This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20333937343233.roa
File:                     36342e3235332e39342e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          w6HYQCPKSfKHbtn95ZgQA+gaIYVBpDVOpcqEqhFCZl8=
Subject key identifier:   8D:DE:8A:56:7F:0D:EA:6E:05:87:84:79:08:80:4B:B1:5F:69:80:41
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       0FF5CA92B2140D815A2C815D280ABCC2B05A85D2
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20333937343233.roa
Signing time:             Sun 23 Nov 2025 12:30:40 +0000
ROA not before:           Sun 23 Nov 2025 12:25:40 +0000
ROA not after:            Sun 22 Nov 2026 12:30:40 +0000
asID:                     397423
IP address blocks:        64.253.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f5:ca:92:b2:14:0d:81:5a:2c:81:5d:28:0a:bc:c2:b0:5a:85:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov 23 12:25:40 2025 GMT
            Not After : Nov 22 12:30:40 2026 GMT
        Subject: CN=8DDE8A567F0DEA6E0587847908804BB15F698041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:f8:1f:41:ef:3a:f3:b8:86:0e:e5:0a:14:
                    2a:45:1d:de:df:f7:34:34:6a:3a:71:86:f7:62:86:
                    3c:8d:e0:e3:0d:ac:fa:9c:ff:3e:cd:62:46:be:72:
                    e6:77:91:15:fb:17:a4:1c:a3:77:e1:70:ac:cd:d8:
                    50:74:fa:48:60:cc:59:1b:37:11:70:71:4f:0a:91:
                    52:ce:66:20:71:ee:09:46:49:35:2b:05:8f:96:bc:
                    2c:f9:8b:25:81:ee:3b:5d:bd:21:09:8d:cc:ea:db:
                    bc:e2:71:05:4e:1e:a2:a7:c6:e5:4b:61:79:25:9b:
                    5b:f0:d3:34:36:ff:22:8d:f0:e6:03:16:a9:4e:8d:
                    98:b7:bf:98:46:8b:b9:a6:5a:2e:fb:0c:d9:4c:dc:
                    3d:ca:f1:27:b8:71:58:ee:5d:27:23:9f:7d:4d:8a:
                    97:53:df:c9:c4:eb:85:5d:71:c1:c5:dc:6f:48:77:
                    a5:e9:fd:2d:0b:1f:39:9d:95:34:25:30:2c:17:18:
                    06:1e:04:dd:d3:ab:ab:36:fe:73:fd:bc:07:25:5f:
                    17:b9:3d:d7:44:11:e1:8c:25:47:19:29:30:4d:a2:
                    bd:1b:af:ce:b1:55:e4:14:b5:d6:fd:ab:17:d7:8f:
                    74:39:82:62:62:62:f6:d5:c0:69:b5:f3:28:16:11:
                    75:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DE:8A:56:7F:0D:EA:6E:05:87:84:79:08:80:4B:B1:5F:69:80:41
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:66:e5:cd:9c:65:14:de:92:eb:6d:c5:dd:7e:91:36:b6:ed:
         b2:99:e5:28:18:be:83:38:b2:41:53:76:de:0a:10:d3:98:91:
         0a:ae:7a:9e:f0:00:35:46:d5:59:9d:e6:d9:b5:d7:5b:58:a3:
         3e:56:63:40:be:34:65:00:7c:93:e9:20:c1:66:e8:c8:6a:1a:
         13:f9:80:00:ae:90:b0:b5:39:86:28:eb:71:ba:b7:b5:04:2e:
         61:a1:9b:0b:3f:bd:97:5f:8f:45:fb:3a:9d:d1:ae:78:f8:c1:
         da:85:1d:50:c1:4a:1b:a1:54:5c:d2:48:cc:58:6d:eb:af:55:
         8f:4a:04:ba:0f:a1:5d:55:b6:fe:2e:af:ac:c1:52:6a:5e:7c:
         f7:69:f4:38:74:4e:5b:d2:55:b0:a6:e4:6c:51:53:e3:2a:39:
         f5:e9:1b:66:71:e4:a9:a3:de:99:b9:5a:e0:9c:dc:6b:14:99:
         ab:21:06:7d:6b:6f:b9:d6:e4:0d:fc:91:cb:c3:84:c3:82:bc:
         04:c0:0d:3d:6d:cf:a3:d0:12:72:30:0e:2b:57:ee:0f:8a:2d:
         a8:2e:a9:4c:c6:ef:e8:0a:f9:ad:69:e0:00:55:b3:3e:61:1e:
         a2:40:61:d8:18:ec:80:ea:e8:97:e4:6a:03:b5:6e:b4:8b:69:
         ab:20:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:34:11 2025 by rpki-client