This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/2cdf970a-7f2d-3222-9c55-7f6ab531aee2.roa
File:                     2cdf970a-7f2d-3222-9c55-7f6ab531aee2.roa (raw, json)
Hash identifier:          Rk1i7V1MJWUKY6gS6BlIDWjjf1sW5StvX9H1sOHWwMA=
Subject key identifier:   A6:7B:CF:77:5B:1F:E2:07:F5:9D:64:BA:CC:5F:81:03:48:68:03:8F
Certificate issuer:       /CN=6113eb89-bf69-4116-bfc3-0595a44ef76d
Certificate serial:       010D0C9F4328584C83B0B63377B7570BDB537E00
Authority key identifier: CF:E9:ED:BE:3C:69:56:BF:C7:48:C5:56:9E:93:D7:74:39:89:C1:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/2cdf970a-7f2d-3222-9c55-7f6ab531aee2.roa
Signing time:             Tue 13 Jan 2026 19:21:35 +0000
ROA not before:           Tue 13 Jan 2026 19:21:35 +0000
ROA not after:            Mon 13 Apr 2026 18:21:35 +0000
asID:                     399133
IP address blocks:        169.197.129.0/24 maxlen: 24
                          2602:fb9c::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/6113eb89-bf69-4116-bfc3-0595a44ef76d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/6113eb89-bf69-4116-bfc3-0595a44ef76d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:83:b0:b6:33:77:b7:57:0b:db:53:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6113eb89-bf69-4116-bfc3-0595a44ef76d
        Validity
            Not Before: Jan 13 19:21:35 2026 GMT
            Not After : Apr 13 18:21:35 2026 GMT
        Subject: CN=9cc6c934-a3b3-4daf-b745-7ce2f3cccbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:af:d3:e4:10:14:72:62:5f:36:de:9f:48:
                    01:fe:7a:fe:dc:ac:7d:f6:f0:84:72:9a:64:2d:59:
                    a7:53:ec:5d:3d:cc:cf:18:d3:cf:f5:31:5d:f3:7d:
                    80:69:af:52:37:db:a6:4f:5a:79:e0:48:df:d0:cd:
                    98:d0:26:e9:b6:37:ad:f9:69:b2:7c:cf:09:dd:b8:
                    12:1b:67:59:51:e2:42:a8:2e:84:9b:09:bb:3e:01:
                    c8:51:0e:ec:ff:91:f8:b6:17:3f:9b:70:c9:d3:dc:
                    d2:15:71:cb:4a:22:39:64:1d:23:5c:4e:63:ec:c7:
                    2a:00:5d:62:c2:21:66:66:2a:aa:41:dc:11:3e:a9:
                    86:97:f5:a4:8e:31:26:c7:08:37:8e:2a:4f:e3:5b:
                    a3:d3:93:c2:b2:17:23:30:4b:72:28:cc:02:61:41:
                    ba:0a:f7:c9:47:52:40:7e:19:7f:14:f9:a3:12:b2:
                    fb:3c:3e:21:e8:2e:d1:71:14:0c:5e:d5:4d:1a:67:
                    b8:45:00:a8:6f:97:40:fa:0f:da:29:3d:91:bf:3d:
                    68:21:c8:09:a5:c5:bd:81:7a:ad:c9:9a:92:16:66:
                    e2:b1:fc:c5:62:43:32:96:7b:8c:10:bb:fb:cd:f5:
                    40:9e:a4:62:e8:79:29:c7:0e:67:7b:51:f8:a6:e8:
                    f6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:CF:77:5B:1F:E2:07:F5:9D:64:BA:CC:5F:81:03:48:68:03:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/2cdf970a-7f2d-3222-9c55-7f6ab531aee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/6113eb89-bf69-4116-bfc3-0595a44ef76d.crl

            X509v3 Authority Key Identifier:
                keyid:CF:E9:ED:BE:3C:69:56:BF:C7:48:C5:56:9E:93:D7:74:39:89:C1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.129.0/24
                IPv6:
                  2602:fb9c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:6b:b8:b7:39:df:65:f9:24:13:30:66:23:be:e8:00:5e:
         f8:38:e6:d2:08:39:56:08:b7:9f:d3:20:15:33:b1:3d:45:1c:
         a0:d5:d9:4a:dc:14:75:0c:bd:db:0c:b6:28:cb:4c:53:fd:65:
         e9:b5:da:de:56:e3:42:af:1f:5a:d6:bb:29:e6:6b:7d:15:d1:
         9f:86:0e:a8:a4:7b:ce:ea:6e:a4:35:3b:d3:1b:23:0b:fe:8a:
         b7:16:cd:17:36:2d:55:d3:cc:45:c9:68:0a:30:76:4b:a3:b2:
         66:c4:c2:14:43:20:a8:49:a7:9a:e8:39:5a:d0:bd:cb:e0:7d:
         24:a7:af:9b:b1:60:a3:be:a7:98:2b:0b:97:5e:ef:ab:05:34:
         b7:f2:70:4f:af:6c:3a:51:b5:a4:cb:69:85:a8:00:c5:ec:85:
         b6:78:83:19:25:90:1b:d6:63:9b:76:f5:b6:e8:bb:5f:3e:b4:
         ca:5e:3a:0b:6d:4b:ab:c8:d0:62:2e:41:b4:9f:bc:75:18:d9:
         53:41:57:55:74:10:9c:c6:fb:35:3e:1f:56:e5:23:1c:05:90:
         12:8e:b5:99:27:e8:3a:a7:6e:32:ca:31:20:11:91:ea:19:bb:
         be:59:ef:63:13:a5:9b:97:d1:3d:d5:6e:a8:c1:8d:5a:2e:2e:
         e4:c0:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:07:28 2026 by rpki-client