This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31382e302f32332d3234203d3e20383334.roa
File:                     37342e3132302e31382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          9EXKOEF6E7UQ/q3AxP7/BqcE+nTpvM1Q0J9mKRkaeIw=
Subject key identifier:   C4:96:18:08:E2:13:90:26:02:BF:0C:83:B3:5A:82:D9:DE:81:A9:73
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       43A941EB390A58BB3A54B3E2E7ED39F1360B8BF0
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31382e302f32332d3234203d3e20383334.roa
Signing time:             Thu 25 Dec 2025 00:02:48 +0000
ROA not before:           Wed 24 Dec 2025 23:57:48 +0000
ROA not after:            Thu 24 Dec 2026 00:02:48 +0000
asID:                     834
IP address blocks:        74.120.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 21:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a9:41:eb:39:0a:58:bb:3a:54:b3:e2:e7:ed:39:f1:36:0b:8b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Dec 24 23:57:48 2025 GMT
            Not After : Dec 24 00:02:48 2026 GMT
        Subject: CN=C4961808E213902602BF0C83B35A82D9DE81A973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:22:72:bf:80:93:7f:6b:74:6c:a0:76:f4:
                    19:4a:ca:d8:da:37:03:98:07:a0:53:99:ce:c5:7f:
                    dc:84:35:80:c7:d2:4c:59:4e:0c:7c:99:dd:33:4b:
                    f4:15:33:ed:7d:45:c4:80:62:96:57:77:e0:44:7c:
                    9c:dc:83:a9:b7:dd:5a:4b:5f:26:93:ff:f2:02:72:
                    57:2e:69:61:44:dd:1c:87:c8:d5:24:63:0e:28:f1:
                    34:c5:c0:73:a6:57:c1:5f:70:99:f3:96:1d:89:c4:
                    a0:35:1a:13:a9:1d:96:7f:a7:87:1b:b9:d0:13:74:
                    9e:bf:e7:8a:45:dc:9d:70:c6:03:95:f4:b0:50:9b:
                    4b:a5:3b:44:6d:be:79:ae:9e:e0:ad:43:04:10:6d:
                    0a:f2:d6:97:7a:b1:c6:72:ab:3f:4c:c5:98:48:40:
                    1a:04:9d:d5:5f:85:38:5d:63:2e:19:7b:e7:c9:65:
                    73:f8:b7:c7:e9:5c:4c:4c:c3:d9:87:be:b6:aa:bf:
                    00:08:a5:0a:4e:a7:50:d6:38:22:68:43:69:75:38:
                    93:89:fa:1a:a1:fe:90:b5:d4:80:58:48:65:0d:36:
                    01:3a:bd:77:bf:8e:f3:57:a0:3d:54:83:14:18:35:
                    3b:a6:15:67:15:9b:46:78:aa:b7:e9:4b:9f:10:dd:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:96:18:08:E2:13:90:26:02:BF:0C:83:B3:5A:82:D9:DE:81:A9:73
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:ce:20:a2:5f:cd:7d:62:e7:1f:81:39:c4:74:e8:de:41:4b:
         4c:6b:46:5c:35:61:06:15:0a:77:bb:3e:7b:74:a6:54:23:3e:
         f4:50:dc:52:58:aa:30:16:08:52:21:51:63:de:00:f3:20:f7:
         6b:bd:69:ce:e0:03:51:34:7e:4e:7f:d4:5d:8b:6a:83:4d:d4:
         5b:b5:b9:06:a3:e2:a3:c2:98:77:3b:ee:f5:a9:fb:76:a1:1b:
         f5:be:6a:0f:6d:53:18:d7:1b:48:d3:23:f2:b4:30:01:e5:0d:
         4b:85:ae:66:17:98:b1:2c:c2:ff:94:7b:f7:22:0a:b0:97:3f:
         80:ec:2c:75:a5:48:91:2e:47:da:68:30:2e:81:58:43:af:4c:
         fe:2f:12:1f:2e:d0:4a:3c:af:ff:8e:e7:10:a7:64:4b:6a:57:
         3a:d0:2b:1a:05:a4:8a:cc:dd:64:cd:38:21:f2:11:f3:a7:94:
         35:a6:d7:76:16:61:4d:9b:51:9b:55:99:16:63:7f:e6:53:46:
         15:40:42:a8:0b:d6:1b:8e:3a:c7:9e:3c:e4:90:59:58:a9:15:
         55:e3:91:61:1e:1f:6b:60:be:13:c5:57:08:c6:e6:fb:c3:ba:
         0b:2e:7f:07:9a:cc:b7:28:96:f8:bc:13:84:7b:1e:2f:f9:e7:
         83:b0:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 21:05:13 2025 by rpki-client