This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a9a18f4-8b67-3ab0-88e9-05651871d975.roa
File:                     3a9a18f4-8b67-3ab0-88e9-05651871d975.roa (raw, json)
Hash identifier:          i/950FOnUFLjXsUy1Qd58dlazQ1v0tbdL24uG1CWRlg=
Subject key identifier:   F7:00:AD:11:92:07:6A:8F:33:9B:8F:AF:40:6A:2A:20:E9:35:DD:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BF8E089C56EC4E22CC73C3700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a9a18f4-8b67-3ab0-88e9-05651871d975.roa
Signing time:             Tue 25 Nov 2025 02:00:31 +0000
ROA not before:           Tue 25 Nov 2025 02:00:31 +0000
ROA not after:            Mon 23 Feb 2026 02:00:31 +0000
asID:                     397194
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:e0:89:c5:6e:c4:e2:2c:c7:3c:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 25 02:00:31 2025 GMT
            Not After : Feb 23 02:00:31 2026 GMT
        Subject: CN=a39c83df-58a2-4c9d-80bc-20f360651b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:76:49:84:cc:1f:5e:ff:77:9c:85:59:c4:
                    9b:27:37:5b:80:0c:a9:44:d8:9c:f1:a0:8f:17:d5:
                    ba:56:0d:37:e8:21:a8:a2:42:eb:08:48:9a:db:58:
                    28:bf:9a:93:7c:2a:25:ea:96:50:d6:05:c7:54:59:
                    63:64:55:54:c7:3b:c9:ff:ec:30:a4:19:ac:6e:99:
                    8b:2e:97:e3:d2:db:e7:64:d6:c1:b6:33:07:04:aa:
                    d9:53:da:33:03:27:6b:d0:a4:0d:8e:85:70:d6:d8:
                    ed:ed:20:cf:e0:1e:f4:a5:03:6f:98:20:a7:7f:17:
                    da:2e:56:cd:5b:86:b3:1a:6a:2e:a4:28:3f:d1:c9:
                    2c:02:d4:f3:97:c2:8b:c0:98:07:eb:c0:79:50:4f:
                    2b:90:92:c3:53:ad:26:c9:7f:f0:6b:82:b3:70:01:
                    86:cc:ce:3d:a7:d0:13:8d:86:f5:d1:9a:4e:87:22:
                    d8:fb:c4:c1:b9:75:9f:00:e0:7b:fd:08:c9:55:da:
                    7e:2f:f3:8f:9f:32:a5:3f:f5:72:94:f7:f0:c1:e2:
                    12:63:de:fb:a1:90:80:f4:66:07:d1:bd:da:fc:14:
                    d2:44:41:e6:9e:23:ce:2f:9c:dc:8a:42:5d:3c:b9:
                    f8:ca:e8:7b:24:22:07:ca:f8:66:9c:ec:e0:c8:56:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:00:AD:11:92:07:6A:8F:33:9B:8F:AF:40:6A:2A:20:E9:35:DD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a9a18f4-8b67-3ab0-88e9-05651871d975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ef:2a:b7:2e:ef:5e:a0:8b:c7:35:76:c0:7e:8a:b4:1d:70:
         62:06:40:17:77:d7:72:48:b2:64:f1:11:bf:79:dd:68:a1:af:
         da:d9:d5:88:c8:de:9b:c0:cb:41:fd:90:1f:6e:be:32:50:45:
         15:95:aa:75:d8:a7:a4:33:53:ac:1a:ca:36:53:b5:a3:90:a6:
         6a:25:12:db:96:d6:90:da:28:5c:c8:6e:98:f2:da:85:d2:e0:
         70:f8:78:77:06:6a:75:60:09:04:0a:50:7c:64:84:7a:0b:cb:
         4f:b2:60:02:57:eb:91:04:e1:5a:d0:97:dd:1c:df:6d:96:1c:
         d3:b2:36:96:36:49:81:07:f2:d5:af:21:95:d7:e1:44:46:7e:
         28:00:c1:cd:27:9a:fd:0d:20:cd:7a:d4:d7:7d:89:85:54:ed:
         5d:72:a2:05:00:4e:5f:06:52:40:ef:67:ea:60:19:b7:37:84:
         6b:69:45:87:8d:42:7c:a0:32:50:f7:90:79:9a:79:6f:f3:cb:
         ab:0e:4f:7f:aa:a4:51:1f:0d:fd:0c:77:47:fc:9b:bd:aa:91:
         94:f3:47:50:6a:4e:82:0a:c5:33:13:d6:51:91:f6:2e:f9:d6:
         c2:23:c7:e2:8a:28:6d:28:19:59:b1:74:ac:06:86:61:48:70:
         64:a5:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:25:47 2025 by rpki-client