This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS40777.roa
File:                     AS40777.roa (raw, json)
Hash identifier:          QpNsVNK1OO70F+OVEsLYe4hl4HGmmb7xB84ySC2jpPE=
Subject key identifier:   AD:0F:A8:23:88:BE:B6:31:40:EF:2F:AC:89:E3:34:66:8E:CB:A4:4B
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       315D9DF5A35AED02AEA8A896C60926A8DB166D27
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS40777.roa
Signing time:             Tue 02 Dec 2025 06:03:18 +0000
ROA not before:           Tue 02 Dec 2025 05:58:18 +0000
ROA not after:            Tue 01 Dec 2026 06:03:18 +0000
asID:                     40777
IP address blocks:        74.43.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 12:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5d:9d:f5:a3:5a:ed:02:ae:a8:a8:96:c6:09:26:a8:db:16:6d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Dec  2 05:58:18 2025 GMT
            Not After : Dec  1 06:03:18 2026 GMT
        Subject: CN=AD0FA82388BEB63140EF2FAC89E334668ECBA44B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:f2:92:26:65:68:f9:70:b7:17:eb:f5:c5:
                    11:95:04:ba:ae:ce:6c:60:59:67:4a:71:89:e4:31:
                    54:b2:cd:95:dc:45:63:59:4e:da:2a:da:d6:ee:6c:
                    b4:e7:0e:22:1b:93:35:af:d6:42:9c:ff:a1:a2:a8:
                    6e:a0:75:96:cc:b3:c4:16:61:54:be:f5:0c:dd:48:
                    11:d7:65:6e:6f:e7:d2:de:8b:65:74:27:d7:a7:c7:
                    04:4a:66:94:62:ce:3c:da:90:d7:a2:c2:e1:c5:2b:
                    2b:18:d6:65:55:9b:5d:5f:e3:7f:cd:0e:16:bb:82:
                    55:44:69:a5:89:77:04:75:3f:c1:32:eb:a6:3a:11:
                    ab:1b:ff:83:a0:86:76:b0:ee:fb:64:79:07:d5:17:
                    48:50:bb:77:fa:14:80:2d:30:a2:6c:70:7f:cd:56:
                    21:1c:5b:46:6b:15:61:5d:c6:ec:6f:9e:46:40:86:
                    d8:cd:16:42:80:89:6c:64:05:3e:2f:cf:61:d3:aa:
                    4c:57:d3:96:92:ed:2c:c4:fa:b4:47:f0:d3:3f:cf:
                    8c:e5:c0:5b:60:9e:43:08:91:55:ac:6a:94:5e:4e:
                    49:89:46:74:73:94:61:e1:be:9a:74:e3:75:c1:f1:
                    f2:da:62:74:e0:24:d3:a7:74:75:13:56:bb:33:1b:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0F:A8:23:88:BE:B6:31:40:EF:2F:AC:89:E3:34:66:8E:CB:A4:4B
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS40777.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.43.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:a2:ca:ed:04:d5:20:c4:91:59:cc:45:e6:5e:a4:a3:84:3e:
         b5:e6:38:bb:3a:8f:de:3d:da:ab:8b:df:a8:f3:10:7d:8b:13:
         62:5f:d3:47:ac:e2:15:77:56:c2:53:b7:14:6e:20:77:a9:97:
         8a:d2:00:b0:b9:1a:32:4c:d7:a6:2d:75:4b:c3:71:33:17:07:
         ea:97:8a:9f:a6:16:bf:53:14:c9:85:3f:c6:8b:29:63:d0:11:
         07:65:e2:2f:e2:a8:bb:81:18:d6:5b:ab:78:3a:83:bf:ee:b3:
         d2:e5:21:d4:14:d7:09:0c:b5:39:09:08:f0:9d:68:85:bf:5f:
         f4:6f:e1:0d:ed:c0:1c:0b:9f:69:39:69:3f:5c:8a:7d:6f:dd:
         c5:64:d1:d5:50:ea:ea:a7:5b:19:68:b1:22:7e:4c:48:96:c1:
         f4:d9:59:95:fc:8c:d6:f9:c6:92:49:6f:8c:94:42:6f:51:ba:
         2e:89:5f:cc:a3:71:40:3e:fc:11:98:66:4a:f6:10:67:e5:cb:
         9a:3f:d6:0d:b3:51:43:b3:cf:c0:1c:47:b8:c5:b3:03:d3:ef:
         6a:fb:59:c0:a5:49:ad:64:8c:2f:e1:5d:48:0c:68:c3:4b:07:
         88:a5:b7:15:03:b6:9b:01:41:da:d9:7d:f1:10:95:8b:04:13:
         48:ed:24:26
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUMV2d9aNa7QKuqKiWxgkmqNsWbScwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjUxMjAyMDU1ODE4WhcNMjYxMjAxMDYwMzE4
WjAzMTEwLwYDVQQDEyhBRDBGQTgyMzg4QkVCNjMxNDBFRjJGQUM4OUUzMzQ2NjhF
Q0JBNDRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSvykiZlaPlw
txfr9cURlQS6rs5sYFlnSnGJ5DFUss2V3EVjWU7aKtrW7my05w4iG5M1r9ZCnP+h
oqhuoHWWzLPEFmFUvvUM3UgR12Vub+fS3otldCfXp8cESmaUYs482pDXosLhxSsr
GNZlVZtdX+N/zQ4Wu4JVRGmliXcEdT/BMuumOhGrG/+DoIZ2sO77ZHkH1RdIULt3
+hSALTCibHB/zVYhHFtGaxVhXcbsb55GQIbYzRZCgIlsZAU+L89h06pMV9OWku0s
xPq0R/DTP8+M5cBbYJ5DCJFVrGqUXk5JiUZ0c5Rh4b6adON1wfHy2mJ04CTTp3R1
E1a7MxvubwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFK0PqCOIvrYxQO8vrInjNGaO
y6RLMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzQwNzc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASiuDMA0GCSqGSIb3DQEBCwUAA4IB
AQCkosrtBNUgxJFZzEXmXqSjhD615ji7Oo/ePdqri9+o8xB9ixNiX9NHrOIVd1bC
U7cUbiB3qZeK0gCwuRoyTNemLXVLw3EzFwfql4qfpha/UxTJhT/Giylj0BEHZeIv
4qi7gRjWW6t4OoO/7rPS5SHUFNcJDLU5CQjwnWiFv1/0b+EN7cAcC59pOWk/XIp9
b93FZNHVUOrqp1sZaLEifkxIlsH02VmV/IzW+caSSW+MlEJvUbouiV/Mo3FAPvwR
mGZK9hBn5cuaP9YNs1FDs8/AHEe4xbMD0+9q+1nApUmtZIwv4V1IDGjDSweIpbcV
A7abAUHa2X3xEJWLBBNI7SQm
-----END CERTIFICATE-----
Generated at Sun Dec 7 13:48:38 2025 by rpki-client