This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e20323035383936.roa
File:                     3137332e3234372e3232352e302f32342d3234203d3e20323035383936.roa (raw, json)
Hash identifier:          awjiGsyPacRCue4Shx0sqcgTBFZrtmvtHMRnjhn4eoA=
Subject key identifier:   07:AE:AE:E0:69:96:33:1B:6D:14:13:46:76:46:E5:97:03:1B:08:0C
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       2A7407735E832534343A5BEA364D967E49C3C23C
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e20323035383936.roa
Signing time:             Wed 26 Nov 2025 10:24:12 +0000
ROA not before:           Wed 26 Nov 2025 10:19:12 +0000
ROA not after:            Wed 25 Nov 2026 10:24:12 +0000
asID:                     205896
IP address blocks:        173.247.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 06:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:74:07:73:5e:83:25:34:34:3a:5b:ea:36:4d:96:7e:49:c3:c2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Nov 26 10:19:12 2025 GMT
            Not After : Nov 25 10:24:12 2026 GMT
        Subject: CN=07AEAEE06996331B6D1413467646E597031B080C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:c9:a3:98:cc:70:04:7c:40:59:ce:f9:77:
                    b1:8a:83:0c:16:79:47:62:84:24:20:8e:8a:b6:ed:
                    7a:e2:d6:db:d3:a4:22:a8:55:a5:06:45:92:01:22:
                    41:22:a3:e8:29:7d:01:8d:d8:bf:43:d0:e9:a0:00:
                    b8:e4:86:87:da:3e:94:91:dd:7c:3c:33:c1:db:bd:
                    dd:13:ce:dd:e7:08:a8:b7:f9:d6:77:15:2f:d2:5d:
                    8d:f1:71:d7:bf:98:ec:f4:81:ce:26:0b:03:2d:aa:
                    4f:eb:11:58:e8:bc:93:1e:b3:f4:c7:31:8b:4a:c3:
                    1a:ce:07:c8:de:3e:2a:8e:a6:a6:b8:c6:36:e6:e6:
                    62:b6:89:7c:c9:72:39:60:7f:fb:1e:f0:58:44:e9:
                    cf:18:1b:0a:2c:a4:d5:9e:9a:0b:f3:9c:e8:4b:2d:
                    15:4b:3d:6d:75:d7:ed:50:f3:d6:c5:4c:8a:d2:e3:
                    86:42:cf:ac:f7:90:fe:b1:e0:6e:2d:ce:f8:6a:7b:
                    4d:59:01:80:d8:2a:7a:e5:23:00:3e:70:fe:c5:a3:
                    a1:cc:fe:16:0c:7d:0c:44:13:58:c7:c6:5f:ad:ac:
                    d3:91:b4:14:3b:b1:87:a2:53:f6:d9:a9:a3:18:64:
                    32:92:d4:e4:c1:d1:fe:25:51:4b:79:7c:85:b5:2e:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AE:AE:E0:69:96:33:1B:6D:14:13:46:76:46:E5:97:03:1B:08:0C
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e20323035383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:5f:98:df:17:16:22:98:9e:1e:06:a3:47:4b:8c:c6:55:
         86:eb:25:cf:c7:41:77:a2:a7:88:ac:f8:ff:f3:d2:27:28:e3:
         dd:f5:91:21:65:bb:14:b9:71:cf:37:ce:ae:a1:27:8b:23:2b:
         35:2b:e3:b9:a4:8a:02:e8:fd:57:be:d1:4d:1a:b8:c7:6a:38:
         f8:31:8a:55:e2:c4:fe:ba:ba:a5:c4:2f:04:41:43:ac:c8:89:
         eb:3d:82:d9:ab:b8:56:19:19:0d:83:c9:84:8c:7b:b0:8e:9b:
         a8:da:ae:59:cd:cc:ec:3d:11:d7:0b:8f:96:dd:64:9a:9f:40:
         87:68:47:35:a1:db:16:24:01:2a:90:b3:7c:73:dd:c2:9c:98:
         da:1d:11:57:cf:93:f1:9a:0f:d9:da:3e:25:39:fc:05:24:f2:
         09:f6:d0:00:7c:9e:09:3b:93:37:2c:c1:23:eb:6d:38:5b:f5:
         88:b4:ae:38:1e:3e:9a:30:65:41:49:95:90:b1:56:f5:74:e0:
         00:2f:b5:6c:d4:47:1e:91:8b:50:c1:28:21:de:0e:97:e2:5a:
         fd:76:a3:98:95:4b:8c:3a:fe:b8:8d:e4:94:5e:fb:0e:b1:77:
         37:e7:a1:6c:80:15:e6:d6:cb:61:b3:4f:3d:0d:bf:f7:17:ef:
         a9:4d:c8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:54 2025 by rpki-client