This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8874e898-e505-3973-bcfd-eed796109e46.roa
File:                     8874e898-e505-3973-bcfd-eed796109e46.roa (raw, json)
Hash identifier:          NRa2sx/stltS12rp9qFt+7OKQNUGjfggEzf+eY6WLQc=
Subject key identifier:   23:17:EF:40:27:DC:0B:39:77:29:39:C3:F7:0E:7B:38:5C:D5:7C:B3
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584C13662EF27186571D4D0F7280
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8874e898-e505-3973-bcfd-eed796109e46.roa
Signing time:             Thu 04 Dec 2025 14:00:39 +0000
ROA not before:           Thu 04 Dec 2025 14:00:39 +0000
ROA not after:            Wed 04 Mar 2026 14:00:39 +0000
asID:                     20253
IP address blocks:        2606:bc40:f22::/48 maxlen: 48
                          2606:bc40:f003::/48 maxlen: 48
                          2606:bc40:f004::/48 maxlen: 48
                          2606:bc40:f005::/48 maxlen: 48
                          2606:bc40:f006::/48 maxlen: 48
                          2606:bc40:f007::/48 maxlen: 48
                          2606:bc40:f008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:13:66:2e:f2:71:86:57:1d:4d:0f:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Dec  4 14:00:39 2025 GMT
            Not After : Mar  4 14:00:39 2026 GMT
        Subject: CN=86d3326b-92d1-434f-95b7-4a2f8de18d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a2:3a:02:03:0b:b8:3d:84:93:2d:28:16:d5:
                    aa:04:4e:ba:31:f4:6a:23:41:55:7a:33:ac:b0:42:
                    a5:cd:01:a7:73:0c:2a:88:72:39:a2:23:2b:76:e2:
                    39:c2:a9:b1:1b:85:f2:e8:f2:93:f0:05:4d:0f:4f:
                    35:d7:d7:79:60:11:1a:16:f3:bd:27:bc:3c:2c:a6:
                    f7:2c:fc:73:ab:73:7d:56:2c:c2:68:e8:04:22:81:
                    bb:eb:a6:4b:62:65:26:8b:7f:22:5e:b9:0f:de:9d:
                    db:d4:12:6b:75:f8:28:48:ea:21:6e:53:43:3e:3a:
                    b9:f7:3e:9e:53:fd:da:7a:89:86:3f:f6:e6:2f:67:
                    90:f4:7e:a7:76:2c:95:43:b4:c4:8c:fc:01:8e:33:
                    61:d0:ac:30:67:b7:ae:05:35:7a:0f:df:98:77:9f:
                    ac:13:10:b5:ad:af:15:20:61:55:fc:7d:6d:1c:bc:
                    2a:d4:05:54:92:fe:c9:5b:6e:94:2a:10:9f:4b:5f:
                    ba:4f:22:c8:cd:e9:ef:48:b0:32:72:90:fa:fb:b8:
                    d9:f5:80:f2:1e:89:fa:12:40:e5:e3:c9:de:ff:1f:
                    8a:c3:a5:16:a6:3d:4d:89:cb:ad:f2:de:2f:c5:f1:
                    14:eb:86:b9:68:52:9c:5b:cd:e6:d8:8a:f0:e0:fd:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:17:EF:40:27:DC:0B:39:77:29:39:C3:F7:0E:7B:38:5C:D5:7C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8874e898-e505-3973-bcfd-eed796109e46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f22::/48
                  2606:bc40:f003::-2606:bc40:f008:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:8d:4e:06:19:bf:b6:ea:81:11:04:be:7b:e9:1e:ba:a2:1e:
         6e:e5:d0:10:7e:cc:bf:fb:e5:7b:b8:05:8f:4a:e4:f6:f7:e2:
         4a:21:18:bc:0e:b0:e4:4e:81:2b:79:da:06:fa:c9:86:22:7e:
         47:97:dc:b6:85:94:34:c9:b9:f2:98:9a:a5:b6:4c:aa:91:0b:
         14:64:d0:5d:df:30:1b:1b:c5:f2:a9:74:5c:26:8b:6c:d3:0e:
         6b:b2:43:ee:c4:4f:60:c8:5e:9d:fe:38:47:90:b2:80:15:ff:
         d2:be:78:ac:3e:37:6e:6f:d6:b3:7b:6f:dd:d3:a8:4a:8e:f9:
         fe:ad:11:92:a6:d7:83:ef:9b:bb:ec:1f:81:5b:4a:7c:c9:dc:
         e7:cf:aa:ca:cb:5b:64:a7:11:3a:3f:07:b5:0d:df:dc:9e:4e:
         f8:3f:d8:ab:d2:c1:74:fe:9c:6d:db:f1:16:82:ca:13:61:20:
         33:bc:80:dc:d1:cf:4d:25:2f:1f:c7:95:60:d4:53:e8:0d:5e:
         f2:72:75:47:d6:0a:4b:1f:e2:52:fe:ea:50:d1:7e:e8:f2:86:
         4a:1c:09:be:5e:d7:9a:ac:c3:e2:ac:10:de:80:86:73:49:a5:
         26:4b:0b:2a:27:66:c2:59:1a:46:3e:3b:6f:db:97:93:4f:a2:
         38:b6:0c:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 18 18:53:38 2025 by rpki-client