This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa
File:                     AS136258.roa (raw, json)
Hash identifier:          pudlEEGCR0yNPGRa00VMazuS+w+3/+LMBIoQ0oQj0xU=
Subject key identifier:   C8:39:C6:BD:30:96:4F:D4:98:67:F7:C0:F9:15:4B:6C:82:21:A4:ED
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       68CCCCECC9A3A075AA40EB52387C498C3DCB890F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa
Signing time:             Fri 16 Jan 2026 13:20:29 +0000
ROA not before:           Fri 16 Jan 2026 13:15:29 +0000
ROA not after:            Fri 15 Jan 2027 13:20:29 +0000
asID:                     136258
IP address blocks:        23.95.72.0/22 maxlen: 24
                          23.95.76.0/23 maxlen: 24
                          23.95.79.0/24 maxlen: 24
                          96.44.152.0/24 maxlen: 24
                          104.168.10.0/24 maxlen: 24
                          107.174.114.0/24 maxlen: 24
                          107.175.82.0/24 maxlen: 24
                          155.94.134.0/24 maxlen: 24
                          155.94.135.0/24 maxlen: 24
                          155.94.136.0/24 maxlen: 24
                          155.94.137.0/24 maxlen: 24
                          172.245.232.0/21 maxlen: 24
                          204.44.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cc:cc:ec:c9:a3:a0:75:aa:40:eb:52:38:7c:49:8c:3d:cb:89:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan 16 13:15:29 2026 GMT
            Not After : Jan 15 13:20:29 2027 GMT
        Subject: CN=C839C6BD30964FD49867F7C0F9154B6C8221A4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:7a:01:e4:1a:ce:2e:90:e6:12:bb:1d:58:
                    68:02:50:fb:f4:f4:44:55:52:92:db:e2:8c:ad:e6:
                    62:e1:aa:ef:a1:4c:e3:a1:ec:ec:10:a3:e5:f0:f4:
                    97:f8:4e:19:07:08:d1:f4:b1:71:e8:29:0d:7f:c6:
                    16:12:a1:b3:15:e6:b8:11:dd:b1:fa:38:67:70:d3:
                    dd:74:96:f5:14:0f:df:d8:8c:b2:0f:4a:c2:a0:47:
                    35:0c:1e:c6:e8:77:9a:1d:82:3b:f6:7c:1a:30:75:
                    6b:63:36:a1:a0:dc:7a:74:20:64:13:16:6a:26:cc:
                    82:47:4f:1b:1c:60:c1:6b:5f:d0:7e:32:e8:cf:0d:
                    8f:da:ea:1d:d3:3d:37:d5:7d:53:71:c0:b8:d3:fc:
                    1c:65:68:4e:84:ca:1e:27:68:e7:db:95:f0:c9:c4:
                    d2:e9:36:89:19:81:fd:d7:44:49:c7:de:1d:2f:d1:
                    fd:09:94:08:33:07:28:4c:6d:f9:ad:5e:c5:88:d3:
                    ac:65:a2:ec:10:03:4e:0e:cf:5b:0a:9b:51:38:15:
                    34:1e:99:9b:14:65:f8:a8:dd:7a:ba:87:28:5d:e5:
                    59:f0:43:14:43:4f:cd:51:79:af:30:16:1d:70:92:
                    c9:a1:4f:2d:6c:1e:85:79:84:28:72:68:33:8b:22:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:39:C6:BD:30:96:4F:D4:98:67:F7:C0:F9:15:4B:6C:82:21:A4:ED
