This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e203535313538.roa
File:                     323630353a3963303a3a2f33322d3438203d3e203535313538.roa (raw, json)
Hash identifier:          9MzP4gdLQQbPoyGFm/1adDKiJAhc50aDCvw+b+8gJng=
Subject key identifier:   F0:D0:5F:66:F9:92:19:68:86:86:3C:22:E0:1F:93:4C:F3:4D:3D:25
Certificate issuer:       /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial:       48F125FE9D9F175C568F4415707988F3786B3030
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e203535313538.roa
Signing time:             Wed 26 Nov 2025 03:53:05 +0000
ROA not before:           Wed 26 Nov 2025 03:48:05 +0000
ROA not after:            Wed 25 Nov 2026 03:53:05 +0000
asID:                     55158
IP address blocks:        2605:9c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
                          rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f1:25:fe:9d:9f:17:5c:56:8f:44:15:70:79:88:f3:78:6b:30:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
        Validity
            Not Before: Nov 26 03:48:05 2025 GMT
            Not After : Nov 25 03:53:05 2026 GMT
        Subject: CN=F0D05F66F992196886863C22E01F934CF34D3D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:38:db:11:4a:0a:6e:ec:1a:fd:47:4a:ce:34:
                    ce:fd:b6:57:20:6f:59:70:1e:87:0b:c5:d6:34:89:
                    a6:08:6e:15:fe:51:82:0d:fd:22:4d:f8:ec:57:a4:
                    7c:8d:14:3c:f7:b5:c2:82:b1:81:b0:25:90:2a:20:
                    61:5e:76:0e:5d:98:35:62:6e:99:4a:6d:17:6e:3f:
                    7f:e5:81:e6:83:7e:08:ae:c2:4b:c8:92:96:3f:6c:
                    46:c3:3a:f9:0e:85:90:55:26:f5:36:7f:33:9c:84:
                    12:01:d2:92:01:bf:ad:56:51:4b:52:14:32:83:f3:
                    d7:47:20:a1:04:ac:9c:5b:76:92:22:4a:62:3a:14:
                    09:44:68:c4:ed:3c:20:83:f0:e7:c5:dd:d2:8a:70:
                    a3:f1:90:f2:29:f5:56:94:13:72:fc:6c:1a:ab:9c:
                    f4:4e:80:a4:c8:b6:ae:b9:33:28:c3:d2:62:41:41:
                    e1:17:a3:07:bf:f6:05:d9:96:32:91:9c:28:48:27:
                    5f:0e:f8:ae:06:07:08:f9:75:43:ac:7e:9b:4c:49:
                    94:61:b5:b8:7a:61:45:91:2c:c3:79:91:f3:50:c0:
                    f9:ab:92:23:f3:65:63:6d:b7:a3:1a:bf:63:a9:08:
                    26:04:6b:d5:80:83:21:fa:16:e0:a8:dc:f7:29:f4:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D0:5F:66:F9:92:19:68:86:86:3C:22:E0:1F:93:4C:F3:4D:3D:25
            X509v3 Authority Key Identifier:
                keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e203535313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:5c:c8:27:bb:b8:cd:38:6a:81:f0:a9:66:e7:8b:36:90:e1:
