This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa
File:                     3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          lLElkFvQwd6Z0G1HC0nRMw5sX6uck2rrMQzWdCcT2jg=
Subject key identifier:   2A:6B:66:21:4F:21:04:0B:82:FC:18:B5:E8:15:13:96:FD:3D:B1:10
Certificate issuer:       /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Certificate serial:       4C8DB0C3828C42F39C29BB0F6252C8385030120C
Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa
Signing time:             Thu 13 Nov 2025 20:30:39 +0000
ROA not before:           Thu 13 Nov 2025 20:25:39 +0000
ROA not after:            Thu 12 Nov 2026 20:30:39 +0000
asID:                     396356
IP address blocks:        199.188.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8d:b0:c3:82:8c:42:f3:9c:29:bb:0f:62:52:c8:38:50:30:12:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
        Validity
            Not Before: Nov 13 20:25:39 2025 GMT
            Not After : Nov 12 20:30:39 2026 GMT
        Subject: CN=2A6B66214F21040B82FC18B5E8151396FD3DB110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:33:d6:7b:78:db:4f:79:61:62:73:de:53:
                    f0:7b:6d:09:c5:6d:55:b7:a2:c9:35:68:75:96:58:
                    a0:c6:60:ea:7f:ef:d2:6f:40:9d:87:89:43:e6:13:
                    1a:32:0f:0a:65:8c:13:5e:45:3a:18:94:9a:d5:ea:
                    dd:9b:e0:57:c0:05:1c:2a:ed:ca:7f:b3:2b:dc:3b:
                    2b:61:39:9d:de:69:9b:72:9b:63:51:0d:1e:e6:f3:
                    68:98:b8:b7:c9:a2:43:b8:d3:21:47:7c:c3:cf:34:
                    21:9a:9c:64:26:31:67:4f:cd:7c:c4:93:9b:54:88:
                    13:53:5d:2f:96:1e:6f:a1:e4:42:84:4d:41:1b:06:
                    99:cf:78:4c:be:93:55:69:ed:75:62:f2:7d:2e:e1:
                    eb:82:73:33:2d:24:b0:a4:73:79:0a:31:91:3d:0d:
                    73:8d:93:ff:cc:3e:74:d3:81:72:b8:e7:e5:a3:42:
                    f7:5c:85:e0:61:9d:59:fc:aa:c4:6d:42:b9:77:43:
                    b3:58:d6:c8:62:7a:94:fe:00:b1:93:c6:63:aa:87:
                    bd:6f:0f:89:51:18:f8:f0:e1:f8:fa:ec:dc:8c:ec:
                    d1:9d:45:89:3b:f5:63:7c:a1:c6:dc:a5:92:cf:f7:
                    91:15:94:9a:7d:f3:36:eb:48:ec:50:76:24:45:10:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6B:66:21:4F:21:04:0B:82:FC:18:B5:E8:15:13:96:FD:3D:B1:10
            X509v3 Authority Key Identifier:
                keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:50:3c:66:51:a3:43:b8:bf:d6:08:2e:0f:21:b5:bc:78:8c:
         dc:3c:7c:80:ba:7d:d4:c9:0e:fc:94:93:e9:79:d5:11:c8:13:
         2a:e8:38:c5:d2:8a:f2:a5:80:b0:23:8b:34:0b:21:54:ad:76:
         a7:44:15:94:d0:85:09:75:35:7f:b5:64:5b:73:35:79:c4:8f:
         46:6f:89:db:c1:1d:92:38:2b:cd:40:be:78:f3:0e:d0:e8:f2:
         43:ec:bb:59:9a:df:4e:f0:ea:fe:b3:2f:f0:2d:ad:07:b9:0f:
         8c:d2:eb:81:12:d7:70:26:80:65:ca:d0:3b:db:e1:40:ca:9b:
         a5:0c:f9:54:1e:cc:56:5d:68:11:f7:7b:48:98:9a:a9:f3:26:
         56:a5:b0:61:56:1f:3f:d7:d7:5e:06:bb:2d:09:06:b1:0a:09:
         b1:16:9a:e1:a9:5f:2d:15:c6:39:7d:ba:27:2c:7b:77:ab:28:
         3a:6b:9a:a6:58:fe:62:a4:18:40:15:33:43:c8:30:63:34:81:
         67:dc:44:3d:5c:2f:78:be:e9:6f:94:3f:27:69:fa:5b:8c:49:
         ad:56:bf:8c:ea:b2:ad:56:40:a4:4a:62:20:56:8f:5f:22:da:
         f1:e5:51:f2:c1:7a:b8:27:cc:ed:1a:95:6f:5f:36:a7:52:1f:
         2d:ab:f8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:38:48 2025 by rpki-client