This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136322e302f32342d3234203d3e203236303432.roa
File:                     3230392e38372e3136322e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier:          55oxjj0xvG+f5aEb3x8USYTM1MsSwzrhQqV7MX4X5vI=
Subject key identifier:   A4:1C:F9:C5:99:CA:DC:4F:9C:6B:9C:8A:7C:3A:59:61:E2:AA:39:AD
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       10927368E2D43CDCB0E6E58629EC4281D637C1F5
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136322e302f32342d3234203d3e203236303432.roa
Signing time:             Tue 30 Dec 2025 11:58:33 +0000
ROA not before:           Tue 30 Dec 2025 11:53:33 +0000
ROA not after:            Tue 29 Dec 2026 11:58:33 +0000
asID:                     26042
IP address blocks:        209.87.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Jan 2026 16:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:92:73:68:e2:d4:3c:dc:b0:e6:e5:86:29:ec:42:81:d6:37:c1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Dec 30 11:53:33 2025 GMT
            Not After : Dec 29 11:58:33 2026 GMT
        Subject: CN=A41CF9C599CADC4F9C6B9C8A7C3A5961E2AA39AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:0c:dd:2c:45:26:c5:dd:49:1f:38:08:2e:
                    4c:41:7d:b0:07:ce:ef:48:7f:56:f1:ae:5f:9a:4f:
                    b1:02:6d:e4:cb:f5:09:e9:7b:34:96:ed:d0:33:62:
                    c5:ad:7b:6f:6e:75:37:f9:b8:88:59:29:f1:f4:ac:
                    db:e3:f4:a0:9a:f0:ff:82:2a:52:d6:66:8a:98:cd:
                    ed:04:6d:4f:21:05:dd:ad:a7:3f:3d:a2:15:ed:f3:
                    ad:a7:79:b7:f8:ae:62:af:af:ae:21:7a:85:6f:26:
                    64:4d:f6:02:cc:d7:86:5f:6b:68:18:90:5d:63:40:
                    f3:8a:fa:46:8c:48:be:ba:90:71:c1:9d:fd:cb:5b:
                    9f:c2:72:7f:bf:69:5b:b6:13:31:8a:38:ef:d4:c8:
                    3e:df:d6:63:f0:06:ad:2e:d4:00:f2:35:b4:51:92:
                    78:34:27:69:ef:34:ac:6e:30:7d:86:68:d8:89:08:
                    e5:ea:6b:3b:25:de:32:9a:2f:83:1e:0b:bd:ad:a9:
                    5a:f7:8d:82:78:b6:d2:04:69:93:bc:c8:ae:b5:f6:
                    2c:a2:5f:23:c1:6c:55:e0:bb:41:67:ad:63:b7:8d:
                    9e:1e:54:6c:4b:e7:cb:6b:07:49:eb:39:2d:90:e9:
                    ff:79:62:66:21:25:a4:1f:38:77:a5:28:52:b4:e3:
                    f7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1C:F9:C5:99:CA:DC:4F:9C:6B:9C:8A:7C:3A:59:61:E2:AA:39:AD
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136322e302f32342d3234203d3e203236303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:28:06:34:b5:2b:45:81:8e:e7:05:36:c3:69:03:ba:f2:68:
         fe:dc:ed:2e:bf:cc:6d:45:eb:62:7f:c4:e3:49:2a:ce:de:01:
         97:a3:af:c4:a5:d0:5e:98:2e:2f:64:b1:1f:89:8c:19:cf:8f:
         cc:9e:03:42:1b:24:dd:d9:08:fe:aa:5c:ed:cb:ca:42:8d:50:
         7a:cf:32:e2:79:f3:5f:88:c5:04:10:53:78:a8:82:58:27:f7:
         e1:f4:6a:de:e4:87:08:0a:47:8c:df:ca:8a:47:01:d2:a8:18:
         72:a0:af:98:f9:f2:42:a2:82:70:7d:4a:82:07:66:8e:71:29:
         51:18:93:bf:d4:3f:fa:00:47:a6:d6:19:96:89:16:7d:3a:44:
         6c:68:bb:31:34:7d:89:8c:90:bb:8b:2a:e7:b2:3b:5d:9c:18:
         1c:7b:13:2b:de:9c:6e:a5:50:0a:6e:2a:9d:07:b3:b4:dc:10:
         bb:b9:6a:3b:96:2f:fb:a2:18:99:58:76:0b:e0:07:f8:e9:3e:
         98:ea:06:d3:d2:4f:7c:f6:47:b0:97:f1:61:e9:d8:ae:a3:b7:
         10:8c:6e:13:6d:03:ae:6a:4a:34:c7:ca:1a:13:42:12:2b:29:
         62:e8:15:aa:f7:2f:a6:f5:d8:dd:a0:f3:5a:9a:a5:90:d5:f6:
         c8:9c:fb:cb
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUEJJzaOLUPNyw5uWGKexCgdY3wfUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUxMjMwMTE1MzMzWhcNMjYxMjI5MTE1ODMz
WjAzMTEwLwYDVQQDEyhBNDFDRjlDNTk5Q0FEQzRGOUM2QjlDOEE3QzNBNTk2MUUy
QUEzOUFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleIM3SxFJsXd
SR84CC5MQX2wB87vSH9W8a5fmk+xAm3ky/UJ6Xs0lu3QM2LFrXtvbnU3+biIWSnx
9Kzb4/SgmvD/gipS1maKmM3tBG1PIQXdrac/PaIV7fOtp3m3+K5ir6+uIXqFbyZk
TfYCzNeGX2toGJBdY0DzivpGjEi+upBxwZ39y1ufwnJ/v2lbthMxijjv1Mg+39Zj
8AatLtQA8jW0UZJ4NCdp7zSsbjB9hmjYiQjl6ms7Jd4ymi+DHgu9rala942CeLbS
BGmTvMiutfYsol8jwWxV4LtBZ61jt42eHlRsS+fLawdJ6zktkOn/eWJmISWkHzh3
pShStOP3hQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKQc+cWZytxPnGucinw6WWHi
qjmtMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlNTIzODFkMDE4ZTg1
OTM4ODRkMmEzMC8wLzMyMzAzOTJlMzgzNzJlMzEzNjMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzNjMwMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANFXojANBgkqhkiG9w0BAQsF
AAOCAQEAGygGNLUrRYGO5wU2w2kDuvJo/tztLr/MbUXrYn/E40kqzt4Bl6OvxKXQ
XpguL2SxH4mMGc+PzJ4DQhsk3dkI/qpc7cvKQo1Qes8y4nnzX4jFBBBTeKiCWCf3
4fRq3uSHCApHjN/KikcB0qgYcqCvmPnyQqKCcH1KggdmjnEpURiTv9Q/+gBHptYZ
lokWfTpEbGi7MTR9iYyQu4sq57I7XZwYHHsTK96cbqVQCm4qnQeztNwQu7lqO5Yv
+6IYmVh2C+AH+Ok+mOoG09JPfPZHsJfxYenYrqO3EIxuE20DrmpKNMfKGhNCEisp
YugVqvcvpvXY3aDzWpqlkNX2yJz7yw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:07:36 2026 by rpki-client