This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201341.roa
File:                     AS201341.roa (raw, json)
Hash identifier:          BZnbcfkbev2/xHF03fm0HbNlQPxy1prBG2vDh0XTRj0=
Subject key identifier:   68:7A:F7:11:1E:08:4F:C4:83:D1:D9:C3:44:4C:A3:04:B0:D2:A9:E9
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       24CA0860E723E8F0EBD55457FDEEDC1595EFDE89
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201341.roa
Signing time:             Mon 29 Dec 2025 15:50:46 +0000
ROA not before:           Mon 29 Dec 2025 15:45:46 +0000
ROA not after:            Mon 28 Dec 2026 15:50:46 +0000
asID:                     201341
IP address blocks:        140.99.81.0/24 maxlen: 24
                          140.99.86.0/24 maxlen: 24
                          140.99.140.0/24 maxlen: 24
                          140.99.141.0/24 maxlen: 24
                          140.99.142.0/24 maxlen: 24
                          140.99.143.0/24 maxlen: 24
                          140.99.148.0/24 maxlen: 24
                          140.99.149.0/24 maxlen: 24
                          140.99.150.0/24 maxlen: 24
                          140.99.152.0/24 maxlen: 24
                          140.99.153.0/24 maxlen: 24
                          140.99.154.0/24 maxlen: 24
                          140.99.155.0/24 maxlen: 24
                          140.99.156.0/24 maxlen: 24
                          140.99.157.0/24 maxlen: 24
                          140.99.158.0/24 maxlen: 24
                          140.99.159.0/24 maxlen: 24
                          140.99.160.0/24 maxlen: 24
                          140.99.161.0/24 maxlen: 24
                          140.99.162.0/24 maxlen: 24
                          140.99.163.0/24 maxlen: 24
                          140.99.165.0/24 maxlen: 24
                          140.99.166.0/24 maxlen: 24
                          140.99.167.0/24 maxlen: 24
                          140.99.168.0/24 maxlen: 24
                          140.99.169.0/24 maxlen: 24
                          140.99.170.0/24 maxlen: 24
                          140.99.171.0/24 maxlen: 24
                          140.99.180.0/24 maxlen: 24
                          140.99.181.0/24 maxlen: 24
                          140.99.182.0/24 maxlen: 24
                          140.99.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ca:08:60:e7:23:e8:f0:eb:d5:54:57:fd:ee:dc:15:95:ef:de:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Dec 29 15:45:46 2025 GMT
            Not After : Dec 28 15:50:46 2026 GMT
        Subject: CN=687AF7111E084FC483D1D9C3444CA304B0D2A9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:47:7f:ee:c9:17:79:72:a2:69:7d:27:fa:72:
                    b9:f3:ea:9f:4a:f8:e8:d2:6b:a1:ae:4b:14:d2:1b:
                    a2:95:7a:8a:3a:43:c7:99:93:47:79:f5:57:34:7a:
                    f1:4d:28:44:a7:4b:04:b7:d3:e1:82:62:70:bd:ff:
                    e6:d1:17:0b:41:90:26:ca:7b:4f:fc:7f:d4:26:b4:
                    f0:c0:6a:4f:c4:0b:6f:ee:11:00:fe:f2:74:a3:56:
                    1e:da:42:58:e6:00:ed:ff:57:a9:bd:28:3c:ee:a3:
                    13:58:85:c6:75:f4:8d:6e:fc:da:3e:2c:db:da:31:
                    09:a7:44:6b:b4:d0:b1:5e:6f:3e:ac:eb:12:14:44:
                    a0:99:88:ba:92:06:90:5c:9a:2e:d3:6d:0d:02:a0:
