This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa
File:                     323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa (raw, json)
Hash identifier:          vMX1m653oNyj15F2eYPQKhqNFV8kF2BEw5uci5nccSg=
Subject key identifier:   70:F0:7F:57:D0:22:6D:CA:DA:57:7D:9B:54:10:AA:D9:A0:66:1C:7C
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       53FC9523534E3ECC818C24EAA75245E7379D2E32
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa
Signing time:             Sat 08 Nov 2025 12:14:33 +0000
ROA not before:           Sat 08 Nov 2025 12:09:33 +0000
ROA not after:            Sat 07 Nov 2026 12:14:33 +0000
asID:                     399164
IP address blocks:        2403:2500:8000:12::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 13:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fc:95:23:53:4e:3e:cc:81:8c:24:ea:a7:52:45:e7:37:9d:2e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Nov  8 12:09:33 2025 GMT
            Not After : Nov  7 12:14:33 2026 GMT
        Subject: CN=70F07F57D0226DCADA577D9B5410AAD9A0661C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:ff:fb:b0:5c:df:8b:fb:74:e3:1b:8a:44:
                    d2:14:39:de:76:cd:00:35:f6:fa:9e:76:50:89:dd:
                    0b:c6:9b:2a:cf:d9:43:3e:59:29:83:1a:49:60:35:
                    7e:c9:0d:0b:84:b9:8e:1c:ff:22:ea:bd:73:93:60:
                    12:70:81:85:3e:91:4e:76:a3:72:c4:c6:8c:c8:bc:
                    1a:7f:ff:0c:63:89:5c:86:b0:ee:e8:73:98:26:8e:
                    93:a3:cc:50:56:0a:1e:08:2d:32:f2:f0:d8:54:43:
                    3d:32:42:50:4b:a7:d1:de:db:10:4b:6a:01:aa:4e:
                    99:74:f3:20:08:78:52:73:7b:6a:35:7c:a6:08:81:
                    b7:72:51:e1:0b:18:bd:aa:8e:3d:8a:c5:2d:02:73:
                    08:34:23:82:07:f6:5b:c3:e7:dd:e9:ed:33:85:36:
                    d2:59:4e:a3:d0:dd:d5:cf:30:32:4a:ed:0f:ad:ae:
                    06:cf:b4:7a:27:32:85:7d:47:64:7c:44:de:c5:12:
                    25:85:64:ba:c2:01:b6:03:c7:6b:56:4e:2d:cb:54:
                    bc:e3:ea:c0:d3:88:02:14:de:97:f9:e9:71:a6:77:
                    21:2e:80:b3:31:93:13:48:6d:b6:08:cd:7f:21:41:
                    35:c8:a7:11:71:a3:35:38:53:11:61:8d:17:33:dd:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F0:7F:57:D0:22:6D:CA:DA:57:7D:9B:54:10:AA:D9:A0:66:1C:7C
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:8000:12::/64

    Signature Algorithm: sha256WithRSAEncryption
         22:b3:af:74:43:61:47:de:ef:c6:73:f0:d7:28:bf:5a:bd:e9:
         44:16:57:31:19:ba:de:0b:94:7d:7a:ae:d4:bc:a8:3a:60:07:
         1e:e2:94:32:96:46:71:16:01:3a:24:a5:ce:dd:be:51:a4:f0:
         eb:c0:e9:90:69:21:d8:78:54:7b:ec:56:31:5e:e3:f5:df:77:
         60:bd:75:34:e6:80:8a:b9:17:6c:f0:f4:14:2c:23:43:1c:97:
         94:53:2e:22:3a:e7:6e:b4:86:cc:70:17:0b:89:51:17:8e:b3:
         28:44:ea:0d:26:66:e1:52:4f:ae:23:02:47:af:c7:b0:67:1a:
         f7:e5:c0:b4:44:5c:7c:1b:e5:80:59:9e:76:17:22:ac:45:15:
         9a:75:81:35:a9:66:c1:21:f3:cd:db:6a:42:57:c5:05:5c:fe:
         08:70:9c:de:3a:7e:6a:fb:0d:69:4d:c6:6f:a2:bc:f9:c0:03:
         4b:88:64:d1:29:90:3d:e0:bb:41:7e:c2:c2:fb:1c:ae:88:67:
         22:01:76:7a:5c:63:3d:55:e1:57:32:ec:bd:14:36:d9:76:ff:
         00:a6:f6:8b:dd:86:0e:74:8d:bb:ab:e7:ee:cc:bb:69:98:e6:
         65:e1:37:2a:f3:23:a3:a7:c8:b9:ef:a4:c5:38:bd:73:77:d1:
         cc:60:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:42:37 2025 by rpki-client