This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa
File:                     3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          SNVn//o9ny+ZbZrDmOvhp9Q+5OlJqBb9Z1/oXFZQ+N0=
Subject key identifier:   AF:58:EB:BD:F3:98:93:2C:CF:74:3C:FB:48:9B:86:D8:9D:4E:2B:F4
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       2266DDFF9FE30783A0E0FE0E16F42A7E3FFF090D
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 13 Jan 2026 13:50:46 +0000
ROA not before:           Tue 13 Jan 2026 13:45:46 +0000
ROA not after:            Tue 12 Jan 2027 13:50:46 +0000
asID:                     212384
IP address blocks:        104.254.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:66:dd:ff:9f:e3:07:83:a0:e0:fe:0e:16:f4:2a:7e:3f:ff:09:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Jan 13 13:45:46 2026 GMT
            Not After : Jan 12 13:50:46 2027 GMT
        Subject: CN=AF58EBBDF398932CCF743CFB489B86D89D4E2BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:97:22:7f:7a:87:e2:50:d2:89:72:c0:e2:fe:
                    27:f1:91:7c:76:f8:84:3c:0a:b7:b5:0b:9a:cd:45:
                    cf:37:58:27:b7:be:2e:22:a6:46:df:4b:77:1c:9f:
                    e1:04:b9:01:40:fb:78:20:f7:ba:8a:20:9d:a4:d7:
                    46:e9:24:ec:64:5d:f6:16:de:fe:10:29:ed:f8:9c:
                    89:80:ee:40:09:a7:1d:5c:3b:de:f7:5f:7c:d7:d2:
                    e4:57:ea:33:1c:e6:e5:d5:71:82:46:df:06:aa:fc:
                    14:c5:c5:76:15:a1:c9:bb:4b:0c:c9:6c:12:c8:cb:
                    ca:3a:a5:1a:7a:6b:71:1b:0e:76:b0:e2:38:3e:2e:
                    88:c5:4a:e4:28:0c:a3:f8:c0:8f:6e:bc:b7:ed:89:
                    4d:ea:f6:79:20:5e:cd:76:d8:90:e6:ed:49:0b:4d:
                    1d:77:45:d4:b3:44:9b:75:b0:4a:ca:f9:ff:5b:3e:
                    bb:aa:1c:92:31:f3:46:29:df:b1:ae:76:46:d7:05:
                    33:80:de:29:cd:c7:5f:ea:17:ff:e8:bd:2a:dd:78:
                    9f:ab:bd:b9:6e:f7:0f:0e:16:9d:55:6a:1d:d7:b8:
                    fd:e9:51:2e:52:ac:b2:5e:a3:72:5b:cc:8d:1f:41:
                    0e:04:cc:36:de:de:15:ee:fa:e6:c9:d0:e5:09:47:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:58:EB:BD:F3:98:93:2C:CF:74:3C:FB:48:9B:86:D8:9D:4E:2B:F4
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:01:e5:74:0c:b2:2c:19:05:d3:97:22:bc:b2:22:0b:8b:69:
         91:90:e4:07:f4:18:ea:c1:ff:af:90:a6:86:df:b8:58:1c:8e:
         0e:b9:9d:2a:33:c5:2e:cd:56:fe:84:e5:4d:05:88:13:a0:40:
         ac:4e:51:4a:64:01:08:a3:61:f2:da:69:8a:e3:b1:9c:d1:03:
         f6:bd:8f:98:27:b1:15:a6:2a:93:f5:95:82:e3:b5:60:70:79:
         8b:86:2f:89:c7:f4:14:76:1f:8f:e9:ef:53:70:c2:df:d3:91:
         a0:0a:af:6b:5a:8d:60:2f:37:1e:05:09:b5:c4:7e:e7:c0:5f:
         38:6d:c1:61:f1:27:08:19:74:7b:3d:83:34:d8:5b:dd:50:4a:
         47:cf:e8:c8:e2:89:6b:74:3c:4c:c4:39:2b:24:87:9d:11:82:
         b9:49:61:ba:eb:e7:ef:e7:38:09:fd:56:54:2d:66:22:c3:94:
         26:1b:cc:5b:b2:c9:00:c5:dc:02:65:0c:ea:da:60:18:c9:75:
         51:02:96:f3:bb:1f:91:0a:b2:62:81:f0:58:81:fa:98:9b:ea:
         ae:67:40:6b:ce:e1:1a:a2:05:85:a8:93:82:2c:65:12:e2:df:
         72:e1:60:78:bf:5d:15:da:b3:ad:1a:4c:91:00:cf:37:fc:6b:
         fe:cc:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:31:51 2026 by rpki-client