This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e20383334.roa
File:                     3231362e3135312e3136392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          lY8SqEg4q3B9bKN49z/eRw7DDAoJK+FEphtGKRhihVs=
Subject key identifier:   23:D3:B1:00:F5:13:69:91:A9:72:5B:9F:93:1D:CA:85:32:AD:F7:CA
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       31A134DE6050EFBD9CB98163BD2EB3E91F3E826D
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e20383334.roa
Signing time:             Sun 30 Nov 2025 12:12:16 +0000
ROA not before:           Sun 30 Nov 2025 12:07:16 +0000
ROA not after:            Sun 29 Nov 2026 12:12:16 +0000
asID:                     834
IP address blocks:        216.151.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a1:34:de:60:50:ef:bd:9c:b9:81:63:bd:2e:b3:e9:1f:3e:82:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Nov 30 12:07:16 2025 GMT
            Not After : Nov 29 12:12:16 2026 GMT
        Subject: CN=23D3B100F5136991A9725B9F931DCA8532ADF7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:47:2b:5f:32:1d:5a:9c:9b:8d:c3:ac:fc:
                    da:25:96:8d:e9:40:73:dd:20:6e:7e:4a:40:de:93:
                    23:f8:df:25:0a:3b:89:e9:7d:54:9f:bc:5f:ad:85:
                    6e:33:69:49:70:4a:c7:f3:2e:c1:fb:6d:59:92:41:
                    03:23:63:0e:13:9b:b8:c8:02:f5:2e:68:44:f8:05:
                    cc:bb:e3:db:65:d8:f6:a4:7c:89:e1:7c:38:dc:8c:
                    8f:be:7b:48:37:1a:b6:ed:1f:40:22:f7:4e:9c:e1:
                    43:80:aa:fe:83:2e:6c:d7:56:5d:2c:6a:e5:d6:76:
                    99:d0:20:1c:6e:4e:78:ae:f0:36:88:19:3c:5c:3a:
                    68:dc:fb:cb:61:27:98:14:c3:91:5b:33:01:18:05:
                    fd:b1:18:b7:f6:8d:07:86:45:a0:4f:ae:90:33:38:
                    ef:84:e9:b4:61:99:bd:35:23:6d:11:3e:30:60:b2:
                    35:43:49:0f:e7:d3:dc:c5:7f:0f:ca:94:c2:95:e0:
                    81:42:c9:93:34:2b:ff:bf:7a:c6:fb:42:e5:18:55:
                    44:42:5b:62:ea:c1:30:76:3e:3a:fc:c6:44:7f:91:
                    a6:cf:77:3a:a5:a6:1c:b6:5c:21:2d:e8:0c:e7:27:
                    6f:f2:d5:6c:59:9a:be:bf:63:4d:e7:5b:d3:8c:b3:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D3:B1:00:F5:13:69:91:A9:72:5B:9F:93:1D:CA:85:32:AD:F7:CA
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d4:c8:8f:e6:6d:45:ac:b0:cf:e5:d4:ca:54:c9:99:72:7d:
         9f:24:25:c3:a0:e5:59:c2:8e:1d:1d:37:92:46:58:ff:7f:25:
         5b:a6:a8:e4:1b:58:0c:fa:06:9e:63:c6:83:ed:7f:1f:32:74:
         36:d6:39:a2:dd:43:0f:ac:12:8b:53:ed:ef:18:c9:cd:0e:5a:
         e0:99:36:43:67:24:57:19:0e:8b:49:9d:12:12:60:e1:a5:09:
         88:33:a6:ae:ae:04:59:6d:0b:3a:51:21:5b:4c:c7:fa:0a:93:
         22:92:7e:53:0e:74:b0:4e:06:34:b2:94:ba:6e:06:da:12:05:
         bd:9b:62:68:8c:72:63:3d:b8:97:7a:10:47:c9:e6:6a:a5:02:
         23:4a:52:5c:42:41:e3:a9:0a:14:c1:27:98:49:26:ed:42:0c:
         f1:ec:47:f9:51:be:13:50:20:1c:8e:db:b2:49:f3:28:31:69:
         85:f2:20:1d:d0:2b:7d:c9:86:6b:1a:ce:de:ce:6f:00:12:bf:
         56:1f:a6:4b:9b:f0:fa:96:a7:56:37:f4:d5:97:5b:a5:ab:23:
         6c:c5:3d:11:d8:ec:ba:aa:18:06:37:48:56:4d:26:38:60:9e:
         d6:78:ec:ad:dc:31:5e:43:d5:1b:ed:24:05:53:59:73:9d:3f:
         0d:e9:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:27:44 2025 by rpki-client