This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399437.roa
File:                     AS399437.roa (raw, json)
Hash identifier:          mEk/wqR5pCHZeO1R6EfPTfUDZn7/ozyKwfuoHtTQQXQ=
Subject key identifier:   90:64:7B:DD:CD:AC:D1:02:4A:24:D1:FC:DB:88:1B:78:EF:BD:CA:5D
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       1B086AAC4364BAA40B97B9D9B9FB320CC4C79F5A
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399437.roa
Signing time:             Wed 19 Nov 2025 06:03:17 +0000
ROA not before:           Wed 19 Nov 2025 05:58:17 +0000
ROA not after:            Wed 18 Nov 2026 06:03:17 +0000
asID:                     399437
IP address blocks:        50.32.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:08:6a:ac:43:64:ba:a4:0b:97:b9:d9:b9:fb:32:0c:c4:c7:9f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Nov 19 05:58:17 2025 GMT
            Not After : Nov 18 06:03:17 2026 GMT
        Subject: CN=90647BDDCDACD1024A24D1FCDB881B78EFBDCA5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:a6:d0:10:16:28:a1:26:a0:e8:cc:5e:13:
                    15:e8:9f:24:f5:9b:99:3b:f8:24:05:39:9e:7f:81:
                    5e:e6:15:0f:3e:12:4f:a5:ba:cc:67:fc:6c:dc:48:
                    ca:eb:98:76:05:23:7f:64:d8:8d:43:17:d5:4e:52:
                    ac:00:bc:8d:15:82:8e:64:32:3f:00:46:be:87:12:
                    ad:35:e3:7b:06:f7:85:37:0b:4e:01:ca:7e:d3:aa:
                    95:38:f3:23:2c:cb:d2:1d:6e:e0:fd:4f:6c:d7:bb:
                    a4:ae:21:5b:31:08:bc:1f:38:46:1e:33:d6:d7:22:
                    24:dd:3d:a4:0e:c6:4f:26:88:94:a4:b1:ed:9f:35:
                    7b:89:55:c2:ad:43:8c:55:30:bc:ec:f9:4b:89:29:
                    de:f4:40:0d:35:f1:12:c7:40:bf:db:dd:e0:0c:62:
                    a5:a4:c6:51:10:65:ac:8d:fe:a4:84:87:18:4b:cd:
                    8f:53:82:a5:71:70:81:5b:0a:a5:1b:98:c6:64:e3:
                    30:a4:96:09:3e:55:d4:a8:0b:e1:88:96:a7:1a:89:
                    41:10:d4:0f:50:30:3d:fa:59:f1:57:ae:e8:ef:61:
                    5d:22:d9:28:2c:ff:64:a2:94:cf:e7:95:59:d5:57:
                    7d:ba:9c:9f:f4:e5:18:af:f0:fe:f2:9e:fb:d8:74:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:64:7B:DD:CD:AC:D1:02:4A:24:D1:FC:DB:88:1B:78:EF:BD:CA:5D
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.32.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e9:da:06:36:9c:74:11:ee:bb:03:79:c8:06:03:40:93:20:
         88:17:ae:42:11:eb:d3:a7:cd:03:9f:92:e2:30:5c:b3:80:fe:
         3d:e8:3a:eb:08:21:3a:49:c3:15:f9:b0:7f:a9:dc:5f:e8:18:
         76:9c:82:7a:8c:a5:e6:cb:19:93:59:75:59:10:18:20:83:04:
         d8:eb:5d:af:a2:c1:f2:1e:43:55:a0:b4:08:af:c4:88:6f:10:
         50:5c:cc:3e:a6:68:66:ef:44:47:2a:ff:1f:24:2f:50:eb:85:
         a9:3e:bf:d4:ef:b2:ba:87:98:dd:d1:3b:ba:8a:de:c9:7f:ca:
         fb:7c:3e:4b:9f:2b:20:1c:d6:6d:69:9f:85:69:4d:3d:cf:e4:
         e1:21:8d:d3:b4:7a:f3:c1:dd:a0:e7:fa:be:95:2a:ce:7d:b4:
         d6:ab:82:6e:31:96:fc:45:a6:cc:e2:64:ea:14:2d:58:ef:0a:
         19:df:85:ff:df:f4:56:ce:15:75:57:e3:29:d4:21:a1:52:7e:
         71:82:8c:3a:28:3c:50:08:54:da:86:df:7c:ea:04:af:77:fc:
         a7:58:8e:ec:3f:81:4a:6d:8b:89:47:5f:94:9b:45:53:61:a3:
         e3:2b:2a:e2:5a:ec:c7:94:ab:8d:9e:d9:7e:d0:69:8d:a8:5c:
         ac:10:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:35:49 2025 by rpki-client