This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa
File:                     cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa (raw, json)
Hash identifier:          FCEdF54EgvD9STzPFWE975Jp1HtxdnwwmfVMytVqinM=
Subject key identifier:   38:B8:0A:A1:34:66:D9:BF:D5:7B:44:9F:5B:C7:25:C7:FF:7D:DC:37
Certificate issuer:       /CN=e0808dbd-8138-4b99-ac5a-4f6a7f475f92
Certificate serial:       010D0C9F4328584BE3F07867422FF0852921B430
Authority key identifier: CA:54:C2:97:29:E2:9F:BF:FD:7B:3F:D5:DB:32:2A:8B:CC:EC:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa
Signing time:             Mon 17 Nov 2025 14:00:39 +0000
ROA not before:           Mon 17 Nov 2025 14:00:39 +0000
ROA not after:            Sun 15 Feb 2026 14:00:39 +0000
asID:                     396919
IP address blocks:        2605:940::/40 maxlen: 56
                          2605:940:400::/40 maxlen: 56
                          2605:940:510::/44 maxlen: 56
                          2605:940:610::/44 maxlen: 56
                          2605:940:710::/44 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e3:f0:78:67:42:2f:f0:85:29:21:b4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0808dbd-8138-4b99-ac5a-4f6a7f475f92
        Validity
            Not Before: Nov 17 14:00:39 2025 GMT
            Not After : Feb 15 14:00:39 2026 GMT
        Subject: CN=6d14022a-7937-4a53-8ac1-42db20b3f648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:66:df:61:cf:ad:5f:79:29:d1:68:dc:ab:
                    2f:1c:34:13:ab:76:16:5a:a1:12:c2:c4:97:e4:98:
                    29:15:0d:c2:d3:4d:bb:3c:10:6a:f8:78:e3:ea:6d:
                    19:c2:f4:eb:03:db:27:e6:fc:d5:c1:eb:9d:0f:db:
                    fe:56:4b:c1:58:de:98:0b:2b:3a:e8:95:b6:8b:a0:
                    64:68:88:a6:2b:ab:ff:ec:12:77:ec:6e:d4:aa:35:
                    58:d1:da:ef:70:a1:6a:76:6c:36:32:19:3c:79:eb:
                    a6:90:ea:ab:72:97:46:2a:9b:2c:82:09:70:76:63:
                    56:e3:ba:46:8d:2c:5b:cc:f4:ae:18:6a:55:7b:a8:
                    36:74:59:1b:40:03:9a:d5:04:fc:d9:5a:ec:4f:59:
                    66:0b:5a:49:cd:89:55:74:17:da:25:7a:bf:a8:6c:
                    18:4a:ce:ec:59:c6:c1:b6:7e:c6:e1:e7:3c:cd:42:
                    f7:30:b9:8a:48:00:75:14:06:3b:ae:93:fb:e1:c2:
                    c1:a8:2f:dd:05:58:75:ad:97:7e:45:5b:f9:34:25:
                    6b:07:0a:4e:10:20:91:0b:38:3a:f6:5d:7d:1a:06:
                    37:98:da:ef:1a:b2:7e:b0:8a:10:df:c3:fe:18:e6:
                    98:84:e1:8e:c4:0e:0a:c7:3c:3e:d7:a5:4a:09:d2:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B8:0A:A1:34:66:D9:BF:D5:7B:44:9F:5B:C7:25:C7:FF:7D:DC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.crl

            X509v3 Authority Key Identifier:
                keyid:CA:54:C2:97:29:E2:9F:BF:FD:7B:3F:D5:DB:32:2A:8B:CC:EC:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:940::/40
                  2605:940:400::/40
                  2605:940:510::/44
                  2605:940:610::/44
                  2605:940:710::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0d:cd:99:f3:99:20:41:aa:a7:a8:45:84:db:da:b7:0b:d6:
         f5:46:8b:f7:46:66:be:cd:77:73:6c:7a:3a:be:61:d0:2f:a2:
         57:7e:b7:99:f2:c0:ed:d6:5a:3d:a8:22:01:bb:18:58:cb:2f:
         32:10:e0:21:59:34:6d:75:33:f4:43:65:c4:9d:b0:7d:d0:70:
         fd:84:df:06:7a:fd:31:ae:29:ab:01:c8:9f:9d:32:c8:0b:7f:
         e4:72:07:67:e2:e1:e8:e5:ce:a7:66:3c:ea:50:fb:f9:d1:6d:
         a9:74:33:e0:4d:c0:9d:a6:e7:a0:d0:c8:dd:27:4a:d1:3b:04:
         25:7c:2b:ee:de:91:60:6a:e4:6c:b5:cc:5a:01:12:2e:78:eb:
         98:9b:c7:47:3f:87:f5:bb:1f:b8:99:e7:09:47:63:82:e3:36:
         fd:21:28:40:1c:2e:09:4e:86:4a:e9:a3:a7:58:e9:ee:f0:37:
         65:5f:43:ed:1a:bf:2e:8a:5e:9a:d6:8b:de:62:30:be:be:74:
         6f:c7:f2:9b:10:68:cb:5a:d6:a0:4a:20:25:0c:d3:e5:31:57:
         0d:c0:b0:e7:05:d8:a8:98:23:31:97:db:95:9e:b3:5f:27:a5:
         4b:85:ad:20:b9:a7:45:d7:49:cd:41:77:48:76:7d:e4:c2:97:
         f7:a5:5b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:45:35 2025 by rpki-client