This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa
File:                     ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa (raw, json)
Hash identifier:          66Vc8CFXF/k4RDWMES9ULvx6YYkmeyzx4Gj5oqXSXps=
Subject key identifier:   2D:DE:28:B0:35:2A:D6:32:3D:76:76:D3:3E:DE:05:2D:1A:A8:D5:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BD76064D23EC584B188F1A180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa
Signing time:             Thu 13 Nov 2025 02:00:31 +0000
ROA not before:           Thu 13 Nov 2025 02:00:31 +0000
ROA not after:            Wed 11 Feb 2026 02:00:31 +0000
asID:                     396576
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d7:60:64:d2:3e:c5:84:b1:88:f1:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 13 02:00:31 2025 GMT
            Not After : Feb 11 02:00:31 2026 GMT
        Subject: CN=4e46e9e2-b5b0-43c6-91e2-5562134749d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:a7:e4:7b:f7:61:4e:be:20:1d:c2:fd:80:
                    9a:a6:3d:4f:10:80:67:a9:b5:e2:52:02:7f:61:e9:
                    36:5e:a9:7b:50:05:c3:27:31:7b:b3:a2:49:fd:28:
                    17:81:32:49:6f:2a:d3:9d:6d:8c:e1:f2:f1:0b:32:
                    c2:3e:45:55:b1:e9:fc:2c:94:ca:2c:c7:42:c0:7d:
                    a1:27:49:bb:d9:8e:22:c9:89:16:f6:c1:b6:0e:04:
                    c4:43:33:ff:86:bb:f9:ba:5c:ef:9b:d2:33:d7:48:
                    c4:57:10:7d:61:45:84:9b:dd:c3:cd:06:01:ab:e1:
                    38:ea:18:64:6a:e1:0e:de:4c:2b:86:9f:0b:d5:4f:
                    f2:38:71:87:9d:a9:16:cd:ba:f2:89:aa:b3:9f:07:
                    80:31:be:61:8c:bd:d7:8f:dc:ec:9e:a3:b8:97:12:
                    57:09:57:9d:c5:a0:b3:03:34:f1:d8:40:cc:4f:f6:
                    29:64:d5:f7:13:ed:9a:37:89:41:be:f5:5e:7f:67:
                    52:ad:36:12:d4:9e:21:1a:9a:b7:9b:82:19:78:42:
                    ff:44:1a:63:9d:3a:c8:e0:56:30:89:a3:57:c1:c6:
                    dd:cf:54:10:cd:47:9a:3c:d6:83:72:03:94:5e:dd:
                    63:cf:08:ce:21:fd:8e:78:f0:7e:de:e1:ae:32:35:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DE:28:B0:35:2A:D6:32:3D:76:76:D3:3E:DE:05:2D:1A:A8:D5:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:49:30:37:bd:43:bf:28:38:63:cf:23:62:18:c6:b6:43:fc:
         3e:dc:8a:65:85:8f:3f:a5:a6:c0:1d:55:df:c0:3e:08:39:f9:
         35:37:98:a8:cd:54:c9:c7:83:00:e2:5a:ee:03:64:ac:52:0d:
         a4:95:76:7b:89:70:ee:10:8c:c9:8e:a9:5a:bb:98:4b:7a:84:
         b9:21:2b:d3:23:94:95:24:08:f2:bd:be:cc:eb:57:f6:98:08:
         a8:4e:4e:13:f6:bd:64:44:96:e2:24:4a:48:f0:b3:0d:70:59:
         f5:cb:e7:de:39:d6:c3:5c:71:70:11:ae:e4:33:f4:cf:fb:69:
         0f:c6:5b:86:bc:86:2b:9f:e0:f8:e8:4c:0d:9a:b1:67:38:ad:
         73:ac:33:9c:f4:14:b1:6c:fd:b0:c3:30:cf:ad:19:c2:24:b5:
         07:08:9e:30:37:50:6b:11:38:82:33:f2:b4:fe:3f:47:13:83:
         dc:22:16:2c:aa:db:17:a6:d0:69:aa:37:a1:76:5a:cd:5f:4d:
         ae:c0:ae:5a:aa:d6:13:0f:ba:fd:55:36:b2:5e:74:e0:83:28:
         30:dd:a9:6c:2c:b8:82:3b:41:ea:78:12:13:41:9e:d8:2b:19:
         58:42:f1:fa:6b:1c:83:00:99:62:97:14:7f:1b:51:11:95:79:
         40:24:ba:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:25:16 2025 by rpki-client