This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa
File:                     8e31ec23-a710-3224-8cde-ff28da3fd155.roa (raw, json)
Hash identifier:          FFvJQHScq1glzQs/tgPjd9NfOgxz/JxWx6F8O0CZ97c=
Subject key identifier:   C8:F7:F7:BE:D9:62:2F:E3:70:04:0E:E0:C9:29:75:46:6B:A8:6A:1C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584C50D16A9241E6640EE143CB80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa
Signing time:             Fri 26 Dec 2025 14:00:39 +0000
ROA not before:           Fri 26 Dec 2025 14:00:39 +0000
ROA not after:            Thu 26 Mar 2026 13:00:39 +0000
asID:                     396543
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:50:d1:6a:92:41:e6:64:0e:e1:43:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 26 14:00:39 2025 GMT
            Not After : Mar 26 13:00:39 2026 GMT
        Subject: CN=b37446ca-854f-4767-8f3a-dc02f67b8fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:04:9c:84:ca:2e:d1:d5:5d:9e:7a:b5:42:
                    da:82:aa:e6:53:52:04:a8:cb:1a:ad:10:47:dc:10:
                    e8:53:1d:91:a2:5e:12:59:2d:be:73:63:03:8e:eb:
                    8e:8d:0b:12:a7:22:c0:e0:2f:71:da:9a:9e:78:19:
                    65:28:e4:7a:7e:9a:45:1f:da:79:1f:44:2c:b9:14:
                    eb:d1:5d:a9:68:e7:8f:69:4a:7a:27:e2:57:5d:8e:
                    77:5a:6d:a3:57:25:67:c5:e0:15:df:31:a3:d6:2f:
                    1c:c3:3d:09:ab:20:30:1f:2e:11:c4:bd:61:f7:af:
                    4d:3d:50:eb:d2:c1:6a:7f:10:dc:d6:22:0d:87:f3:
                    50:2b:c3:5b:8a:44:f8:8a:f0:7f:df:6f:9e:35:d0:
                    c9:09:03:03:c5:b6:fb:54:3f:b9:a7:cf:9a:9f:58:
                    6b:3e:9d:6b:20:13:e9:1a:db:22:9e:4e:1e:5d:83:
                    64:8a:fb:95:29:97:b0:8c:1e:0e:9c:81:db:6b:48:
                    f6:60:46:cb:5b:25:31:e8:4c:f8:fc:3d:1f:41:e1:
                    d1:35:6b:83:12:95:02:6c:d7:a5:f9:df:57:d6:8e:
                    b9:90:f3:25:0f:a2:36:6f:c0:4c:34:73:a8:32:08:
                    7f:d5:e6:9f:ba:00:f4:1c:00:fb:09:31:f3:fd:fa:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:F7:BE:D9:62:2F:E3:70:04:0E:E0:C9:29:75:46:6B:A8:6A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c5:10:bb:cf:66:52:42:4f:fe:d4:61:2a:53:80:ef:39:c5:
         90:e7:27:ba:ba:b0:7c:3d:90:a3:97:ab:1d:5f:c3:1e:19:80:
         c2:ff:d0:8d:df:f7:ee:8c:ba:4b:37:c6:31:46:55:b0:46:19:
         21:96:00:30:26:c8:36:58:f6:34:f5:fb:4c:f0:c6:90:39:b0:
         f7:5f:73:b9:86:63:79:73:68:46:e5:ff:88:2d:2f:9c:cd:6c:
         fa:d6:d9:59:c8:7b:9f:4a:5f:42:6d:7d:eb:32:22:3f:f5:31:
         10:cf:1c:eb:7d:8c:26:a2:a9:9b:f0:c3:7f:88:01:3a:b2:12:
         38:00:4f:f1:ce:30:f3:33:ee:fc:59:ee:8c:d2:7d:e2:82:2a:
         6e:2d:b0:24:9c:44:d4:94:66:19:23:06:ab:6a:9c:7b:c9:69:
         2e:5e:c8:02:d6:83:77:a5:83:52:41:f1:fd:35:5d:58:23:ca:
         6a:07:cd:a2:a8:da:ec:ad:5b:b6:c6:62:b7:fd:53:38:9f:4c:
         c4:80:c0:69:e4:5e:64:1c:a0:f4:27:16:d1:29:9f:a2:b3:ae:
         8a:ac:50:01:c9:3e:28:a6:a7:46:38:f3:6f:ca:59:60:ac:50:
         c3:a1:cb:15:1c:9a:cf:b4:cd:5f:5c:b6:58:4e:30:9c:c8:cd:
         65:f7:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:02 2026 by rpki-client