This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa
File:                     AS3356.roa (raw, json)
Hash identifier:          eiHWYiFfwon7MpLBxvZnDm95FPjQLxV4ystmGR33DY8=
Subject key identifier:   AD:29:62:A5:16:D8:4B:D3:EB:A7:89:21:EC:C7:C4:38:3B:E0:FB:7F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       34AFE273B9AA482A372D85D526C94B2F7E2E826B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa
Signing time:             Tue 02 Dec 2025 14:30:49 +0000
ROA not before:           Tue 02 Dec 2025 14:25:49 +0000
ROA not after:            Tue 01 Dec 2026 14:30:49 +0000
asID:                     3356
IP address blocks:        157.254.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 15:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:af:e2:73:b9:aa:48:2a:37:2d:85:d5:26:c9:4b:2f:7e:2e:82:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec  2 14:25:49 2025 GMT
            Not After : Dec  1 14:30:49 2026 GMT
        Subject: CN=AD2962A516D84BD3EBA78921ECC7C4383BE0FB7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:c9:05:65:71:e7:33:2d:7f:38:6b:a2:88:
                    21:83:48:62:f5:15:a9:ad:ce:69:4d:0f:85:fd:b9:
                    86:08:30:6b:5c:49:ca:e2:b0:7d:7d:5a:4b:0a:85:
                    5e:db:e7:62:40:a2:30:b5:b2:e2:a1:26:ce:29:ed:
                    be:0b:d0:77:3e:5c:5f:4d:79:da:ce:75:e7:6a:5f:
                    f8:97:2c:0e:e1:92:da:ad:21:de:d0:27:c1:b8:d8:
                    16:97:41:ca:aa:22:7f:af:89:ca:c1:76:b6:79:b7:
                    26:8e:81:76:31:18:bf:67:7e:52:7b:f4:4e:c1:59:
                    c2:3c:5a:f1:2f:44:58:aa:69:77:77:e6:14:c2:c8:
                    f6:6b:b1:a4:bb:e0:70:e1:01:81:e1:13:3c:70:ce:
                    3a:ad:bd:63:41:ec:03:20:eb:40:fb:09:8d:45:ee:
                    84:f6:a1:c6:7a:5d:d1:66:8b:4c:b3:8f:78:7e:4f:
                    d4:c9:1b:24:de:4e:fc:b5:a9:64:f9:0d:f1:a6:3a:
                    64:b9:c1:86:5d:1b:19:87:7c:34:ba:7f:09:4c:32:
                    22:73:6a:e4:8c:20:6a:72:65:9e:f2:34:cb:63:62:
                    d2:86:ea:18:24:1c:9f:61:3d:7b:0b:c6:f4:7a:8c:
                    c7:22:ad:13:f5:0c:b4:97:18:ed:b3:dd:8b:c1:ac:
                    51:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:29:62:A5:16:D8:4B:D3:EB:A7:89:21:EC:C7:C4:38:3B:E0:FB:7F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:09:84:2a:27:fc:c4:c4:e2:27:bb:26:a2:b4:75:70:94:
         73:ec:54:ef:ce:b0:2b:9f:36:4b:68:43:9c:68:88:75:b2:76:
         cb:8a:fc:39:c6:fe:7a:36:53:52:0c:33:fc:61:fa:6e:57:35:
         2e:b4:6d:74:f4:5f:07:22:fd:53:a4:ba:70:76:22:6a:22:4c:
         69:08:ca:eb:71:e7:b7:4e:1e:28:82:48:32:6d:f6:24:f2:81:
         c3:65:24:d7:b1:3b:c4:94:83:c9:4b:25:e5:a6:42:41:f9:d9:
         22:a2:be:2d:74:d8:b3:07:a4:b5:12:ef:f3:e3:93:84:ea:aa:
         77:2d:5b:70:35:ab:c4:80:4f:bc:ef:ff:84:78:00:15:fa:67:
         a2:6a:07:e6:17:32:27:96:df:f8:6d:33:44:a1:15:9f:1d:df:
         52:c8:f2:08:4c:84:d3:b9:3c:80:35:9e:4b:54:60:f2:5e:7b:
         65:dc:15:d9:83:72:d4:dd:62:44:f4:22:63:a0:10:65:57:c4:
         df:0f:d2:6d:38:b7:4c:c0:b6:42:0e:51:52:de:1e:87:50:7e:
         29:af:6c:00:c2:37:94:b7:6b:51:35:c9:e2:6c:5e:92:d4:a1:
         69:53:0a:3f:eb:4c:ad:b9:dd:84:28:1d:0a:11:25:92:d4:ce:
         94:dd:d7:a4
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUNK/ic7mqSCo3LYXVJslLL34ugmswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMjAyMTQyNTQ5WhcNMjYxMjAxMTQzMDQ5
WjAzMTEwLwYDVQQDEyhBRDI5NjJBNTE2RDg0QkQzRUJBNzg5MjFFQ0M3QzQzODNC
RTBGQjdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApafJBWVx5zMt
fzhrooghg0hi9RWprc5pTQ+F/bmGCDBrXEnK4rB9fVpLCoVe2+diQKIwtbLioSbO
Ke2+C9B3PlxfTXnaznXnal/4lywO4ZLarSHe0CfBuNgWl0HKqiJ/r4nKwXa2ebcm
joF2MRi/Z35Se/ROwVnCPFrxL0RYqml3d+YUwsj2a7Gku+Bw4QGB4RM8cM46rb1j
QewDIOtA+wmNRe6E9qHGel3RZotMs494fk/UyRsk3k78talk+Q3xpjpkucGGXRsZ
h3w0un8JTDIic2rkjCBqcmWe8jTLY2LShuoYJByfYT17C8b0eozHIq0T9Qy0lxjt
s92LwaxREQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFK0pYqUW2EvT66eJIezHxDg7
4Pt/MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzMzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKd/oQwDQYJKoZIhvcNAQELBQADggEB
AHHiCYQqJ/zExOInuyaitHVwlHPsVO/OsCufNktoQ5xoiHWydsuK/DnG/no2U1IM
M/xh+m5XNS60bXT0Xwci/VOkunB2ImoiTGkIyutx57dOHiiCSDJt9iTygcNlJNex
O8SUg8lLJeWmQkH52SKivi102LMHpLUS7/Pjk4TqqnctW3A1q8SAT7zv/4R4ABX6
Z6JqB+YXMieW3/htM0ShFZ8d31LI8ghMhNO5PIA1nktUYPJee2XcFdmDctTdYkT0
ImOgEGVXxN8P0m04t0zAtkIOUVLeHodQfimvbADCN5S3a1E1yeJsXpLUoWlTCj/r
TK253YQoHQoRJZLUzpTd16Q=
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:25:55 2025 by rpki-client