This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3136372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ZVcpTzwkFWS+zxuiOybwHU0mKhWyJGRaEa0JZ2jjGtQ=
Subject key identifier:   A3:EA:7D:12:C3:D5:19:02:22:48:E4:8E:5C:C5:4E:01:8C:45:CA:C0
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       79D94F76681C72681CCD8F72BF07DEBEFA1C3992
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa
Signing time:             Wed 21 Jan 2026 14:56:32 +0000
ROA not before:           Wed 21 Jan 2026 14:51:32 +0000
ROA not after:            Wed 20 Jan 2027 14:56:32 +0000
asID:                     834
IP address blocks:        209.87.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d9:4f:76:68:1c:72:68:1c:cd:8f:72:bf:07:de:be:fa:1c:39:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jan 21 14:51:32 2026 GMT
            Not After : Jan 20 14:56:32 2027 GMT
        Subject: CN=A3EA7D12C3D519022248E48E5CC54E018C45CAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:cd:d6:e8:e6:60:1d:f9:67:58:05:ee:c4:
                    ed:fc:f4:c8:a6:b1:ba:09:e9:52:64:5b:4c:7c:a8:
                    c0:ff:99:6e:30:9a:58:95:55:c0:53:cd:a0:66:34:
                    a8:1a:f0:3f:e2:0f:5b:be:91:32:df:66:49:d9:f7:
                    f8:ce:1e:39:c6:58:f0:ba:5a:91:25:f2:55:a6:b8:
                    59:43:53:4c:9c:bf:8d:a1:2f:e1:75:f7:93:cf:80:
                    98:56:d3:77:10:fc:5e:44:c4:64:12:6c:32:5a:1e:
                    4e:4a:b9:c2:de:aa:92:39:cd:ec:d3:67:1a:e8:3a:
                    2a:b9:61:e3:c6:b6:a8:23:68:7d:e6:56:0c:30:f8:
                    5e:8a:e0:65:4c:6f:4a:74:90:99:4b:a9:6e:85:a5:
                    c6:11:af:65:a0:3c:56:2b:bb:20:7d:32:67:5c:22:
                    0f:46:92:d9:0c:22:27:a5:99:8d:cb:71:15:2f:3e:
                    a3:96:06:3b:83:2c:c2:06:27:e8:86:43:f9:98:cf:
                    12:04:db:70:3b:15:2f:d1:f6:59:55:b1:ef:cc:b6:
                    49:9c:51:22:50:8f:ea:8d:eb:c6:75:e4:54:c1:04:
                    25:88:8e:94:a0:fc:5c:25:09:e9:3f:4f:7d:2b:67:
                    c2:4e:a5:ce:75:2c:3e:2a:28:36:d7:5c:47:b1:01:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EA:7D:12:C3:D5:19:02:22:48:E4:8E:5C:C5:4E:01:8C:45:CA:C0
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:58:f0:db:7c:97:a3:ac:40:94:ce:5a:b5:17:82:19:52:9d:
         41:4f:e1:c3:bd:34:b7:7a:95:4b:95:de:8b:de:a4:21:6a:71:
         60:d1:92:91:16:92:ff:a7:c7:ff:f4:c9:5b:cf:e1:8f:10:74:
         ea:08:63:48:bd:8f:27:de:7b:9a:88:7d:82:fb:2f:2a:ab:55:
         9b:d4:29:7c:bf:c4:31:74:d9:36:82:89:a8:e9:c2:8d:1a:0c:
         7b:7c:90:d6:31:ca:a3:ec:49:3b:2d:20:35:de:2e:57:5b:92:
         51:20:1e:bc:32:b8:85:a7:16:47:3c:3a:af:9b:1a:16:85:8e:
         d8:34:1a:41:28:13:0c:24:31:c4:38:3a:84:4f:d8:0c:77:b8:
         01:5d:08:52:0e:c3:96:30:c4:bf:d7:55:af:dc:80:51:3f:77:
         cd:93:a9:ea:b8:56:79:de:01:37:7c:45:49:36:8a:4a:f1:12:
         6b:e6:8f:5c:8d:f4:18:4d:1a:33:87:e6:35:57:74:cf:d3:b7:
         00:6c:86:60:2d:6f:8c:07:a2:a0:dc:09:4a:62:51:2d:29:07:
         9d:5f:64:c2:c3:06:c2:62:36:d7:d4:a1:9f:7e:d8:af:bf:95:
         b2:d2:59:2f:9d:d2:6c:5a:d2:87:7b:ae:09:ad:1a:2a:50:ba:
         ab:d0:34:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:43 2026 by rpki-client