This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e203534323836.roa
File:                     32332e3134372e3132302e302f32342d3234203d3e203534323836.roa (raw, json)
Hash identifier:          qkt/SkF5muEcBehoMEB9PbfkFObmvyyUy3hLcl8Xm/k=
Subject key identifier:   7E:FF:D3:99:10:E9:09:07:91:56:F3:A1:E3:8B:2B:8F:C6:6C:AC:39
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       2E25371EA0B25FE1CD9A73ED7739053350DF3DD9
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e203534323836.roa
Signing time:             Thu 04 Dec 2025 18:58:25 +0000
ROA not before:           Thu 04 Dec 2025 18:53:25 +0000
ROA not after:            Thu 03 Dec 2026 18:58:25 +0000
asID:                     54286
IP address blocks:        23.147.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 17:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:25:37:1e:a0:b2:5f:e1:cd:9a:73:ed:77:39:05:33:50:df:3d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: Dec  4 18:53:25 2025 GMT
            Not After : Dec  3 18:58:25 2026 GMT
        Subject: CN=7EFFD39910E909079156F3A1E38B2B8FC66CAC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:d6:09:f8:5d:36:11:14:f8:c9:7a:c4:10:
                    a9:67:5b:22:3c:a1:7f:18:f8:51:47:d3:b8:bc:8b:
                    9e:4b:97:1e:5c:51:33:c5:a9:2b:a8:99:35:f6:b9:
                    3c:60:67:40:6b:b8:6c:d1:6f:06:e2:e4:dd:39:ed:
                    c8:82:eb:a6:36:9e:16:65:94:4a:8e:1e:45:38:24:
                    1d:cf:5d:4c:e1:55:56:5e:9f:3d:f5:ed:9e:97:56:
                    46:0a:56:93:3f:6c:85:10:81:e8:e3:d3:a9:b9:42:
                    ec:d4:78:fc:a4:18:ad:d0:dd:f3:99:8b:67:ec:00:
                    b8:b6:7f:4e:a6:da:aa:4c:f0:2d:d7:f3:80:73:da:
                    18:a8:20:b5:12:6b:1f:8a:a5:7c:2f:a2:a6:59:a3:
                    d2:30:3c:64:ce:30:d3:3d:0b:70:16:64:8e:1b:77:
                    fd:d7:b4:f5:20:f2:ee:8c:5f:81:9c:f3:52:b1:17:
                    fb:77:2f:12:ae:61:6a:cd:5e:f7:04:86:29:2a:d0:
                    46:b3:4b:84:1f:fe:67:9b:dc:4b:73:ab:b8:eb:28:
                    2b:74:16:35:af:9e:89:63:43:e0:c4:43:49:e2:c3:
                    62:d7:c7:16:91:80:2c:17:d5:cd:31:6d:f9:d2:eb:
                    d6:da:64:44:86:85:81:5a:ea:70:09:60:7c:b8:d8:
                    25:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FF:D3:99:10:E9:09:07:91:56:F3:A1:E3:8B:2B:8F:C6:6C:AC:39
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e203534323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:48:ac:eb:4f:3d:46:6a:98:32:ca:ab:e2:c8:6d:fc:2e:
         ec:30:26:76:d2:b9:a0:9f:78:94:ef:cf:67:98:84:34:56:b8:
         70:e1:06:4e:56:34:f7:b4:b7:5f:8c:39:0f:51:02:33:b9:d6:
         9f:e5:22:22:75:35:01:5c:52:3c:8a:31:5f:d0:99:16:5e:7d:
         d2:2d:fb:93:d0:eb:23:d2:d7:f4:16:39:1c:21:ea:09:ed:1b:
         71:15:e4:a5:a4:1e:08:a2:2a:23:59:b4:9c:47:6b:d8:5e:02:
         fc:ea:0d:a0:ce:6f:9d:91:2a:40:1b:0f:94:4b:c0:8e:44:c3:
         d5:c6:2b:7a:3f:65:f9:4f:68:21:76:19:e6:5c:ba:d6:b7:c8:
         aa:a6:45:8e:3f:ca:4b:c3:32:7d:55:af:c2:ea:cc:bc:69:c4:
         2f:d6:a5:3c:02:6b:17:56:59:38:17:77:ab:d8:ef:ed:c1:ce:
         47:a2:c3:0f:fc:e3:53:3e:4f:05:a2:8d:a1:e3:9a:79:b4:09:
         0d:02:d8:7a:86:66:d8:80:3d:2b:57:81:9c:41:62:bb:87:0c:
         d0:4e:48:40:76:38:01:3f:e1:08:87:69:18:d9:0e:43:6d:44:
         23:1d:db:7f:d9:28:87:b2:98:64:a4:2e:09:35:11:62:16:39:
         c7:56:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:43:53 2025 by rpki-client