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.72.0-23.95.77.255
                  23.95.79.0/24
                  96.44.152.0/24
                  104.168.10.0/24
                  107.174.114.0/24
                  107.175.82.0/24
                  155.94.134.0-155.94.137.255
                  172.245.232.0/21
                  204.44.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:ad:7e:6f:2f:d3:56:2f:50:f7:be:99:00:d9:78:c2:82:3e:
         55:b8:33:0a:da:91:ce:66:da:01:70:80:ed:ee:09:65:87:11:
         2c:05:1f:9b:55:2f:ee:e7:86:4f:12:d8:b8:cc:68:77:4b:e4:
         73:41:54:59:08:c5:b1:86:bf:62:e4:73:66:58:67:5d:d8:4d:
         88:69:23:3d:38:0b:b6:84:7c:0b:e7:ea:16:39:68:4c:83:f5:
         e2:b8:39:a7:7a:ae:fa:6f:36:83:e1:ff:b1:03:af:3e:2f:01:
         b1:66:04:81:87:31:76:00:ac:2d:e0:ec:e7:d1:d7:1b:cd:63:
         18:87:fe:c6:1c:d8:58:b9:6d:fc:d1:d8:13:07:e5:95:eb:4d:
         bb:02:b1:6b:d6:92:e4:e1:02:85:3e:fd:96:43:c8:ce:2f:92:
         05:41:e6:a6:50:c5:49:45:88:8c:bb:dc:e8:08:a2:48:26:b2:
         26:19:64:09:0a:b3:18:a2:9b:09:5d:d3:c9:65:2f:07:4d:35:
         ce:b7:82:85:f4:ea:59:76:12:9b:61:4f:84:94:fe:38:a6:3d:
         e7:64:84:65:d1:cc:5d:34:92:15:66:8b:06:2d:24:10:55:48:
         fc:18:30:e1:7b:da:7b:7f:04:6a:8b:ca:0c:88:56:3b:c4:0f:
         a5:37:bd:74
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUaMzM7MmjoHWqQOtSOHxJjD3LiQ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwMTE2MTMxNTI5WhcNMjcwMTE1MTMyMDI5
WjAzMTEwLwYDVQQDEyhDODM5QzZCRDMwOTY0RkQ0OTg2N0Y3QzBGOTE1NEI2Qzgy
MjFBNEVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TN6AeQazi6Q
5hK7HVhoAlD79PREVVKS2+KMreZi4arvoUzjoezsEKPl8PSX+E4ZBwjR9LFx6CkN
f8YWEqGzFea4Ed2x+jhncNPddJb1FA/f2IyyD0rCoEc1DB7G6HeaHYI79nwaMHVr
YzahoNx6dCBkExZqJsyCR08bHGDBa1/QfjLozw2P2uod0z031X1TccC40/wcZWhO
hMoeJ2jn25XwycTS6TaJGYH910RJx94dL9H9CZQIMwcoTG35rV7FiNOsZaLsEANO
Ds9bCptROBU0HpmbFGX4qN16uocoXeVZ8EMUQ0/NUXmvMBYdcJLJoU8tbB6FeYQo
cmgziyJ20wIDAQABo4ICvzCCArswHQYDVR0OBBYEFMg5xr0wlk/UmGf3wPkVS2yC
IaTtMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzEzNjI1OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBf
BggrBgEFBQcBBwEB/wRQME4wTAQCAAEwRjAMAwQDF19IAwQBF19MAwQAF19PAwQA
YCyYAwQAaKgKAwQAa65yAwQAa69SMAwDBAGbXoYDBAGbXogDBAOs9egDBADMLHcw
DQYJKoZIhvcNAQELBQADggEBAMitfm8v01YvUPe+mQDZeMKCPlW4Mwrakc5m2gFw
gO3uCWWHESwFH5tVL+7nhk8S2LjMaHdL5HNBVFkIxbGGv2Lkc2ZYZ13YTYhpIz04
C7aEfAvn6hY5aEyD9eK4Oad6rvpvNoPh/7EDrz4vAbFmBIGHMXYArC3g7OfR1xvN
YxiH/sYc2Fi5bfzR2BMH5ZXrTbsCsWvWkuThAoU+/ZZDyM4vkgVB5qZQxUlFiIy7
3OgIokgmsiYZZAkKsxiimwld08llLwdNNc63goX06ll2EpthT4SU/jimPedkhGXR
zF00khVmiwYtJBBVSPwYMOF72nt/BGqLygyIVjvED6U3vXQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:53:05 2026 by rpki-client