This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa
File:                     3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa (raw, json)
Hash identifier:          AHRW5blq6or1lZiTurf+biHje3bwxw8gHPaYSscchAY=
Subject key identifier:   37:6C:62:EC:79:81:0C:C5:91:46:99:F6:B6:F3:E8:FC:FF:83:C6:D0
Certificate issuer:       /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial:       2437A3FE944C3DBEC3BC34F8F80C3ABB07933433
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa
Signing time:             Mon 15 Dec 2025 03:40:49 +0000
ROA not before:           Mon 15 Dec 2025 03:35:49 +0000
ROA not after:            Mon 14 Dec 2026 03:40:49 +0000
asID:                     149301
IP address blocks:        160.22.168.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 16:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:37:a3:fe:94:4c:3d:be:c3:bc:34:f8:f8:0c:3a:bb:07:93:34:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
        Validity
            Not Before: Dec 15 03:35:49 2025 GMT
            Not After : Dec 14 03:40:49 2026 GMT
        Subject: CN=376C62EC79810CC5914699F6B6F3E8FCFF83C6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:f4:8c:73:5d:e2:72:af:50:3f:aa:c5:f7:
                    a0:29:ba:4a:8b:d7:65:ea:6a:be:84:41:23:ac:32:
                    e2:91:3b:91:6d:c2:f4:19:0a:1f:6d:bc:b7:67:36:
                    68:f5:d5:7f:d0:4f:aa:20:07:b9:6c:da:2b:8b:91:
                    4d:12:0c:6f:9f:5c:14:a7:79:4c:d8:e2:82:27:8a:
                    96:ca:f9:6d:7b:c2:e0:41:4c:c0:4f:e0:09:c2:06:
                    d4:2f:3e:ce:e0:5b:73:62:8f:67:f8:2b:57:b0:bd:
                    b4:1a:99:28:31:4c:c9:de:c2:ea:35:3f:0b:bb:9e:
                    fd:b3:7d:96:f9:ff:1c:c4:f1:1b:68:c5:e7:f3:7d:
                    34:5e:bd:3c:8e:d3:17:81:83:34:66:17:0c:48:b0:
                    3d:6c:af:0a:9c:31:e5:ad:48:c1:f8:6c:20:6b:85:
                    7b:e3:65:84:04:bf:b3:e2:6a:f7:99:af:47:f7:1d:
                    86:13:aa:5d:13:80:bb:91:e2:01:2e:7a:88:16:1f:
                    81:d0:a9:d2:fb:0b:3f:9c:dd:05:9e:c9:70:38:2b:
                    c9:c1:b7:f7:15:26:aa:d4:e2:aa:38:b8:aa:83:77:
                    9c:ae:d0:40:ad:a1:1c:0b:38:3c:0f:da:a0:6c:22:
                    8d:38:ae:68:c1:0e:04:37:3d:06:f2:d7:1b:2d:32:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6C:62:EC:79:81:0C:C5:91:46:99:F6:B6:F3:E8:FC:FF:83:C6:D0
            X509v3 Authority Key Identifier:
                keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:17:b8:0f:81:c1:37:73:49:3e:8d:e8:ce:53:f2:b2:5b:c5:
