This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          m4dd/4k1tPdBu9nv26eEI840DS1HmI46QEkwWDY0oyU=
Subject key identifier:   C4:0A:5A:81:EA:EE:77:DA:32:5C:30:80:CB:4E:91:E8:3F:E1:D4:FE
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4F40B2873648BA9DD5328356296EED7AE078D13C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Fri 05 Dec 2025 13:12:48 +0000
ROA not before:           Fri 05 Dec 2025 13:07:48 +0000
ROA not after:            Fri 04 Dec 2026 13:12:48 +0000
asID:                     834
IP address blocks:        157.254.9.0/24 maxlen: 24
                          157.254.16.0/24 maxlen: 24
                          157.254.49.0/24 maxlen: 24
                          157.254.51.0/24 maxlen: 24
                          157.254.140.0/24 maxlen: 24
                          157.254.144.0/21 maxlen: 24
                          157.254.155.0/24 maxlen: 24
                          157.254.166.0/24 maxlen: 24
                          157.254.175.0/24 maxlen: 24
                          157.254.209.0/24 maxlen: 24
                          157.254.211.0/24 maxlen: 24
                          157.254.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:40:b2:87:36:48:ba:9d:d5:32:83:56:29:6e:ed:7a:e0:78:d1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec  5 13:07:48 2025 GMT
            Not After : Dec  4 13:12:48 2026 GMT
        Subject: CN=C40A5A81EAEE77DA325C3080CB4E91E83FE1D4FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:bf:ec:37:89:d2:d7:8f:a8:d9:a9:f7:ca:
                    42:4a:2d:81:8c:c9:c7:3a:eb:b0:d7:24:55:e0:be:
                    56:66:79:4d:4c:98:bb:de:d6:f4:6d:bb:f7:de:11:
                    62:7d:98:a3:40:28:07:95:af:79:7f:8b:ca:25:f7:
                    5c:23:69:d0:ab:50:dc:43:1a:09:b3:e5:95:ef:65:
                    b0:c7:66:cf:2d:e1:64:c3:79:c7:49:12:79:2a:7b:
                    b8:ce:ea:b9:68:da:6a:c5:d5:37:bb:19:8f:c5:f8:
                    d7:f9:60:a0:5c:25:d4:bd:38:5f:fa:aa:6e:a4:ff:
                    11:ce:bd:5a:07:e0:86:fe:e3:2a:19:c1:38:aa:8a:
                    2a:61:86:da:be:71:d0:70:04:4a:91:57:4a:1e:fa:
                    14:69:3b:1b:11:37:18:0f:aa:91:17:03:8f:01:44:
                    85:53:62:b3:6b:ee:b8:0a:6d:5a:67:d0:6b:f3:bb:
                    6a:dc:7c:36:e3:57:bc:b5:6a:0b:76:13:9e:e8:77:
                    eb:38:5c:4b:fd:d8:25:41:1a:57:5b:1c:8e:0f:b3:
                    8a:9a:19:8a:f5:cc:8a:ce:ef:26:98:9b:ce:d3:be:
                    d3:a7:bf:67:42:1f:23:65:05:f1:bc:fd:2a:40:a2:
                    cb:f8:86:50:03:01:9c:92:65:7c:39:b9:a0:94:88:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0A:5A:81:EA:EE:77:DA:32:5C:30:80:CB:4E:91:E8:3F:E1:D4:FE
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.9.0/24
                  157.254.16.0/24
                  157.254.49.0/24
                  157.254.51.0/24
                  157.254.140.0/24
                  157.254.144.0/21
                  157.254.155.0/24
                  157.254.166.0/24
                  157.254.175.0/24
                  157.254.209.0/24
                  157.254.211.0/24
                  157.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:06:70:03:41:0c:cf:12:d5:1d:2e:71:97:20:93:9c:b2:e2:
         3e:2d:d7:eb:dd:4b:a9:d9:23:0e:0f:4b:32:a7:90:99:76:ec:
         69:73:13:dc:d2:f9:0a:38:52:b0:69:8b:4e:f2:46:57:62:cb:
         b3:09:76:69:09:35:dc:c5:fe:d0:de:92:75:15:22:76:1e:08:
         f2:a8:df:c2:d2:3d:0f:90:46:56:7f:ce:05:a5:e6:59:96:a6:
         1e:10:da:a2:80:ac:ff:9e:6c:cd:da:80:fe:54:73:d3:23:06:
         d4:9b:b3:b3:d1:df:e1:42:38:e5:64:d3:d3:83:c1:2e:1a:0a:
         98:d2:9a:2a:66:c0:32:d3:eb:70:09:2a:b7:12:16:34:69:51:
         11:84:05:e1:63:9a:b3:f2:be:6c:85:32:69:4d:b8:1d:dd:2f:
         fd:bb:e9:47:8b:53:9f:1e:31:d0:51:1f:e1:be:f5:45:c0:80:
         d3:e4:20:23:69:48:fd:ae:ad:a1:ff:6e:9f:fb:a2:a3:10:5f:
         f7:f2:3f:7b:c6:28:f3:c9:5b:6d:f5:c8:ef:d2:8a:c2:09:61:
         94:a7:01:31:58:e0:4d:27:d6:ce:93:f6:1a:cb:9f:c4:7d:08:
         0f:da:7d:e6:7b:7a:e6:47:ae:9c:55:43:da:a0:e5:5c:a8:c0:
         4a:c7:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:08:47 2025 by rpki-client