This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3230353a3a2f34382d3438203d3e203534323836.roa
File:                     323630323a666161383a3230353a3a2f34382d3438203d3e203534323836.roa (raw, json)
Hash identifier:          SxcXKoBjlLpITKXtJo6eg7EYQC3N0xY7jTpbjmDm83g=
Subject key identifier:   3B:26:39:87:CA:5A:74:B8:2C:92:98:6E:D5:E7:F1:76:A8:74:F0:94
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       2893BC86925BAA07AFCE2CB9BD6CDCA5FCDEDA1F
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3230353a3a2f34382d3438203d3e203534323836.roa
Signing time:             Mon 22 Dec 2025 04:19:56 +0000
ROA not before:           Mon 22 Dec 2025 04:14:56 +0000
ROA not after:            Mon 21 Dec 2026 04:19:56 +0000
asID:                     54286
IP address blocks:        2602:faa8:205::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:93:bc:86:92:5b:aa:07:af:ce:2c:b9:bd:6c:dc:a5:fc:de:da:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: Dec 22 04:14:56 2025 GMT
            Not After : Dec 21 04:19:56 2026 GMT
        Subject: CN=3B263987CA5A74B82C92986ED5E7F176A874F094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:de:8f:60:7c:d2:d6:ce:9d:0b:78:9e:76:
                    e1:14:db:e0:9b:5a:3a:ed:5e:33:e3:dc:99:6d:94:
                    68:01:30:da:30:14:68:50:b9:e7:1e:76:1f:1d:83:
                    59:df:df:4c:b4:63:86:49:a5:91:3e:a1:84:31:0c:
                    2e:a9:fc:fc:75:cd:9f:5d:b4:5c:bd:50:ab:1e:42:
                    4b:2d:36:ce:6e:d4:96:a1:2e:34:d0:08:09:9f:d5:
                    76:50:ae:95:39:0a:26:19:6b:c6:7a:a4:e8:5a:27:
                    a6:bd:d4:03:9b:4f:11:cd:6d:d7:d1:6c:3b:bb:ce:
                    16:92:f7:1c:b4:91:ed:73:25:46:25:a1:03:d5:17:
                    75:36:c1:d9:7e:73:7c:ea:89:e8:40:71:bb:82:64:
                    c9:6f:3e:ec:c6:1a:3f:52:7e:29:ce:03:c8:6b:b1:
                    dc:34:5e:70:b4:29:56:70:88:25:46:75:7f:f9:33:
                    9d:5a:71:d6:5e:90:a2:33:be:c3:d0:33:72:a3:60:
                    d2:e3:55:1f:b6:d6:25:da:95:57:1f:99:56:a8:20:
                    0e:3a:ab:ee:cc:9d:a5:a3:40:7c:fc:b1:76:17:a9:
                    91:20:36:28:5c:56:6a:e9:43:69:97:d6:ad:91:f8:
                    96:ab:46:c7:d7:51:6b:b7:8d:83:8d:06:65:e7:bc:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:26:39:87:CA:5A:74:B8:2C:92:98:6E:D5:E7:F1:76:A8:74:F0:94
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3230353a3a2f34382d3438203d3e203534323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:205::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:4a:14:d0:46:df:cd:e2:49:aa:18:57:2b:24:d9:66:53:
         d0:29:8c:7f:a1:3a:f8:b2:fb:64:52:59:90:38:3f:de:45:3a:
         5b:9e:fc:4a:b5:81:4b:c4:25:4c:2c:00:df:22:29:da:ec:bd:
         55:cb:55:49:79:c8:97:54:a4:96:f6:a8:b7:71:c3:82:27:48:
         1f:cd:1e:f9:39:46:3d:95:a1:b5:a0:7c:78:01:e0:15:1b:35:
         cf:e9:7a:90:32:ed:b7:75:3a:9b:8d:e5:a4:5a:f1:cf:45:ef:
         db:fe:e9:75:de:75:b6:04:b9:61:66:13:cf:25:49:b4:d9:5a:
         97:a0:ef:9d:8d:f7:34:55:21:20:69:e5:33:fc:0a:bd:26:88:
         f2:53:3f:fb:e2:b5:2d:25:77:25:8d:37:6c:34:8e:6c:e4:f8:
         90:61:8d:18:86:f7:04:61:36:90:5e:ac:ba:9b:d0:80:9a:d9:
         00:bb:e7:56:08:f1:d5:9e:8b:03:88:23:d1:3f:f1:7f:98:f1:
         12:95:41:e5:5a:43:e6:d1:6d:3a:f7:c0:75:07:b4:17:58:34:
         67:b7:3e:15:0a:11:1c:fe:18:51:e6:d7:8f:90:52:3e:a3:a9:
         92:c4:b3:3f:8c:c2:5c:78:51:a2:a0:90:7a:09:9b:13:1b:10:
         d9:94:cc:da
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUKJO8hpJbqgevziy5vWzcpfze2h8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjA2YzRlMDBiYTM0OGVjY2RjOTRiZDRl
NzUxY2MzN2FkZmY2YjdkNDQwHhcNMjUxMjIyMDQxNDU2WhcNMjYxMjIxMDQxOTU2
WjAzMTEwLwYDVQQDEygzQjI2Mzk4N0NBNUE3NEI4MkM5Mjk4NkVENUU3RjE3NkE4
NzRGMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuALej2B80tbO
nQt4nnbhFNvgm1o67V4z49yZbZRoATDaMBRoULnnHnYfHYNZ399MtGOGSaWRPqGE
MQwuqfz8dc2fXbRcvVCrHkJLLTbObtSWoS400AgJn9V2UK6VOQomGWvGeqToWiem
vdQDm08RzW3X0Ww7u84WkvcctJHtcyVGJaED1Rd1NsHZfnN86onoQHG7gmTJbz7s
xho/Un4pzgPIa7HcNF5wtClWcIglRnV/+TOdWnHWXpCiM77D0DNyo2DS41UfttYl
2pVXH5lWqCAOOqvuzJ2lo0B8/LF2F6mRIDYoXFZq6UNpl9atkfiWq0bH11Frt42D
jQZl57xUMwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFDsmOYfKWnS4LJKYbtXn8Xao
dPCUMB8GA1UdIwQYMBaAFKNNW+y4AcKoWphbvD+edOQHepVHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODcyODk4ODgwMTg3NjAyYTUwYTAzOTEwLzAv
QTM0RDVCRUNCODAxQzJBODVBOTg1QkJDM0Y5RTc0RTQwNzdBOTU0Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzcwZjVkODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBjNGIwYS8yYTVh
Zjc0ZGJiMDZjNGUwMGJhMzQ4ZWNjZGM5NGJkNGU3NTFjYzM3YWRmZjZiN2Q0NC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg3Mjg5ODg4MDE4NzYw
MmE1MGEwMzkxMC8wLzMyMzYzMDMyM2E2NjYxNjEzODNhMzIzMDM1M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzUzNDMyMzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+qgCBTANBgkq
hkiG9w0BAQsFAAOCAQEAh21KFNBG383iSaoYVysk2WZT0CmMf6E6+LL7ZFJZkDg/
3kU6W578SrWBS8QlTCwA3yIp2uy9VctVSXnIl1Sklvaot3HDgidIH80e+TlGPZWh
taB8eAHgFRs1z+l6kDLtt3U6m43lpFrxz0Xv2/7pdd51tgS5YWYTzyVJtNlal6Dv
nY33NFUhIGnlM/wKvSaI8lM/++K1LSV3JY03bDSObOT4kGGNGIb3BGE2kF6supvQ
gJrZALvnVgjx1Z6LA4gj0T/xf5jxEpVB5VpD5tFtOvfAdQe0F1g0Z7c+FQoRHP4Y
UebXj5BSPqOpksSzP4zCXHhRoqCQegmbExsQ2ZTM2g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:28:10 2026 by rpki-client