This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa
File:                     460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa (raw, json)
Hash identifier:          zLx+jfSYz2Q15e89Emb2NOOIidUcq4GIu2QlmuCOkA8=
Subject key identifier:   01:38:B6:F5:15:7B:5E:8B:E3:E8:C5:7E:32:6F:DA:B0:E5:8D:A3:E4
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584C1630DED48427871E1CE75F40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa
Signing time:             Fri 05 Dec 2025 14:00:38 +0000
ROA not before:           Fri 05 Dec 2025 14:00:38 +0000
ROA not after:            Thu 05 Mar 2026 14:00:38 +0000
asID:                     36629
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:30:de:d4:84:27:87:1e:1c:e7:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  5 14:00:38 2025 GMT
            Not After : Mar  5 14:00:38 2026 GMT
        Subject: CN=d8968773-8887-43ba-95c8-c989117a5e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:60:c2:ea:2d:3a:02:56:c4:e6:4c:b4:f2:
                    29:19:8c:69:f0:d3:ba:e6:4b:9a:fc:29:3f:da:63:
                    38:6e:2d:4d:f9:98:bb:c9:d0:dc:16:17:f8:b5:d8:
                    91:b1:6e:2b:6f:dc:88:7b:79:25:95:77:37:85:cc:
                    38:1d:7a:f7:e3:b1:66:a6:b2:cb:27:1b:fc:87:c9:
                    79:aa:33:1c:c1:27:d0:d5:5a:01:ae:72:01:33:a2:
                    6b:7b:e8:2e:63:7f:e4:f2:c2:64:62:f1:c6:68:52:
                    8b:7f:bd:3a:26:e4:a0:53:89:3b:fd:80:29:a8:31:
                    e3:e1:f4:e7:89:59:d7:63:c2:da:ca:82:5a:9d:91:
                    4e:6f:1c:ab:55:81:67:ab:88:57:9f:db:ca:d8:03:
                    4d:0f:eb:fb:42:6a:65:b4:9a:28:5c:70:fd:76:42:
                    75:45:cf:a9:0b:20:a0:50:7c:4a:89:67:95:ea:f5:
                    20:34:58:be:8f:4e:ee:c0:74:32:58:b9:4a:fa:8c:
                    c4:ed:28:10:1b:4d:42:21:32:10:a5:ca:bb:1e:2b:
                    99:4a:94:0c:28:57:c9:bb:4f:2f:90:05:59:f6:67:
                    cf:88:82:92:6b:17:56:37:38:33:a7:16:0b:51:c3:
                    74:f7:18:65:82:da:e6:3b:8a:0c:7a:45:79:14:ff:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:38:B6:F5:15:7B:5E:8B:E3:E8:C5:7E:32:6F:DA:B0:E5:8D:A3:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:12:93:21:cc:ff:52:7d:ec:1c:04:e4:b3:39:83:b0:24:
         28:91:9d:4c:4e:75:82:b1:05:8b:b5:b8:f0:9c:15:2b:69:50:
         f3:dc:a4:79:7a:7f:02:6a:3c:a6:dd:a9:d9:27:0b:e2:0f:f6:
         c3:a8:34:97:8c:7c:86:39:49:9d:29:3f:33:df:a1:1a:a9:e4:
         0d:81:c3:6d:60:5d:04:f6:4a:39:d8:4d:41:2e:b7:2b:2b:c8:
         30:a7:66:ab:0e:6c:94:e0:7a:d2:4c:f2:82:08:12:bb:de:64:
         3b:8b:8f:b2:54:df:6f:48:3e:4f:8d:1a:cb:0d:85:9a:ed:07:
         02:af:80:8b:b1:5c:e2:0d:e1:1b:e1:b0:39:54:34:4a:4e:b3:
         c3:12:80:6d:cf:ad:10:9d:85:b2:4e:75:2b:8c:ec:69:3e:3e:
         da:ad:e4:c3:46:e2:85:b8:35:10:7f:c1:4f:a3:56:c6:be:a3:
         a9:0b:f9:f9:6c:13:06:e4:ea:82:70:7e:fb:94:2a:43:41:44:
         5d:98:d6:d4:8a:c0:33:c3:76:0b:de:f3:27:09:64:2a:b2:f7:
         cb:5e:56:98:91:df:1d:81:cb:2f:63:b3:ee:b9:90:fb:25:87:
         df:c3:07:ed:81:31:f9:2f:2c:e1:51:80:57:43:85:62:1f:56:
         1f:ce:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:02:13 2025 by rpki-client