This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1bfb7689-19f6-30b7-b66c-542dc074defc.roa
File:                     1bfb7689-19f6-30b7-b66c-542dc074defc.roa (raw, json)
Hash identifier:          YP9jPXnV2UUOWQV317svUwzXra7g/HqBrmRQ9MQ6LC8=
Subject key identifier:   1C:2D:AD:D2:CC:D4:AC:6B:47:39:92:06:B4:0B:0A:96:47:32:3D:A6
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584BE3F075F86B7B523ED63A7880
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1bfb7689-19f6-30b7-b66c-542dc074defc.roa
Signing time:             Mon 17 Nov 2025 14:00:39 +0000
ROA not before:           Mon 17 Nov 2025 14:00:39 +0000
ROA not after:            Sun 15 Feb 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        2605:4300:2c14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e3:f0:75:f8:6b:7b:52:3e:d6:3a:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov 17 14:00:39 2025 GMT
            Not After : Feb 15 14:00:39 2026 GMT
        Subject: CN=44100de4-df6a-4255-ba5d-7c82bec98136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:71:62:10:cd:11:c5:f8:5e:09:6f:a6:db:
                    51:15:4d:45:a1:f4:9f:46:3c:24:df:de:37:3b:8a:
                    55:4f:65:8d:14:55:b9:c6:f6:dd:23:17:3d:49:e2:
                    cf:cc:80:be:3c:77:d5:54:81:50:d2:cd:4d:6a:96:
                    fe:ea:af:a6:f5:c5:23:9b:84:93:b9:de:68:87:d3:
                    0e:5f:f9:42:a0:17:00:13:96:d2:5c:01:e9:1e:5c:
                    cb:aa:82:55:4e:58:9b:cf:5a:44:64:66:90:18:d8:
                    05:f8:45:9d:bd:c8:06:89:a5:9a:8c:47:4c:7f:24:
                    f1:7f:f6:26:39:e6:0e:57:55:c6:d2:3c:86:24:7b:
                    8d:69:6a:54:7b:f7:09:0c:08:e8:5d:c5:c1:0b:ae:
                    86:b5:1b:de:33:3e:c3:94:cf:5d:fc:1b:0e:49:9c:
                    0e:04:e0:5a:f8:96:03:15:6d:53:4a:14:a2:82:b1:
                    b9:23:60:ce:98:c1:b5:6f:52:ce:40:13:2c:44:5e:
                    e2:58:6e:82:fd:ec:e1:fc:8a:47:78:d2:cd:af:14:
                    6c:db:3f:7d:eb:7f:d4:65:ee:c8:61:75:54:2e:84:
                    50:5d:10:49:7e:6c:33:8e:a1:90:29:fd:96:14:7d:
                    7f:7b:97:af:5a:b2:32:b6:ca:62:3b:04:c1:b4:ce:
                    97:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2D:AD:D2:CC:D4:AC:6B:47:39:92:06:B4:0B:0A:96:47:32:3D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1bfb7689-19f6-30b7-b66c-542dc074defc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:3b:7a:fd:e6:2b:af:9e:08:99:5c:d5:f4:6a:e5:7a:f5:07:
         42:c4:9b:70:4c:86:14:fe:44:68:c9:39:ed:61:f1:dc:17:76:
         5d:5d:b2:43:5c:43:3c:e2:5b:9b:87:d8:a4:a8:24:eb:18:8a:
         4c:78:34:1e:b6:fc:f0:15:e4:34:43:0b:23:3f:29:80:b8:45:
         b2:74:e0:d5:ad:dc:a3:57:ab:76:96:56:60:3b:ae:6b:a0:3d:
         4b:12:c0:d9:71:1d:de:19:a9:6e:fa:69:10:de:bb:c3:8c:59:
         78:58:8e:b3:d6:22:b1:52:f6:6b:13:99:1a:8f:b9:10:3a:f9:
         56:92:7a:fd:14:40:d3:d9:d5:9d:44:87:eb:91:a2:51:53:53:
         fc:97:2c:6a:ff:cf:98:62:16:4b:81:09:3c:9a:f5:9c:77:f6:
         ef:a8:fa:f5:78:89:4e:6d:4f:9e:b6:da:85:48:9b:d1:0b:5a:
         b7:43:a3:c6:18:9e:2d:8a:25:42:79:f9:29:c8:eb:9a:ae:a1:
         92:cd:18:76:c4:62:6b:dd:ed:85:8f:7b:d0:93:f2:7c:07:71:
         c3:a1:b7:01:39:a1:23:d3:54:88:9f:29:76:ee:7e:e1:c8:dd:
         cb:1c:1f:6d:5b:00:d5:15:a6:fc:9e:37:71:ce:38:ef:e2:57:
         2d:30:14:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:06:10 2025 by rpki-client