This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/32332e3134382e3135362e302f32342d3234203d3e203133333137.roa
File:                     32332e3134382e3135362e302f32342d3234203d3e203133333137.roa (raw, json)
Hash identifier:          CBu21fpSB2POCoyJqAEbvso/BZD3oMVDt5utldBHWtw=
Subject key identifier:   4D:36:00:FD:60:AD:40:79:19:E2:C2:EF:84:9F:63:69:55:AB:14:A0
Certificate issuer:       /CN=ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd
Certificate serial:       6F9C8F60B90EAF0B2263EE1D3B541C0FE98A304B
Authority key identifier: C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/32332e3134382e3135362e302f32342d3234203d3e203133333137.roa
Signing time:             Thu 04 Dec 2025 17:59:18 +0000
ROA not before:           Thu 04 Dec 2025 17:54:18 +0000
ROA not after:            Thu 03 Dec 2026 17:59:18 +0000
asID:                     13317
IP address blocks:        23.148.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9c:8f:60:b9:0e:af:0b:22:63:ee:1d:3b:54:1c:0f:e9:8a:30:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd
        Validity
            Not Before: Dec  4 17:54:18 2025 GMT
            Not After : Dec  3 17:59:18 2026 GMT
        Subject: CN=4D3600FD60AD407919E2C2EF849F636955AB14A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:ad:e0:3f:de:76:64:c2:ae:dc:d3:b6:d4:
                    fe:b7:ea:40:f9:4a:b5:18:46:48:2d:9c:20:d5:f1:
                    b6:31:41:56:e8:64:3c:ff:8b:cc:42:5a:eb:a0:fb:
                    b9:fa:e9:f5:58:35:e9:a3:aa:ad:a5:76:9f:2e:3f:
                    c0:d3:f3:3a:76:fc:09:0e:c1:d0:1c:13:8b:27:6e:
                    ee:19:d7:92:7b:f9:9e:49:a7:e1:f4:43:4b:0f:b1:
                    2d:f7:db:28:f1:ad:00:1e:f8:85:5a:ac:3b:34:09:
                    42:e7:4e:c6:08:17:f9:e3:65:1e:85:87:e1:81:f5:
                    44:9d:32:a5:b7:48:06:9f:26:87:3e:b1:a0:a4:92:
                    66:1f:43:a3:14:ea:e3:31:a4:85:3b:1e:db:8f:54:
                    97:71:60:fb:75:da:b2:67:8d:4f:9d:90:2b:ec:0b:
                    a1:c7:bd:97:85:c8:a9:26:82:43:88:9f:1f:2b:03:
                    f4:cd:b6:ae:c6:09:02:f9:47:c8:d7:83:34:8e:8b:
                    95:5b:02:49:e9:5c:73:2e:77:27:44:0d:b7:9e:4c:
                    5e:88:a0:75:a5:1e:07:a9:09:10:7b:c2:00:f3:47:
                    de:87:2b:c9:87:d2:89:db:33:51:24:ff:8f:4a:d6:
                    5b:d1:28:a7:58:95:b5:f3:97:73:7e:a1:4a:89:27:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:36:00:FD:60:AD:40:79:19:E2:C2:EF:84:9F:63:69:55:AB:14:A0
            X509v3 Authority Key Identifier:
                keyid:C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/32332e3134382e3135362e302f32342d3234203d3e203133333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:e2:67:8c:86:62:05:28:b7:ad:f7:ec:9e:08:c4:d8:64:
