This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa
File:                     7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa (raw, json)
Hash identifier:          Ot/Ho6D70Cn/Lm9K7FDD6cPlMya5DDqcC7+1FShJSQg=
Subject key identifier:   CA:96:04:E8:8D:3B:24:9C:40:E7:1E:D4:48:E9:91:91:70:7B:70:55
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584BFBAB454FCEA3E0E6114D3180
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa
Signing time:             Wed 26 Nov 2025 02:00:31 +0000
ROA not before:           Wed 26 Nov 2025 02:00:31 +0000
ROA not after:            Tue 24 Feb 2026 02:00:31 +0000
asID:                     21949
IP address blocks:        2606:880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fb:ab:45:4f:ce:a3:e0:e6:11:4d:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Nov 26 02:00:31 2025 GMT
            Not After : Feb 24 02:00:31 2026 GMT
        Subject: CN=3b138ad9-ed2d-44fe-ae66-0dfcbd64b339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:88:21:75:c0:cf:fc:e7:01:01:eb:61:01:73:
                    64:88:65:4f:83:c2:1d:28:66:e4:1f:e4:0d:35:0e:
                    8a:94:8d:df:28:fc:82:1b:e5:46:75:24:33:7a:4e:
                    86:34:1d:56:0c:53:54:ba:53:bf:a3:f5:63:93:0d:
                    fc:2d:52:3b:2f:fc:ce:53:d9:33:d8:72:90:e6:ca:
                    1c:28:e8:0d:ac:ec:3c:6a:b2:90:00:06:55:d5:66:
                    b8:22:6c:a2:29:95:c1:71:2a:98:46:26:80:3f:dd:
                    44:f5:60:25:50:33:b8:51:62:8b:94:f1:39:80:58:
                    4f:f9:01:9c:8a:57:ba:ef:de:d4:15:e2:15:a7:28:
                    b4:fc:5b:76:d9:7a:f2:60:62:36:c9:c8:42:9d:57:
                    69:6d:92:23:69:dc:e4:4b:47:7a:c6:29:34:42:65:
                    34:e6:82:d0:c0:29:ef:1c:34:f2:bc:9a:84:14:9c:
                    99:92:68:82:9e:59:0e:fb:e6:51:94:69:2d:60:e7:
                    ad:db:ee:64:0c:13:4d:34:aa:7a:57:9f:d9:05:69:
                    b3:60:14:cc:fd:90:7f:fe:54:f1:8b:21:63:77:57:
                    05:9f:a7:51:f9:3f:db:41:c6:10:05:a8:f5:92:c0:
                    dc:16:f3:8f:f3:81:d1:86:f1:00:34:ef:10:e6:e9:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:96:04:E8:8D:3B:24:9C:40:E7:1E:D4:48:E9:91:91:70:7B:70:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:7c:0d:29:91:23:e7:1e:66:ac:95:aa:b4:44:b0:f6:d4:
         00:52:3c:c7:cb:6e:4a:2b:eb:dc:6b:36:cc:8b:43:44:d7:8d:
         3f:7b:f5:50:41:d6:67:a1:c0:1f:9b:dd:a7:56:42:1a:61:96:
         8f:21:f7:5e:af:17:f8:c0:b1:0a:d2:e9:41:69:4d:03:6f:22:
         50:87:c0:5a:4a:24:0d:eb:41:48:38:5d:f5:ff:1f:47:b3:9c:
         03:9e:c5:4c:e0:69:e7:78:9c:6b:3f:a9:d9:e0:7d:ed:56:27:
         7d:90:cf:e8:11:fb:8f:50:5b:93:ca:8b:29:33:ab:80:23:b5:
         d2:97:3f:b6:d7:6e:37:82:9d:8c:8b:4a:22:d2:28:76:ef:2b:
         0d:88:3c:b6:58:05:6f:b0:28:42:b2:4b:af:51:9e:45:0f:18:
         75:4b:70:7d:29:9e:96:7e:b9:91:7a:a6:14:13:c2:e1:81:88:
         79:4a:b4:9e:23:e9:80:52:83:fe:a4:6d:6d:c7:66:40:56:e6:
         5b:37:8d:0a:9c:bc:28:f3:e4:23:75:3d:da:83:3e:76:36:20:
         85:83:a5:e8:d2:ea:ec:71:26:f9:fd:32:80:5f:2f:e3:b3:45:
         3f:66:ce:ee:98:37:d3:e6:f0:cc:2f:52:12:7e:22:ad:16:22:
         74:81:3f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:04:17 2025 by rpki-client