This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa
File:                     323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa (raw, json)
Hash identifier:          lu9olMZVy5rwsW8QsuNDaOxNezsb31UEqBN5upyz1II=
Subject key identifier:   42:A6:88:C8:33:F1:95:BC:53:05:D2:B5:36:DC:A7:EF:19:78:FD:3B
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       05EF07EF28BCAECF2837ECF18C738AFC59068EE7
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa
Signing time:             Sat 08 Nov 2025 12:14:33 +0000
ROA not before:           Sat 08 Nov 2025 12:09:33 +0000
ROA not after:            Sat 07 Nov 2026 12:14:33 +0000
asID:                     399164
IP address blocks:        2403:2500:8000:14::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 13:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ef:07:ef:28:bc:ae:cf:28:37:ec:f1:8c:73:8a:fc:59:06:8e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Nov  8 12:09:33 2025 GMT
            Not After : Nov  7 12:14:33 2026 GMT
        Subject: CN=42A688C833F195BC5305D2B536DCA7EF1978FD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:7f:1f:e6:ce:86:40:14:2e:c5:4a:45:a0:
                    77:90:ed:9d:47:5d:91:03:d6:cc:91:f2:65:f1:4a:
                    63:c5:16:85:c2:cf:81:d9:f5:ba:76:ad:bd:3e:63:
                    4f:af:a0:60:2d:11:f9:1e:f2:44:5a:36:96:bd:3a:
                    b7:e8:65:73:0b:df:bd:95:68:dc:b4:3b:f0:67:09:
                    28:d1:4d:66:2d:d4:1e:41:26:8b:53:c2:6d:4b:c7:
                    05:5c:0f:24:3e:0a:84:98:3f:f5:62:d9:e4:46:3a:
                    73:b6:14:68:dd:c9:e0:83:88:31:24:88:3b:79:62:
                    06:76:ed:6b:2f:73:ba:84:1e:95:35:7a:1e:70:5d:
                    a0:25:85:58:75:0b:ce:9f:bf:67:c9:35:52:02:75:
                    45:fb:ce:72:06:ea:de:8e:1e:52:b3:93:65:76:42:
                    f4:51:2d:d2:c7:94:c4:91:4a:69:25:2a:e2:a9:75:
                    62:a5:4b:81:d6:f2:a6:e9:0d:e7:e9:f0:4b:04:a7:
                    14:7f:29:cc:43:52:05:90:ec:da:3d:3c:87:3c:80:
                    69:ea:41:b1:4d:6b:aa:5e:90:08:40:60:dd:a8:e6:
                    c3:9e:84:e7:6e:ba:ab:25:c6:04:7e:72:e5:97:78:
                    e9:6f:d0:16:46:68:9c:8f:2a:81:32:19:2b:f1:b5:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A6:88:C8:33:F1:95:BC:53:05:D2:B5:36:DC:A7:EF:19:78:FD:3B
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:8000:14::/64

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:15:37:00:9a:5b:0a:17:8c:ed:de:b4:7f:34:2d:6b:4b:
         73:ba:78:85:33:50:7d:47:72:2c:d0:ad:ac:65:be:ff:14:51:
         ee:1b:1e:42:07:02:29:f3:5d:74:47:71:46:44:0c:1c:fc:6b:
         35:81:c8:c8:f6:ac:93:bf:17:c9:0e:80:37:db:ed:80:aa:00:
         f0:80:4a:8f:07:e8:68:f4:6a:06:ef:90:ad:ce:e9:7a:48:bf:
         66:ee:7f:2e:4d:af:e2:30:95:4c:6d:22:53:b9:9a:46:f3:ab:
         bc:a5:d7:ef:cc:bf:5d:02:0c:48:eb:9f:7b:2d:34:05:e7:a4:
         ab:c4:dd:ae:a5:fc:c2:d1:4f:4f:a1:b2:7b:79:da:66:ee:b9:
         98:c6:7e:19:de:c6:7d:9b:61:b1:43:22:da:1d:e5:96:e0:70:
         09:89:20:d5:47:26:f3:4d:75:65:20:5d:f7:f3:07:4a:8c:e2:
         8d:cc:58:7f:a5:70:e3:89:70:36:b0:20:91:bf:cd:7e:3f:4f:
         7b:97:1d:d7:f5:af:27:a0:b0:b9:a3:3c:e3:21:70:79:fe:de:
         34:00:28:68:c9:ff:d5:8f:f4:95:92:0f:94:d5:6d:38:dc:e3:
         14:7b:02:4b:49:78:bf:ba:b5:2b:35:5c:e6:f6:8f:0b:09:29:
         2d:00:98:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:38:01 2025 by rpki-client