This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20383334.roa
File:                     3139392e36382e3231382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          MA14E5LxQn0f34ZFVH17yoGzMbpkEyCzvKJphqyzSUg=
Subject key identifier:   07:DA:72:75:D9:F6:3F:7A:ED:C8:38:2F:00:D8:E3:00:E1:27:95:2B
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       0942CDD877ED8EB4AC62026464500DB81A12E570
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20383334.roa
Signing time:             Sun 30 Nov 2025 08:11:26 +0000
ROA not before:           Sun 30 Nov 2025 08:06:26 +0000
ROA not after:            Sun 29 Nov 2026 08:11:26 +0000
asID:                     834
IP address blocks:        199.68.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:42:cd:d8:77:ed:8e:b4:ac:62:02:64:64:50:0d:b8:1a:12:e5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Nov 30 08:06:26 2025 GMT
            Not After : Nov 29 08:11:26 2026 GMT
        Subject: CN=07DA7275D9F63F7AEDC8382F00D8E300E127952B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:9d:51:62:a8:50:60:27:71:a3:fe:9a:5a:
                    65:f5:59:cb:b3:a5:68:e3:85:db:1f:79:dc:a1:8e:
                    79:13:5f:10:5a:dd:90:01:b7:a5:ee:6b:91:1f:29:
                    17:7a:29:7f:01:e7:32:c9:db:b1:53:ef:8f:ca:39:
                    9b:b9:ac:63:b0:8e:aa:bf:dd:1c:94:49:2a:94:7f:
                    76:52:d0:29:41:af:70:6d:92:5e:d9:6c:81:14:a6:
                    68:26:39:ca:18:22:67:26:75:81:0b:2f:0b:cd:c9:
                    bb:97:4f:9c:44:47:29:81:b1:3e:ec:95:eb:15:2d:
                    8d:7d:8c:5b:19:24:b6:ae:58:21:5b:38:b7:33:bd:
                    12:32:80:1d:fb:01:8e:d2:ce:7b:5e:e4:7d:cd:d4:
                    bc:a1:d1:92:2d:cb:a6:5d:b3:6b:85:af:35:3d:8e:
                    18:77:12:41:4f:92:89:1a:a4:c6:e6:b2:4b:0d:87:
                    46:fa:87:df:89:d4:aa:83:cc:44:20:a1:5f:d8:ee:
                    61:f4:7c:d9:a1:06:ee:39:28:74:8d:7b:e5:e8:1a:
                    47:e4:06:db:f7:f9:9f:d4:d0:9c:50:44:ee:ac:bb:
                    6e:7c:d0:16:f8:7e:85:8f:04:38:5e:01:ee:dd:58:
                    36:6f:5a:45:18:13:f9:19:6c:bc:26:23:0f:0f:06:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DA:72:75:D9:F6:3F:7A:ED:C8:38:2F:00:D8:E3:00:E1:27:95:2B
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:cf:f9:8a:58:2e:60:f1:d3:ce:27:cf:77:b2:3d:df:a9:
         04:46:42:72:fa:75:b0:32:11:c9:fb:66:ed:c6:3d:d6:5f:36:
         87:9d:ee:a1:47:a1:ab:20:94:7e:28:27:1b:a2:91:c0:4d:f2:
         5f:95:6d:16:d7:52:08:86:b5:bc:25:92:55:4b:a4:9b:6b:12:
         60:b2:29:36:38:e0:c9:e5:c4:c9:60:8c:e3:7e:17:6f:aa:99:
         9b:21:75:a5:62:d3:44:37:97:1e:54:4d:a1:bf:b9:a1:3c:5e:
         2b:6d:e2:d1:a7:3e:6f:39:15:5b:a6:22:55:72:b4:30:00:85:
         3c:7a:72:79:ac:71:6f:ee:e4:e8:f4:f4:03:24:59:bd:58:c6:
         a9:46:8b:c7:89:e2:c7:37:11:5e:6e:63:b8:3a:56:26:ba:88:
         e0:8e:5a:8b:b4:9b:e0:31:3c:de:8d:57:72:ba:70:c3:f1:c6:
         7b:8a:60:a7:8b:00:03:9a:98:0b:22:02:cf:24:55:72:c7:ff:
         3d:81:21:33:76:c5:e4:5a:9a:f9:df:48:8f:57:3b:bc:a5:be:
         37:d2:90:0b:e9:2e:23:15:c5:a5:30:7c:cb:dd:8d:b5:50:82:
         79:8b:0e:c3:7b:ad:39:c3:88:d1:9f:26:6a:e3:00:61:02:cd:
         7b:e7:62:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:16:32 2025 by rpki-client