         38:c7:a1:d7:42:09:ba:4f:ab:07:97:34:9a:0c:74:45:a2:8e:
         41:7c:b8:43:bc:fd:2c:46:b0:28:47:a0:b3:75:83:27:55:31:
         11:f6:b3:bb:d4:08:a3:5e:ff:15:de:bd:cf:fc:c4:30:a6:a2:
         0c:85:40:e2:76:6e:67:01:bc:3c:b0:e4:f9:aa:e1:f9:e7:3c:
         e7:b4:9b:94:a1:c9:6b:cf:8f:e1:16:43:b3:f3:da:01:8f:f8:
         d8:1d:fb:48:85:f4:c4:1c:ff:25:c0:8a:3d:cd:4a:1c:ef:33:
         52:78:fd:cc:9e:7c:76:b0:2e:ac:2f:70:c8:2d:01:14:6c:66:
         b3:ee:45:32:34:04:49:ed:1d:b6:25:35:f9:0b:55:ac:6e:30:
         01:4b:80:17:9c:e7:0b:c8:62:34:cd:99:fa:74:0a:87:7a:13:
         ce:7e:be:b2:99:cd:2b:26:64:fe:2a:af:78:fd:b2:04:21:91:
         de:71:1d:e9:41:a8:5a:01:6c:33:e9:d7:c0:c7:56:53:9e:ca:
         e5:7c:61:6f:cf:65:81:86:a4:97:ed:1a:6c:c6:45:95:d4:34:
         bf:39:be:b3:96:57:85:72:44:b2:c5:be:23:97:f6:4c:c9:6e:
         dd:79:17:34
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUb5yPYLkOrwsiY+4dO1QcD+mKMEswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGRjMjg4Nzc2ODY4MDdkY2MzNGEwYWU1NzQzZDMwZmFk
M2FkZmFjOGIwNTVlNmQyZGQwHhcNMjUxMjA0MTc1NDE4WhcNMjYxMjAzMTc1OTE4
WjAzMTEwLwYDVQQDEyg0RDM2MDBGRDYwQUQ0MDc5MTlFMkMyRUY4NDlGNjM2OTU1
QUIxNEEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqat4D/edmTC
rtzTttT+t+pA+Uq1GEZILZwg1fG2MUFW6GQ8/4vMQlrroPu5+un1WDXpo6qtpXaf
Lj/A0/M6dvwJDsHQHBOLJ27uGdeSe/meSafh9ENLD7Et99so8a0AHviFWqw7NAlC
507GCBf542UehYfhgfVEnTKlt0gGnyaHPrGgpJJmH0OjFOrjMaSFOx7bj1SXcWD7
ddqyZ41PnZAr7Auhx72XhcipJoJDiJ8fKwP0zbauxgkC+UfI14M0jouVWwJJ6Vxz
LncnRA23nkxeiKB1pR4HqQkQe8IA80fehyvJh9KJ2zNRJP+PStZb0SinWJW185dz
fqFKiSdNcwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFE02AP1grUB5GeLC74SfY2lV
qxSgMB8GA1UdIwQYMBaAFMmhEvlK/F6JAM3YuedQjpaoZfkNMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODcyODk4ODgwMTg3NjAyYTUwYTAzOTEwLzEv
QzlBMTEyRjk0QUZDNUU4OTAwQ0REOEI5RTc1MDhFOTZBODY1RjkwRC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyLzI2ZDE0ODFlLTQ4MjUtNDNkNy05ZDY4LTQ0MGU4NWU5MmVlZC9kZGMy
ODg3NzY4NjgwN2RjYzM0YTBhZTU3NDNkMzBmYWQzYWRmYWM4YjA1NWU2ZDJkZC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg3Mjg5ODg4MDE4NzYw
MmE1MGEwMzkxMC8xLzMyMzMyZTMxMzQzODJlMzEzNTM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMzMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeUnDANBgkqhkiG9w0BAQsF
AAOCAQEAWzDiZ4yGYgUot6337J4IxNhkOMeh10IJuk+rB5c0mgx0RaKOQXy4Q7z9
LEawKEegs3WDJ1UxEfazu9QIo17/Fd69z/zEMKaiDIVA4nZuZwG8PLDk+arh+ec8
57SblKHJa8+P4RZDs/PaAY/42B37SIX0xBz/JcCKPc1KHO8zUnj9zJ58drAurC9w
yC0BFGxms+5FMjQESe0dtiU1+QtVrG4wAUuAF5znC8hiNM2Z+nQKh3oTzn6+spnN
KyZk/iqveP2yBCGR3nEd6UGoWgFsM+nXwMdWU57K5Xxhb89lgYakl+0abMZFldQ0
vzm+s5ZXhXJEssW+I5f2TMlu3XkXNA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:12:09 2025 by rpki-client