                    09:1a:35:ae:13:89:01:80:17:5a:ad:8d:c2:d1:c4:
                    75:d9:ac:a5:5f:1f:99:89:f9:29:cb:d0:15:55:54:
                    be:0b:fe:ab:30:b0:86:20:56:52:15:0f:c1:3f:2c:
                    d3:4a:ae:7e:a4:0d:96:91:7d:c6:27:79:7c:9d:7e:
                    1b:8f:0d:94:4f:7d:6f:12:9e:5f:01:e8:50:ec:71:
                    72:91:2a:ab:8a:0a:75:d7:b6:67:0e:66:68:b6:06:
                    2c:50:52:e2:35:27:b2:06:06:d1:b8:c1:40:fe:11:
                    40:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7A:F7:11:1E:08:4F:C4:83:D1:D9:C3:44:4C:A3:04:B0:D2:A9:E9
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201341.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.81.0/24
                  140.99.86.0/24
                  140.99.140.0/22
                  140.99.148.0-140.99.150.255
                  140.99.152.0-140.99.163.255
                  140.99.165.0-140.99.171.255
                  140.99.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:52:f0:e1:44:6b:99:98:9d:3d:42:0b:fc:78:a2:f6:71:d5:
         bc:9f:bd:c7:6b:d4:8c:10:5f:ff:52:fe:0f:f7:7a:f6:6f:ad:
         94:8e:0f:41:29:f1:8f:5b:6c:f7:57:8b:b7:bf:97:98:a2:80:
         1b:d1:08:4c:30:23:2e:88:16:2f:3e:64:1b:e3:cd:cf:13:f2:
         de:86:39:f0:c4:7c:f1:d7:ba:1e:69:f7:b8:1c:a0:32:c3:a7:
         c1:28:ea:de:2b:10:ee:f3:6f:7d:a4:77:f3:4a:85:5b:83:46:
         71:34:75:58:cd:96:d0:5d:13:2b:60:ad:37:ea:2f:30:42:ec:
         5f:15:05:bd:c9:cf:73:d9:6a:c0:71:41:fa:43:18:8c:8c:a0:
         1d:2f:c6:8e:a6:80:de:44:1f:a1:2a:08:88:41:25:2b:56:60:
         57:d5:46:0a:a6:b0:24:f1:69:23:d1:b9:34:c4:fe:1a:78:8d:
         89:f7:a9:dd:a4:73:15:bd:d7:ba:34:e8:7e:08:d1:7a:0a:2b:
         32:f6:ec:3f:61:f1:cc:82:d4:e1:a7:35:66:6f:48:05:56:91:
         a4:3d:a8:e8:aa:64:63:5a:91:83:01:19:09:60:b5:14:19:59:
         b9:a6:f4:19:1f:d1:bf:1b:78:0c:20:29:f2:9a:01:7f:19:87:
         e0:67:67:95
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUJMoIYOcj6PDr1VRX/e7cFZXv3okwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUxMjI5MTU0NTQ2WhcNMjYxMjI4MTU1MDQ2
WjAzMTEwLwYDVQQDEyg2ODdBRjcxMTFFMDg0RkM0ODNEMUQ5QzM0NDRDQTMwNEIw
RDJBOUU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ud/7skXeXKi
aX0n+nK58+qfSvjo0muhrksU0huilXqKOkPHmZNHefVXNHrxTShEp0sEt9PhgmJw
vf/m0RcLQZAmyntP/H/UJrTwwGpPxAtv7hEA/vJ0o1Ye2kJY5gDt/1epvSg87qMT
WIXGdfSNbvzaPizb2jEJp0RrtNCxXm8+rOsSFESgmYi6kgaQXJou020NAqAJGjWu
E4kBgBdarY3C0cR12aylXx+Zifkpy9AVVVS+C/6rMLCGIFZSFQ/BPyzTSq5+pA2W
kX3GJ3l8nX4bjw2UT31vEp5fAehQ7HFykSqrigp117ZnDmZotgYsUFLiNSeyBgbR
uMFA/hFAswIDAQABo4ICuzCCArcwHQYDVR0OBBYEFGh69xEeCE/Eg9HZw0RMowSw
0qnpMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzIwMTM0MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBb
BggrBgEFBQcBBwEB/wRMMEowSAQCAAEwQgMEAIxjUQMEAIxjVgMEAoxjjDAMAwQC
jGOUAwQAjGOWMAwDBAOMY5gDBAKMY6AwDAMEAIxjpQMEAoxjqAMEAoxjtDANBgkq
hkiG9w0BAQsFAAOCAQEAMFLw4URrmZidPUIL/Hii9nHVvJ+9x2vUjBBf/1L+D/d6
9m+tlI4PQSnxj1ts91eLt7+XmKKAG9EITDAjLogWLz5kG+PNzxPy3oY58MR88de6
Hmn3uBygMsOnwSjq3isQ7vNvfaR380qFW4NGcTR1WM2W0F0TK2CtN+ovMELsXxUF
vcnPc9lqwHFB+kMYjIygHS/GjqaA3kQfoSoIiEElK1ZgV9VGCqawJPFpI9G5NMT+
GniNifep3aRzFb3XujTofgjRegorMvbsP2HxzILU4ac1Zm9IBVaRpD2o6KpkY1qR
gwEZCWC1FBlZuab0GR/Rvxt4DCAp8poBfxmH4GdnlQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:40:37 2026 by rpki-client