This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa
File:                     323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (raw, json)
Hash identifier:          ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=
Subject key identifier:   A9:C5:57:99:EF:81:1E:B9:65:C5:DA:FC:28:39:6B:82:EE:DC:5E:35
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       1C156079CDA84E6929A8D44483F9272F165EDDE8
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa
Signing time:             Mon 15 Dec 2025 06:03:48 +0000
ROA not before:           Mon 15 Dec 2025 05:58:48 +0000
ROA not after:            Mon 14 Dec 2026 06:03:48 +0000
asID:                     149301
IP address blocks:        2001:df3:efc0::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 16:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:15:60:79:cd:a8:4e:69:29:a8:d4:44:83:f9:27:2f:16:5e:dd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Dec 15 05:58:48 2025 GMT
            Not After : Dec 14 06:03:48 2026 GMT
        Subject: CN=A9C55799EF811EB965C5DAFC28396B82EEDC5E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:ca:56:ee:1e:d0:e5:a0:b5:9e:db:1d:3d:
                    4f:3a:fc:ca:40:88:9a:bc:b4:30:89:81:d1:53:37:
                    64:b9:8a:ab:c3:db:78:37:47:1d:f4:3c:d0:4f:66:
                    bf:d8:8b:d4:50:d1:1e:34:68:14:33:a1:de:38:08:
                    59:3a:a1:b8:dd:48:e5:51:68:dc:0b:6f:63:65:1d:
                    09:57:93:a3:fd:aa:09:97:0e:a0:c6:81:63:c1:1c:
                    c1:32:79:ad:c9:55:bf:f8:82:6a:35:25:bb:3f:91:
                    6a:51:bd:91:5a:df:42:0e:54:b6:2b:ff:03:93:f5:
                    db:b0:5e:ef:60:ef:f1:bf:11:aa:51:34:5c:6c:62:
                    8e:80:a8:7e:96:f8:da:ee:81:a0:d3:5c:e3:85:86:
                    69:40:e3:71:06:96:6f:5a:a8:c8:c4:7a:cb:02:39:
                    3c:67:fd:c3:20:8a:13:1c:21:be:fb:7b:84:bc:e5:
                    c5:8a:27:23:4c:04:9b:40:67:f1:95:d2:97:be:92:
                    3a:2a:49:44:b8:1f:c0:11:17:4f:be:2b:65:e3:8f:
                    ae:12:e6:33:e7:db:55:42:10:a5:9e:b2:83:d1:d1:
                    e3:ba:8e:ee:3d:30:6e:ea:7e:9d:46:3d:a2:79:0b:
                    fb:b2:de:8f:e7:e9:90:20:9e:92:2b:ce:19:90:b4:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C5:57:99:EF:81:1E:B9:65:C5:DA:FC:28:39:6B:82:EE:DC:5E:35
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:efc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:e0:a5:4c:02:0f:ef:f4:f5:d9:28:74:ce:50:2f:ef:24:
         95:a3:b3:92:98:4f:1e:f8:16:12:b9:41:26:90:55:3b:fb:95:
         f7:62:ca:48:a4:94:c9:de:e0:38:2f:68:2c:7b:b2:65:a0:55:
         fd:23:21:0e:04:d3:2f:e1:75:dd:9c:e5:c2:15:43:14:e2:28:
         80:29:8c:c5:fb:43:be:78:88:22:ff:e4:b3:73:68:4d:b1:c8:
         e8:0e:99:aa:b6:61:82:24:6d:a8:91:0d:ba:67:a3:36:1b:dc:
         43:8d:58:6b:0f:a3:63:2c:95:ed:05:e7:e6:63:c4:bc:73:3f:
         b5:71:02:b1:9d:72:04:1b:2e:03:2c:40:83:ca:4d:a9:26:ae:
         fe:bd:45:0a:d7:16:69:7e:c5:11:a7:57:bb:91:f5:9d:43:71:
         fd:20:86:2d:68:8f:b9:a6:2a:68:52:6b:16:04:29:76:4a:47:
         f7:d7:7e:9c:49:8e:8e:54:8b:3b:3a:63:8e:a1:84:04:82:0d:
         fa:ff:f1:96:27:e7:b7:27:e7:d0:dd:eb:f4:9f:92:09:ea:e0:
         ce:b0:75:c7:60:c1:72:1d:d6:d0:39:cc:ae:ea:bc:eb:4d:4f:
         05:d5:06:8a:d0:ce:b8:23:c1:ce:55:90:02:78:62:70:5a:65:
         c7:34:2b:20
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUHBVgec2oTmkpqNREg/knLxZe3egwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyg2RkNCQkQwNDI1
MDkyNjYzMzM0RkExQUE5QTAyMjkyQ0I4NDE2RjUxMB4XDTI1MTIxNTA1NTg0OFoX
DTI2MTIxNDA2MDM0OFowMzExMC8GA1UEAxMoQTlDNTU3OTlFRjgxMUVCOTY1QzVE
QUZDMjgzOTZCODJFRURDNUUzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJY3ylbuHtDloLWe2x09Tzr8ykCImry0MImB0VM3ZLmKq8PbeDdHHfQ80E9m
v9iL1FDRHjRoFDOh3jgIWTqhuN1I5VFo3AtvY2UdCVeTo/2qCZcOoMaBY8EcwTJ5
rclVv/iCajUluz+RalG9kVrfQg5Utiv/A5P127Be72Dv8b8RqlE0XGxijoCofpb4
2u6BoNNc44WGaUDjcQaWb1qoyMR6ywI5PGf9wyCKExwhvvt7hLzlxYonI0wEm0Bn
8ZXSl76SOipJRLgfwBEXT74rZeOPrhLmM+fbVUIQpZ6yg9HR47qO7j0wbup+nUY9
onkL+7Lej+fpkCCekivOGZC0+ckCAwEAAaOCAkkwggJFMB0GA1UdDgQWBBSpxVeZ
74EeuWXF2vwoOWuC7txeNTAfBgNVHSMEGDAWgBRvy70EJQkmYzNPoaqaAiksuEFv
UTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC82LzZGQ0JCRDA0MjUwOTI2NjMzMzRGQTFBQTlBMDIyOTJDQjg0
MTZGNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2I4dTlCQ1VKSm1NelQ2R3FtZ0lwTExoQmIxRS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC82LzMyMzAzMDMxM2E2NDY2MzMzYTY1NjY2MzMwM2EzYTJmMzQzODJkMzEzMjM4
MjAzZDNlMjAzMTM0MzkzMzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3z78AwDQYJKoZIhvcN
AQELBQADggEBADL04KVMAg/v9PXZKHTOUC/vJJWjs5KYTx74FhK5QSaQVTv7lfdi
ykiklMne4DgvaCx7smWgVf0jIQ4E0y/hdd2c5cIVQxTiKIApjMX7Q754iCL/5LNz
aE2xyOgOmaq2YYIkbaiRDbpnozYb3EONWGsPo2Msle0F5+ZjxLxzP7VxArGdcgQb
LgMsQIPKTakmrv69RQrXFml+xRGnV7uR9Z1Dcf0ghi1oj7mmKmhSaxYEKXZKR/fX
fpxJjo5Uizs6Y46hhASCDfr/8ZYn57cn59Dd6/Sfkgnq4M6wdcdgwXId1tA5zK7q
vOtNTwXVBorQzrgjwc5VkAJ4YnBaZcc0KyA=
-----END CERTIFICATE-----
Generated at Mon Dec 15 17:13:35 2025 by rpki-client