This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399156.roa
File:                     AS399156.roa (raw, json)
Hash identifier:          GUKwW5IIC4iiuiMQB415mQuqllQAZ2DGJ3tUvmQhP3U=
Subject key identifier:   36:E6:2E:7E:06:56:60:FD:59:63:97:9D:AB:20:E7:87:5A:CC:1B:73
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       36AA3C946FE5891CD260D7BAF122F5D7DA7C3DA6
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399156.roa
Signing time:             Sat 08 Nov 2025 11:14:31 +0000
ROA not before:           Sat 08 Nov 2025 11:09:31 +0000
ROA not after:            Sat 07 Nov 2026 11:14:31 +0000
asID:                     399156
IP address blocks:        2607:fc50:3000:456::/64 maxlen: 64
                          2607:fc50:3000:457::/64 maxlen: 64
                          2607:fc50:3000:458::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:aa:3c:94:6f:e5:89:1c:d2:60:d7:ba:f1:22:f5:d7:da:7c:3d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Nov  8 11:09:31 2025 GMT
            Not After : Nov  7 11:14:31 2026 GMT
        Subject: CN=36E62E7E065660FD5963979DAB20E7875ACC1B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:72:e2:8a:f5:21:cd:4f:3e:89:4b:90:12:
                    ef:61:25:ae:61:94:a5:d4:87:2c:29:94:5d:06:9b:
                    a8:35:65:55:cb:05:41:d8:05:ec:80:9b:4d:4b:7b:
                    d6:ff:df:1e:66:c4:dd:53:5a:44:32:b3:74:1c:3d:
                    e4:bb:f3:cd:a9:ef:df:8d:bb:c5:02:88:23:94:44:
                    e9:34:88:42:e8:ea:d6:89:46:71:2b:e5:85:d2:f6:
                    e9:60:1e:96:b5:72:71:41:f0:c0:1a:1c:c8:55:61:
                    25:81:7c:64:66:06:83:72:65:13:e0:fa:38:32:c2:
                    1a:71:be:06:2b:46:04:d6:6d:f5:d4:7f:5d:10:a2:
                    08:b9:9e:3e:5b:46:1c:84:78:41:a2:31:cd:0e:1f:
                    85:8a:6b:6b:09:cc:df:41:9b:d2:02:88:d1:cf:da:
                    79:24:11:26:ca:62:6b:0f:9e:72:80:af:88:08:47:
                    3e:32:a2:d3:20:40:b2:61:59:47:92:61:51:9b:1b:
                    94:6c:77:93:95:2b:f9:e8:6c:53:9c:3d:b0:e4:7e:
                    67:f8:de:9a:27:70:2f:48:17:f3:c4:2e:0f:49:45:
                    5c:1d:85:a1:c2:7b:e3:79:d6:12:ca:69:40:bf:40:
                    7b:41:90:d8:cd:98:5b:f5:d1:eb:5a:ef:39:fd:12:
                    72:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E6:2E:7E:06:56:60:FD:59:63:97:9D:AB:20:E7:87:5A:CC:1B:73
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc50:3000:456::-2607:fc50:3000:458:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:a5:4c:92:cd:b9:b8:ad:ff:38:98:9e:5c:a7:79:eb:ac:
         18:47:91:09:08:87:00:b8:39:eb:fc:f9:64:6b:39:07:b1:b4:
         db:4f:62:2b:3c:f3:57:91:ba:be:b6:42:28:ff:3b:2c:92:a7:
         2e:45:c4:7c:01:dd:1d:6f:73:ab:32:e9:a4:70:8c:9c:67:04:
         85:0d:4a:cd:63:cb:f6:2a:f6:f1:61:53:3a:9f:59:c9:dd:06:
         a0:7c:0c:a9:aa:bc:aa:4d:67:bd:6f:05:3a:e7:61:3f:3b:09:
         d7:31:23:6a:2f:d5:a1:9a:af:8f:34:45:41:bb:04:55:f5:a0:
         cf:bf:2d:47:e3:c5:16:a9:71:cc:b0:c1:69:09:d3:ad:63:a4:
         c3:35:61:c0:e3:6b:ec:bd:29:1e:72:c6:a5:55:08:6e:43:2e:
         05:54:b0:40:a6:32:d5:83:f3:4c:15:84:9f:1b:8e:a4:e6:e4:
         4c:41:6c:a1:af:5b:57:b0:60:34:68:f0:f9:cc:8a:e0:1d:6a:
         87:34:b1:c8:4c:98:29:9c:97:5e:c1:6b:d3:b7:16:b1:cb:c4:
         00:70:3d:42:92:83:9b:96:cb:56:4b:53:00:bb:00:fb:c9:6e:
         67:4d:86:59:d9:6d:ba:0b:b6:23:e4:35:f9:61:d4:d9:06:de:
         e7:27:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:55:43 2025 by rpki-client