This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa
File:                     85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa (raw, json)
Hash identifier:          J29mN/MlKaRtoi9NghQ7YWqRth/S22UJh8vNZt26YZU=
Subject key identifier:   F8:E8:4F:94:13:43:CA:83:4E:05:5F:09:13:95:C3:48:F9:9F:BD:D5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584C42DC01FE3A139794EC5F20B8
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     396573
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:dc:01:fe:3a:13:97:94:ec:5f:20:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=1e6d6046-4194-43f3-bac3-546c4c53c480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:be:75:4a:7d:90:dc:05:e5:0a:a0:ad:25:
                    a9:fc:02:29:93:f0:52:ed:8b:cd:33:4b:1b:ba:6f:
                    1b:26:6a:bf:df:b5:b8:80:1e:de:af:ac:0e:68:55:
                    e2:e1:0d:ac:64:d9:27:90:ef:36:d8:de:53:d9:8f:
                    ef:93:d8:b5:91:7d:2b:7f:f9:3a:a0:c6:7f:4b:ce:
                    20:fd:12:4f:de:8f:62:8e:ad:e8:b4:08:93:c1:b6:
                    e4:ad:3a:4f:af:7f:2a:84:df:9e:7f:91:d8:ec:5e:
                    4d:9c:79:15:28:c8:8b:a1:ed:81:e8:dd:9d:03:39:
                    03:ac:88:c8:bb:44:c4:45:62:a2:97:87:db:0f:ce:
                    6d:d7:14:92:c4:bf:06:17:a6:ff:4d:13:63:ed:2f:
                    35:ae:93:d5:ac:df:e2:0d:2c:b6:e6:b2:c4:2f:e3:
                    c3:7a:cc:ad:ba:24:fb:d1:df:ad:1c:df:79:eb:f7:
                    56:28:cb:b3:60:4e:05:28:ff:ce:4b:63:2e:34:c2:
                    88:c7:4a:5d:8d:c7:bf:6e:2a:83:57:c5:0c:17:54:
                    81:49:4c:f7:1d:0a:27:6f:80:65:87:99:7b:53:66:
                    1e:e6:21:e2:23:be:2c:96:74:55:62:6e:fe:f7:c9:
                    f3:c9:3c:fb:4f:c5:3b:4c:e7:cb:f5:fa:8e:29:f1:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:4F:94:13:43:CA:83:4E:05:5F:09:13:95:C3:48:F9:9F:BD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:13:08:fb:1b:3c:b0:da:42:59:40:a9:b7:5c:89:1f:a7:53:
         10:72:ef:00:1a:f2:13:a1:30:34:e9:ea:d9:2f:7f:ea:28:a3:
         2b:cb:32:ef:c0:ee:3f:28:db:46:f1:3b:26:cb:ad:47:21:77:
         d5:8b:cd:2a:50:ec:d0:21:5c:73:3a:05:87:09:db:c8:7b:6c:
         b7:5b:83:6b:50:a0:79:40:c4:41:e0:8a:cb:ac:87:00:c8:c6:
         bf:85:e9:1d:a2:03:80:f2:eb:77:35:5c:33:7a:f0:d7:13:bd:
         03:d1:4e:16:f3:80:eb:cb:9b:cd:79:9c:e2:af:26:e1:db:0f:
         66:86:3f:b5:8c:55:81:95:aa:70:f9:0d:9c:6c:b9:14:68:e1:
         e5:75:b0:41:1f:d7:9a:f8:05:73:9f:e5:d2:fa:89:ac:5e:10:
         6d:28:08:31:7f:8f:03:09:78:af:b1:16:3f:73:4e:00:c5:d2:
         d7:93:3a:98:fc:24:2b:5e:ac:78:e2:55:76:d6:af:db:41:5b:
         54:c9:6b:79:e1:aa:00:af:9c:17:8c:32:bf:02:13:80:60:af:
         00:af:ba:e6:4b:f2:59:ba:5a:53:0f:23:3f:d8:79:35:9a:85:
         e2:87:22:e7:73:dd:6f:ad:f9:d9:60:dd:7d:d4:1a:e9:cb:db:
         8e:bc:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:38 2026 by rpki-client