This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3138342e3135342e3234302e302f32312d3332203d3e20333938393931.roa
File:                     3138342e3135342e3234302e302f32312d3332203d3e20333938393931.roa (raw, json)
Hash identifier:          +YA4/O8li0JTf48YJkmyeOrfH728vvRaRv3COO6TQ2M=
Subject key identifier:   5A:0E:60:23:69:83:A5:DB:35:6A:A9:5E:2A:7A:0E:93:1B:C0:C6:2A
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       3D20F451CA6DA3B231750FDEA7862159C005EE98
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3138342e3135342e3234302e302f32312d3332203d3e20333938393931.roa
Signing time:             Mon 24 Nov 2025 14:36:23 +0000
ROA not before:           Mon 24 Nov 2025 14:31:23 +0000
ROA not after:            Mon 23 Nov 2026 14:36:23 +0000
asID:                     398991
IP address blocks:        184.154.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:20:f4:51:ca:6d:a3:b2:31:75:0f:de:a7:86:21:59:c0:05:ee:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Nov 24 14:31:23 2025 GMT
            Not After : Nov 23 14:36:23 2026 GMT
        Subject: CN=5A0E60236983A5DB356AA95E2A7A0E931BC0C62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:41:e7:9c:5a:1f:52:80:a2:c9:22:fb:a7:
                    49:d4:d4:df:e6:00:bc:b9:1e:c6:75:09:59:eb:5c:
                    62:b3:7e:28:37:97:46:9b:63:d5:bd:a2:c9:fd:75:
                    64:30:99:25:af:30:eb:45:4e:80:f1:96:7e:51:f9:
                    0c:b8:05:f0:f3:25:1b:99:d5:72:da:9b:30:d7:bd:
                    cb:a5:e2:42:e6:50:cc:c2:98:3a:de:07:89:b7:ed:
                    60:cb:06:32:a9:3f:09:2b:97:d6:a0:78:62:6d:a6:
                    47:b7:25:2d:bf:fa:d5:61:16:b2:af:ce:4e:72:58:
                    a0:48:33:11:b6:4b:8d:16:37:b7:e5:49:35:2c:a0:
                    63:56:44:03:6c:98:a3:15:51:9f:1c:5b:9b:95:42:
                    57:9d:8e:c3:cd:c1:52:be:45:11:18:12:77:7f:4e:
                    35:99:88:23:17:08:91:e6:fb:7c:f8:e9:48:44:c1:
                    7b:db:a3:73:1a:a8:b7:02:e4:da:91:72:39:5f:9f:
                    50:d8:62:29:f8:8b:9c:79:59:fc:7a:1a:7c:41:4a:
                    be:fa:8f:9d:b2:ab:51:d2:5b:98:bb:75:a0:1e:80:
                    03:93:9d:f2:5a:de:91:bb:95:a3:0a:ea:63:42:b2:
                    f8:3f:56:65:57:d1:ab:31:64:47:7b:2b:00:5a:58:
                    62:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0E:60:23:69:83:A5:DB:35:6A:A9:5E:2A:7A:0E:93:1B:C0:C6:2A
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3138342e3135342e3234302e302f32312d3332203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.154.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:8a:f1:17:33:c4:89:93:0a:38:73:83:a3:a5:af:97:49:
         11:74:08:d9:3c:c3:4c:b6:0d:ee:f1:7a:f2:3a:b3:8a:14:ed:
         74:6e:b4:87:fb:60:a8:cd:a8:42:7b:10:94:74:e1:99:92:f5:
         08:52:6c:d4:aa:4c:14:6b:5b:85:02:ea:c9:69:73:87:63:20:
         a9:10:2c:a6:23:5d:ab:fc:48:bb:03:15:e7:72:f4:91:0e:98:
         9d:10:2f:96:e4:e3:23:a7:ef:4e:23:d4:16:46:91:27:d1:af:
         cd:d9:24:3f:08:70:5c:ed:5c:5a:fc:89:04:14:1d:bd:6e:31:
         e4:79:4e:b8:b7:05:80:61:e0:a5:4b:f6:38:73:d8:96:58:d3:
         40:98:c9:27:2f:22:5b:59:2b:92:69:30:fe:89:43:ca:19:cf:
         b1:f7:5a:a0:95:ba:ff:9b:88:41:1a:2d:cd:e6:ca:b7:ad:90:
         b1:80:6e:b0:6b:2f:6a:36:71:c6:d6:96:fa:f1:e1:97:34:6f:
         fd:02:2e:c8:02:6c:b4:bf:5b:99:db:98:1e:5d:27:d8:bc:89:
         03:59:a3:f7:3d:4f:0d:71:bb:0b:46:e0:65:47:63:d2:c0:81:
         26:39:47:9b:73:f0:de:60:8a:5f:03:e0:77:80:cf:84:6a:49:
         88:f2:9e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:19:11 2025 by rpki-client