This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa
File:                     48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa (raw, json)
Hash identifier:          7ybN0d8fzR64uqjb/DNmpUjsv+sQMiDC9fHARU+2xes=
Subject key identifier:   0C:C4:B7:A1:67:DE:CD:CD:6E:9B:36:E2:25:0E:0B:66:0C:AB:30:88
Certificate issuer:       /CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Certificate serial:       010D0C9F4328584BD065A753FFBCF600CEB82840
Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa
Signing time:             Mon 10 Nov 2025 14:00:38 +0000
ROA not before:           Mon 10 Nov 2025 14:00:38 +0000
ROA not after:            Sun 08 Feb 2026 14:00:38 +0000
asID:                     14639
IP address blocks:        2602:fd26::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d0:65:a7:53:ff:bc:f6:00:ce:b8:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
        Validity
            Not Before: Nov 10 14:00:38 2025 GMT
            Not After : Feb  8 14:00:38 2026 GMT
        Subject: CN=4a8ca986-8ff3-4e6f-92ea-c50f4690711a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ab:4d:78:12:09:5b:48:9d:a6:eb:74:0e:c4:
                    3a:17:09:4a:26:1c:03:0d:37:d3:0e:05:80:cb:26:
                    c1:6c:2e:6d:e2:bd:c7:0c:b0:29:47:f1:f2:d4:e0:
                    e7:ef:fc:5e:d0:3a:54:40:b9:87:59:6b:aa:3d:59:
                    34:2f:9f:c6:c2:dd:13:fc:aa:a1:ae:45:58:02:0a:
                    21:16:9f:b3:78:fc:44:01:d1:1c:29:f1:42:ef:c0:
                    4d:d8:22:85:9d:22:36:4b:46:b0:87:99:d6:d5:7c:
                    24:9b:16:d1:ab:e4:bc:0c:d9:c2:f9:70:99:c2:07:
                    d2:95:c8:71:a7:b5:f8:8f:1c:b6:c3:fc:9d:35:df:
                    f0:4d:53:d6:6c:14:6b:aa:af:ea:13:ea:fe:5e:3f:
                    eb:b8:a6:75:e4:a1:cc:cc:0c:19:ca:fd:3e:4d:66:
                    92:8e:1f:bc:d2:f9:03:f6:78:95:04:a3:94:03:9f:
                    8c:0c:e3:d7:1e:49:a1:74:b5:59:61:a5:31:76:39:
                    0d:11:c3:bd:94:fb:2a:d4:ef:d8:1d:c4:b6:28:0c:
                    b4:d6:ae:cf:01:50:ea:63:96:24:aa:cd:f8:33:1e:
                    f9:81:e7:c3:6e:71:89:5a:8b:a3:d2:7d:49:c7:11:
                    43:6c:1a:31:a8:e7:64:25:fd:af:be:79:52:35:d5:
                    b1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C4:B7:A1:67:DE:CD:CD:6E:9B:36:E2:25:0E:0B:66:0C:AB:30:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl

            X509v3 Authority Key Identifier:
                keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd26::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:81:4e:87:6f:41:6b:3a:2b:97:06:0c:ea:18:f8:19:6f:94:
         0a:30:d9:77:7e:0b:74:77:c7:e4:16:d2:7b:90:20:d5:65:1e:
         27:b5:75:77:89:77:52:f2:8f:0c:82:b4:82:00:c2:99:94:72:
         5f:c4:94:5e:cc:e2:16:59:7e:46:2a:44:50:63:1a:0c:9c:8c:
         dd:ef:bb:65:b8:52:41:4d:fc:bf:6a:24:bb:cc:94:89:14:43:
         a4:7c:de:f3:fb:88:de:23:41:c1:93:18:ca:32:19:6f:6c:37:
         42:6f:d4:a4:f5:d4:33:2b:0c:c4:f7:a5:f8:ca:b8:f2:fb:a2:
         c9:03:d1:8b:95:57:cd:71:51:8b:7f:bd:f4:ea:a4:b9:04:0c:
         65:0f:46:45:81:52:0f:22:e4:34:2a:a7:a3:63:c4:08:23:81:
         68:c7:16:51:90:20:bd:20:17:4a:54:ad:72:b2:08:81:3a:63:
         a5:bb:49:e7:a1:06:c5:1c:72:ee:e1:04:3c:6d:73:31:ea:35:
         0f:23:c4:d6:eb:b2:21:b1:1c:f1:29:6c:b5:b0:a7:11:a5:d8:
         fe:14:94:fb:8b:22:b7:cc:a9:0b:23:df:10:69:67:33:9c:4b:
         9d:63:66:57:9f:96:b7:60:26:46:73:c4:6f:41:54:80:bf:c4:
         7e:4b:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 08:53:00 2025 by rpki-client