         fb:aa:f8:e4:38:98:ce:2a:7b:f3:86:da:96:97:da:28:60:ec:
         e0:f6:34:43:c1:79:7a:93:45:72:6d:3c:2f:f6:40:bb:14:fc:
         4e:ce:09:70:b6:27:de:71:35:62:1e:be:f8:03:e7:a7:f0:22:
         fd:34:47:e3:3d:fc:3f:f7:70:ce:ad:c4:65:e2:d1:1b:76:09:
         ec:be:9d:9e:b4:08:3e:f9:df:e8:c5:db:74:bb:13:17:c4:d2:
         4f:a6:e5:ae:24:90:c0:ef:b5:cb:c0:e3:2f:2e:0d:2f:55:09:
         72:08:51:ab:8c:25:0d:83:a1:13:ba:43:7e:75:08:fb:6e:0d:
         00:7f:68:38:7f:4f:c7:c5:72:5d:d3:3e:ee:6a:e9:b8:92:a2:
         0b:21:eb:5c:9f:40:58:94:47:4c:e5:33:3d:0f:e0:43:7c:94:
         7a:0f:98:49:07:92:2d:3a:39:76:7a:0c:c6:35:d8:aa:87:13:
         4a:ab:c8:11:c9:8d:b8:02:3e:35:b0:f9:8f:e6:77:65:e6:44:
         57:2c:ac:cb:f1:01:10:61:9b:c7:e4:f4:e5:4a:e9:fc:01:74:
         d2:d0:7d:2c:11:09:86:89:19:ac:24:5f:b4:7b:d3:16:ec:38:
         42:9b:9a:d0
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUSPEl/p2fF1xWj0QVcHmI83hrMDAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTlmYWMxNDY3MjEyMmJkZGZjN2ExMjc4OTgwZDY5NWM2
MDlkNWVhZWVkYjBkZjI0NTAwHhcNMjUxMTI2MDM0ODA1WhcNMjYxMTI1MDM1MzA1
WjAzMTEwLwYDVQQDEyhGMEQwNUY2NkY5OTIxOTY4ODY4NjNDMjJFMDFGOTM0Q0Yz
NEQzRDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTjbEUoKbuwa
/UdKzjTO/bZXIG9ZcB6HC8XWNImmCG4V/lGCDf0iTfjsV6R8jRQ897XCgrGBsCWQ
KiBhXnYOXZg1Ym6ZSm0Xbj9/5YHmg34IrsJLyJKWP2xGwzr5DoWQVSb1Nn8znIQS
AdKSAb+tVlFLUhQyg/PXRyChBKycW3aSIkpiOhQJRGjE7Twgg/Dnxd3SinCj8ZDy
KfVWlBNy/Gwaq5z0ToCkyLauuTMow9JiQUHhF6MHv/YF2ZYykZwoSCdfDviuBgcI
+XVDrH6bTEmUYbW4emFFkSzDeZHzUMD5q5Ij82VjbbejGr9jqQgmBGvVgIMh+hbg
qNz3KfTcQwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFPDQX2b5khlohoY8IuAfk0zz
TT0lMB8GA1UdIwQYMBaAFFEwedTP+/34ECTKG0jKt3vVFmZXMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTEvNTEzMDc5RDRDRkZCRkRGODEwMjRDQTFCNDhDQUI3N0JENTE2NjY1
Ny5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjL2RhYjc2YzZiLTBlODYtNGEwMy1hNTlhLWYzZmM3N2Ri
YmE2Mi9lOWZhYzE0NjcyMTIyYmRkZmM3YTEyNzg5ODBkNjk1YzYwOWQ1ZWFlZWRi
MGRmMjQ1MC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTEvMzIzNjMwMzUzYTM5NjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzUzMTM1Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBQnAMA0G
CSqGSIb3DQEBCwUAA4IBAQBKXMgnu7jNOGqB8Klm54s2kOH7qvjkOJjOKnvzhtqW
l9ooYOzg9jRDwXl6k0VybTwv9kC7FPxOzglwtifecTViHr74A+en8CL9NEfjPfw/
93DOrcRl4tEbdgnsvp2etAg++d/oxdt0uxMXxNJPpuWuJJDA77XLwOMvLg0vVQly
CFGrjCUNg6ETukN+dQj7bg0Af2g4f0/HxXJd0z7uaum4kqILIetcn0BYlEdM5TM9
D+BDfJR6D5hJB5ItOjl2egzGNdiqhxNKq8gRyY24Aj41sPmP5ndl5kRXLKzL8QEQ
YZvH5PTlSun8AXTS0H0sEQmGiRmsJF+0e9MW7DhCm5rQ
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:34:25 2025 by rpki-client