                     401293
IP address blocks:        64.57.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Nov 2025 07:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c6:80:91:11:4c:b3:8d:1b:f8:ee:b9:40:47:0a:e6:4a:24:f6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Nov 28 04:15:38 2025 GMT
            Not After : Nov 27 04:20:38 2026 GMT
        Subject: CN=41ADCC55C250BEC7F0849704263498740B7DED66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:dd:f3:07:80:72:95:40:b0:8f:0d:39:17:
                    dd:88:3f:59:7f:7c:81:b9:c8:ec:39:05:98:aa:99:
                    f6:79:91:83:e0:93:d7:3b:11:b3:1d:81:a1:e8:43:
                    7d:d7:64:bd:6a:12:97:18:ec:76:b5:98:b0:65:c3:
                    5e:e9:e9:2c:8c:90:f5:fb:ad:91:19:b8:40:b5:04:
                    01:63:05:c5:04:e4:96:46:26:9a:e4:5f:11:a0:70:
                    9c:22:d0:db:a2:ca:a4:3f:c2:e8:e9:66:a9:67:ac:
                    a3:ae:f2:83:ed:6a:78:8d:89:04:d7:03:7b:22:c8:
                    bc:64:54:a3:ec:5b:5c:c1:4d:e8:25:fc:e8:c0:24:
                    8a:f5:0d:d3:d7:45:98:b2:6a:32:ee:d3:ec:03:8c:
                    4f:a9:fa:94:f8:e4:b7:bd:8b:54:6d:1b:fc:b2:ef:
                    b3:48:b5:e8:c9:db:9c:a5:f5:49:65:bd:70:94:64:
                    1d:08:76:ec:94:99:5d:b1:96:a3:11:a8:57:b7:4a:
                    73:09:ba:1b:05:9d:ec:27:f5:4b:66:b0:8f:a9:a4:
                    5a:0a:50:8a:3b:95:5d:60:a5:c4:73:4a:98:e9:ca:
                    ac:0a:f5:70:ee:ac:e4:e0:98:7a:01:08:0a:10:b8:
                    4c:8e:4a:ee:eb:0e:11:6a:6a:4a:23:f9:e6:11:14:
                    03:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AD:CC:55:C2:50:BE:C7:F0:84:97:04:26:34:98:74:0B:7D:ED:66
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3139312e302f32342d3234203d3e20343031323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:59:1d:61:c0:ca:2b:d6:63:7a:02:7e:85:fa:c7:a1:2f:5e:
         da:0c:25:59:b5:61:b8:36:fa:78:d1:5b:90:c8:54:8b:a6:b8:
         9e:ac:b5:5c:a3:c9:9f:ab:3b:a9:26:dc:b5:33:51:30:c5:99:
         7e:be:d8:a6:0d:7a:12:4e:6c:08:0c:d1:f5:74:b5:c5:83:dd:
         96:e7:11:44:6f:40:64:37:02:58:c2:9c:d9:cf:0b:86:45:b6:
         43:e8:5c:f4:64:f9:dd:86:5d:20:46:c6:96:da:c6:0d:c9:a4:
         ac:3a:4a:0d:6d:17:fc:37:fe:20:b7:0c:e2:f6:42:e8:fb:f4:
         94:b1:7f:98:dc:ac:17:72:65:7b:65:0f:63:b3:00:00:21:1b:
         4a:f7:c4:16:71:d3:cb:02:9e:aa:aa:55:47:e9:24:35:c0:43:
         bd:90:29:ff:7d:41:d5:28:9c:98:75:97:79:97:cc:8e:bf:8f:
         f4:e2:6c:73:c4:be:57:56:bd:2f:50:25:4d:55:87:53:0d:56:
         76:76:c9:de:23:a8:f3:6e:b2:64:82:3f:c3:47:11:36:33:b1:
         6a:d7:77:0e:96:25:e6:14:36:16:60:4d:ad:a5:97:07:58:a2:
         f0:1b:10:9a:82:67:2a:8e:c1:5d:3a:39:eb:a4:07:fa:a7:4b:
         23:b8:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 09:59:23 2025 by rpki-client