This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20313438393832.roa
File:                     3139322e3230382e31332e302f32342d3234203d3e20313438393832.roa (raw, json)
Hash identifier:          7M0V7sHHFLatjwxFPSGAJle1LXuGup/CDesNDNJEo1s=
Subject key identifier:   09:D9:F1:ED:C3:9D:D1:86:82:3A:8D:13:A6:AB:21:2A:30:A2:CD:3C
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       7A55595C00423AAFACB208B5DE3D266925BE0F58
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20313438393832.roa
Signing time:             Sat 03 Jan 2026 05:52:32 +0000
ROA not before:           Sat 03 Jan 2026 05:47:32 +0000
ROA not after:            Sat 02 Jan 2027 05:52:32 +0000
asID:                     148982
IP address blocks:        192.208.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 14:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:55:59:5c:00:42:3a:af:ac:b2:08:b5:de:3d:26:69:25:be:0f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jan  3 05:47:32 2026 GMT
            Not After : Jan  2 05:52:32 2027 GMT
        Subject: CN=09D9F1EDC39DD186823A8D13A6AB212A30A2CD3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:a0:7a:57:53:02:83:63:3f:9a:9d:f2:4e:
                    12:e3:1a:22:73:68:14:af:c3:a9:7e:da:75:69:e2:
                    b6:e8:25:66:46:de:85:91:5a:a5:3a:36:cc:38:49:
                    89:53:35:25:0d:81:1f:ed:ad:1f:d4:58:38:f3:2d:
                    d4:0d:d2:fc:9b:91:d3:03:0f:94:d6:1a:2c:b8:88:
                    d2:c2:2b:bb:19:ff:5f:81:82:30:92:1c:70:9c:34:
                    fb:55:ee:ed:73:94:be:b8:bf:19:cf:3b:2d:ad:a5:
                    4a:6f:0f:22:bd:20:64:e6:e5:23:c1:68:51:79:09:
                    3a:a7:1d:31:e0:62:12:0a:c8:f0:11:bc:64:9b:b2:
                    a6:bf:68:81:ca:5e:85:a2:2d:21:13:7c:7a:a2:d5:
                    ba:83:d8:7a:37:53:e8:b2:fb:3a:a1:82:8a:5f:dc:
                    be:f8:85:57:ca:66:45:32:5d:35:6f:9b:35:ac:68:
                    52:b2:14:27:d7:12:cc:21:e9:a5:46:6e:a6:ef:d3:
                    dd:fe:80:43:e1:fd:1c:29:af:97:9a:d0:f1:84:ba:
                    01:07:ea:51:df:ae:96:06:51:50:ba:4f:46:02:05:
                    82:52:c0:02:86:c0:7b:b9:05:85:1f:39:d6:f7:b6:
                    62:48:2f:8b:ca:27:fc:ad:29:42:e6:b3:b1:5a:84:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D9:F1:ED:C3:9D:D1:86:82:3A:8D:13:A6:AB:21:2A:30:A2:CD:3C
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20313438393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:f3:62:85:ce:6d:74:c2:50:42:13:72:81:53:77:97:4c:
         e6:d0:66:6a:fa:56:e8:b3:f5:2a:71:90:d3:a4:d1:af:31:08:
         ee:c0:32:a9:73:a5:e0:d2:f9:fd:fb:e9:ed:2c:55:8c:a7:a1:
         9e:f3:91:9e:b3:e9:0e:84:88:48:2b:ee:33:b5:02:2a:54:0d:
         68:2e:ff:8d:e0:ef:17:fe:25:b4:0b:86:1f:66:da:13:a9:e5:
         71:f1:6b:10:4f:37:7f:1a:05:a2:69:e0:2e:51:f1:42:55:cf:
         ad:c2:54:4b:35:e5:4d:28:8e:1e:c3:45:8d:83:ad:27:0e:97:
         c9:d8:9a:5e:25:90:9e:cf:c1:68:68:4c:54:c0:e7:f7:9d:ad:
         e4:f6:47:70:7d:2e:3b:2f:df:06:37:d1:7f:56:b9:4c:d6:27:
         5d:12:2e:16:af:00:f0:ba:43:a9:77:90:12:f8:e3:4e:99:5d:
         2b:af:98:df:fb:b5:da:4e:7d:ae:5b:1d:23:a1:e4:26:c6:a3:
         5c:f1:ea:a3:4d:48:7a:e5:ea:a7:5a:24:e1:d8:ac:9e:82:00:
         f6:62:ac:52:5c:35:59:4d:e2:15:51:75:9a:fa:3e:cb:7c:71:
         ef:12:ee:b4:31:7b:4a:fb:e7:23:22:a0:a0:25:be:82:e0:0c:
         01:5a:20:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:31 2026 by rpki-client