This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa
File:                     3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa (raw, json)
Hash identifier:          E7HbkUQt46HuhH86GB4utq9RWQsPIzU0+o5NbOV+PpM=
Subject key identifier:   4C:2B:DF:47:D9:00:AB:40:B6:F5:03:05:4C:DC:BB:5B:70:5F:D3:B6
Certificate issuer:       /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial:       3B7E1A806A845634D48F24658ECD9D747CE79432
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa
Signing time:             Fri 05 Dec 2025 01:30:49 +0000
ROA not before:           Fri 05 Dec 2025 01:25:49 +0000
ROA not after:            Fri 04 Dec 2026 01:30:49 +0000
asID:                     393506
IP address blocks:        199.204.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 15:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7e:1a:80:6a:84:56:34:d4:8f:24:65:8e:cd:9d:74:7c:e7:94:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Validity
            Not Before: Dec  5 01:25:49 2025 GMT
            Not After : Dec  4 01:30:49 2026 GMT
        Subject: CN=4C2BDF47D900AB40B6F503054CDCBB5B705FD3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:bf:21:d0:72:d9:10:bf:90:c3:38:4b:0a:
                    12:c6:a6:ed:1f:fa:7c:3a:85:07:9c:eb:7d:a9:a7:
                    5e:ec:bf:b0:92:4d:9e:da:28:5b:8a:9f:4f:aa:d7:
                    4e:74:22:3f:99:e9:b1:81:b6:5b:74:fa:09:e1:e4:
                    97:23:1e:4d:e6:c8:48:b6:78:4b:77:ff:9a:32:f8:
                    9f:6c:d6:4f:58:44:76:77:fe:ca:12:2a:41:47:e7:
                    fc:c5:90:fc:7e:41:e8:72:56:8f:52:ac:2d:91:37:
                    b8:f0:af:51:f1:ef:85:1b:88:5c:7f:ba:cb:bc:cd:
                    bc:bb:83:f4:1c:42:76:c4:19:ef:42:66:2e:44:2f:
                    60:81:e1:0a:2e:86:73:b5:9f:b7:6f:61:2d:8f:4d:
                    67:a3:f7:a9:c3:f0:c1:ee:d2:fb:9e:43:38:43:86:
                    d2:b2:bb:51:f7:7b:66:4b:7b:e8:8c:f6:62:60:b2:
                    2a:28:36:42:4a:85:4d:31:88:60:df:66:e6:c9:c8:
                    5d:ec:33:c2:c1:a6:39:73:46:1f:6b:bd:19:c0:c6:
                    7e:f8:b1:d8:67:0b:9b:24:01:a5:c6:b8:d8:02:05:
                    89:53:04:6a:bb:bb:11:01:ca:15:d7:63:18:e3:97:
                    d6:a3:c9:83:d8:38:54:a2:44:d6:06:a1:ef:e0:cd:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2B:DF:47:D9:00:AB:40:B6:F5:03:05:4C:DC:BB:5B:70:5F:D3:B6
            X509v3 Authority Key Identifier:
                keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:2e:be:20:20:11:c5:60:79:61:21:bb:46:52:ed:3c:ec:54:
         1b:36:04:a1:dd:e4:62:83:ea:41:a0:7b:7e:77:6e:8f:43:4b:
         ce:95:cd:73:16:82:83:25:8f:44:12:41:d2:46:5e:37:d5:75:
         0a:a5:fa:03:95:28:14:99:0c:ab:73:a0:03:d7:a6:c1:6d:43:
         55:b1:96:6c:7c:84:50:34:9c:43:c9:d9:7a:11:b1:ce:89:1d:
         34:86:20:d1:35:02:a9:b3:1c:ba:6d:e2:32:93:41:8d:d7:64:
         1d:75:c1:5c:7c:57:1f:37:dd:ed:d6:54:c4:d6:81:8b:66:4c:
         03:6f:ed:7a:06:a3:e9:3c:f5:e4:4b:12:59:80:c7:62:56:06:
         12:3b:4b:bc:50:f4:5c:ee:37:e1:27:97:3a:24:66:53:bb:c6:
         a3:e0:c0:6a:3b:cb:35:c0:9e:c0:2d:83:db:e8:31:23:53:de:
         48:15:d6:64:ec:04:57:c2:5d:d1:9b:e4:12:52:1f:2d:11:67:
         c8:12:d1:77:da:98:98:ac:f3:1f:2b:a2:b8:2a:cd:69:d4:08:
         97:c4:05:49:2c:9f:2c:04:0d:ee:16:81:f0:a8:52:58:7e:ec:
         54:d0:8c:2b:98:6d:5a:81:4f:7a:e5:54:e4:dd:46:8d:fc:79:
         42:0e:d6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:25:35 2025 by rpki-client