This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136332e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3136332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          b7Fr2eMSLnVtZM1h7ObDU6mG5LAQ4D8vVAMyvfZObtI=
Subject key identifier:   3F:B3:56:6B:D1:36:2A:1E:CB:F1:E1:56:7B:A8:39:92:36:95:C0:42
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       311C3F349242878F755D5A163E6EA979FAAD9030
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136332e302f32342d3234203d3e20383334.roa
Signing time:             Sun 16 Nov 2025 00:01:34 +0000
ROA not before:           Sat 15 Nov 2025 23:56:34 +0000
ROA not after:            Sun 15 Nov 2026 00:01:34 +0000
asID:                     834
IP address blocks:        209.87.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1c:3f:34:92:42:87:8f:75:5d:5a:16:3e:6e:a9:79:fa:ad:90:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Nov 15 23:56:34 2025 GMT
            Not After : Nov 15 00:01:34 2026 GMT
        Subject: CN=3FB3566BD1362A1ECBF1E1567BA839923695C042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:d1:02:89:be:17:f3:68:75:cc:1b:f9:82:
                    20:39:7b:7b:2f:f4:87:32:9f:b9:ee:b4:41:33:24:
                    14:9c:c9:3d:15:ff:3c:91:88:a3:10:a8:1b:ef:4c:
                    f8:d8:e2:46:5c:fe:5e:f3:4a:b1:e4:6f:e9:53:1f:
                    26:c3:84:02:7e:3f:5a:15:69:7b:63:e9:e8:45:74:
                    5e:d1:ed:9a:70:79:53:4e:b2:49:bf:c3:50:71:86:
                    8a:f4:b2:bc:77:76:78:3b:e3:4e:81:26:e3:5d:d3:
                    ad:af:53:45:d9:2d:41:56:0d:55:86:36:c2:c1:3a:
                    fa:42:1b:07:1c:e2:94:14:8b:d8:39:27:e0:3a:e1:
                    25:c1:2d:28:5f:5f:3f:09:d9:52:40:4a:e4:c3:07:
                    55:62:c1:d5:98:3d:89:48:81:0a:02:87:be:ff:e2:
                    c3:e4:e2:50:03:c6:6f:13:be:6b:58:46:e2:7c:4e:
                    07:41:b9:43:e6:b7:7a:70:07:a5:50:54:ca:f7:84:
                    b4:88:bf:f7:9a:f7:f8:17:ef:b1:11:89:36:cf:ae:
                    6b:31:e3:15:c7:74:36:ea:67:f5:14:bf:c8:b7:ab:
                    b4:e2:e8:66:b7:8f:ed:92:20:8d:53:0b:ba:16:cb:
                    0a:f8:bd:17:f7:56:00:fa:ce:d5:71:54:37:ff:1a:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B3:56:6B:D1:36:2A:1E:CB:F1:E1:56:7B:A8:39:92:36:95:C0:42
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f0:5f:ee:b7:d3:df:6a:14:d6:6e:b9:9a:ee:8b:e4:79:70:
         be:6d:98:ef:84:84:ae:f8:ba:47:6a:07:f0:fd:c8:73:4f:f0:
         e4:95:a8:71:60:e7:87:4a:cb:45:52:c3:fb:b5:dc:32:51:76:
         37:61:6c:ae:fe:59:74:8a:a5:ae:5c:a0:69:23:b0:d6:70:f3:
         4f:f1:3d:94:b8:24:fc:24:d7:34:a8:2b:65:9e:3c:d8:90:84:
         24:cc:a4:39:00:23:ab:e3:4a:b7:8c:76:22:0a:2a:9c:03:6f:
         e1:9c:64:cb:e4:7a:70:17:de:50:02:7e:9f:61:6a:67:a3:26:
         36:59:79:de:1e:ff:8f:f4:3b:10:6e:d5:b7:07:6c:fe:e5:e4:
         4f:b0:28:5d:d8:4a:92:3b:c7:62:b0:cc:0b:c0:d2:0c:b8:2e:
         89:41:7e:a3:77:f8:a7:17:62:22:1c:02:8f:16:46:c9:1c:90:
         59:aa:46:b0:94:84:e6:d8:89:81:e7:98:23:88:8d:8d:9b:68:
         e7:1e:3a:10:03:32:96:d6:46:18:37:c9:61:26:ef:6a:3f:c0:
         d9:da:a4:b4:ca:ae:8f:1c:20:1e:ac:89:0a:bd:67:08:74:ce:
         98:38:c1:83:96:75:49:9d:2f:14:80:7b:ce:b4:bc:83:0a:22:
         2d:59:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:12:43 2025 by rpki-client