         5b:6d:44:d8:15:d3:b4:cb:d3:44:17:91:9e:18:ed:d9:60:d8:
         18:09:42:89:3b:1c:f2:11:30:02:a4:5e:57:0b:f8:c9:95:b0:
         21:eb:ba:41:44:ce:a5:8b:b2:4d:21:3a:8b:de:1c:6a:01:86:
         32:9c:2f:7d:01:3c:d9:35:83:6c:cc:44:e9:ba:9e:c0:2b:98:
         fb:0d:99:14:7d:0e:34:49:16:e6:a4:5f:7e:3e:cf:76:d5:00:
         b0:5b:62:25:fd:2e:cd:e4:d3:09:1d:03:41:b2:6f:83:47:16:
         3c:56:ba:41:cb:72:fa:a8:22:6d:96:2e:4d:d5:c0:be:dc:0a:
         c9:77:8a:e6:92:b8:92:b3:74:2c:22:dd:ce:b3:51:00:0f:6d:
         ff:ea:b1:3c:47:45:d9:9f:87:09:c3:bd:ff:b6:a1:90:54:49:
         66:b5:c4:33:bf:69:15:28:b9:89:4d:4b:ff:d8:18:c4:8b:7a:
         18:79:df:0f:08:d5:7d:1d:a6:1b:a3:0e:10:5f:1e:bc:9c:64:
         db:e2:78:62:4e:56:a7:cd:8e:d5:cb:46:a1:6f:8d:91:f1:b5:
         88:12:d6:ce:a4:b5:cb:8f:d9:2d:00:7e:29:65:08:3a:35:3b:
         d8:66:df:d2
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUJDej/pRMPb7DvDT4+Aw6uweTNDMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEygyM0IxMDMwRjND
Q0FDOTk5RjJCNTc3NDVGQzlEREExQ0NERkEzNjMwMB4XDTI1MTIxNTAzMzU0OVoX
DTI2MTIxNDAzNDA0OVowMzExMC8GA1UEAxMoMzc2QzYyRUM3OTgxMENDNTkxNDY5
OUY2QjZGM0U4RkNGRjgzQzZEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJuz9IxzXeJyr1A/qsX3oCm6SovXZepqvoRBI6wy4pE7kW3C9BkKH228t2c2
aPXVf9BPqiAHuWzaK4uRTRIMb59cFKd5TNjigieKlsr5bXvC4EFMwE/gCcIG1C8+
zuBbc2KPZ/grV7C9tBqZKDFMyd7C6jU/C7ue/bN9lvn/HMTxG2jF5/N9NF69PI7T
F4GDNGYXDEiwPWyvCpwx5a1IwfhsIGuFe+NlhAS/s+Jq95mvR/cdhhOqXROAu5Hi
AS56iBYfgdCp0vsLP5zdBZ7JcDgrycG39xUmqtTiqji4qoN3nK7QQK2hHAs4PA/a
oGwijTiuaMEOBDc9BvLXGy0yrbcCAwEAAaOCAj4wggI6MB0GA1UdDgQWBBQ3bGLs
eYEMxZFGmfa28+j8/4PG0DAfBgNVHSMEGDAWgBQjsQMPPMrJmfK1d0X8ndoczfo2
MDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC81LzIzQjEwMzBGM0NDQUM5OTlGMkI1Nzc0NUZDOUREQTFDQ0RG
QTM2MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL0k3RUREenpLeVpueXRYZEZfSjNhSE0zNk5qQS5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC81LzMxMzYzMDJlMzIzMjJlMzEzNjM4MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIw
MzEzNDM5MzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBaoMA0GCSqGSIb3DQEBCwUAA4IBAQAq
F7gPgcE3c0k+jejOU/KyW8VbbUTYFdO0y9NEF5GeGO3ZYNgYCUKJOxzyETACpF5X
C/jJlbAh67pBRM6li7JNITqL3hxqAYYynC99ATzZNYNszETpup7AK5j7DZkUfQ40
SRbmpF9+Ps921QCwW2Il/S7N5NMJHQNBsm+DRxY8VrpBy3L6qCJtli5N1cC+3ArJ
d4rmkriSs3QsIt3Os1EAD23/6rE8R0XZn4cJw73/tqGQVElmtcQzv2kVKLmJTUv/
2BjEi3oYed8PCNV9HaYbow4QXx68nGTb4nhiTlanzY7Vy0ahb42R8bWIEtbOpLXL
j9ktAH4pZQg6NTvYZt/S
-----END CERTIFICATE-----
Generated at Mon Dec 15 17:13:21 2025 by rpki-client