This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa
File:                     85bba22a-31d7-3277-9d23-3f253e7d429a.roa (raw, json)
Hash identifier:          iVRN0FgoFzC3xniIUD0umO5673b7Sp5nynvImC4T97M=
Subject key identifier:   B0:8F:E6:6B:8C:C3:F7:EA:44:27:D9:11:9A:BB:D1:B9:3F:DB:97:71
Certificate issuer:       /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial:       010D0C9F4328584C602BDA3282F9C7C26F75EBE0
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa
Signing time:             Thu 01 Jan 2026 02:00:31 +0000
ROA not before:           Thu 01 Jan 2026 02:00:31 +0000
ROA not after:            Wed 01 Apr 2026 01:00:31 +0000
asID:                     6653
IP address blocks:        2604:280::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:60:2b:da:32:82:f9:c7:c2:6f:75:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
        Validity
            Not Before: Jan  1 02:00:31 2026 GMT
            Not After : Apr  1 01:00:31 2026 GMT
        Subject: CN=7d2ef895-a706-4184-baad-10f14ec233d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:dd:c2:21:c9:47:6f:f6:f5:3c:18:a4:d2:
                    07:4c:71:ca:8f:55:cc:0a:b3:ea:0b:c0:c9:a9:0d:
                    23:4f:0a:08:60:5d:59:5a:ed:e1:ba:8f:3c:fe:86:
                    3d:be:61:7e:37:5f:17:fc:e2:44:65:58:41:69:bf:
                    06:3e:e6:6e:c2:2a:0e:07:8f:17:52:34:24:2e:e7:
                    ad:ae:0a:00:b5:31:ba:9f:4d:01:aa:6e:fa:95:36:
                    f0:fd:65:5c:65:ab:f4:2c:8a:b0:b9:44:e8:8b:8a:
                    1e:47:28:40:cc:30:61:89:d7:60:91:dc:b4:24:59:
                    11:a7:a0:50:71:e7:86:7e:64:9a:98:47:6c:b8:68:
                    91:d1:13:9a:7d:75:21:95:a5:ed:be:08:b0:0e:35:
                    e0:34:e9:6e:1c:d7:d3:23:79:8e:53:e8:7d:b4:1a:
                    15:70:73:d6:c5:29:c0:19:61:b9:f5:61:9f:c6:57:
                    10:73:2e:6d:19:69:e3:1b:0d:53:b2:66:37:6d:5e:
                    59:f5:68:4a:62:1b:ce:ad:39:fa:38:db:d8:da:31:
                    06:3f:75:14:9f:0d:10:bf:ff:8b:31:08:e4:56:dc:
                    3d:f4:81:17:a4:ae:e4:91:5b:d9:9e:ec:d3:2f:79:
                    bd:ac:79:67:1e:25:ce:b0:2b:9a:b2:cc:5a:a7:32:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8F:E6:6B:8C:C3:F7:EA:44:27:D9:11:9A:BB:D1:B9:3F:DB:97:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl

            X509v3 Authority Key Identifier:
                keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:2e:d9:d0:4f:5a:23:11:88:c5:85:49:ce:e1:a1:00:10:
         c7:b4:ca:63:61:99:39:10:84:bd:f9:35:26:2d:90:a8:ac:7a:
         ed:03:ab:cf:14:55:45:89:9e:ef:3a:71:4e:8b:4b:09:74:f0:
         24:71:b0:a1:c0:53:ac:1b:9a:13:f5:dd:5f:3a:d1:1c:be:25:
         f7:e5:27:4f:b0:12:6c:e4:dc:42:c1:a7:3a:2d:de:74:12:75:
         91:87:f2:8d:c9:69:aa:1b:f2:16:1f:37:b8:7e:33:e4:47:69:
         c2:af:15:45:98:ca:37:82:d9:46:b2:2c:1a:3e:b5:ac:1f:b7:
         d5:f3:da:12:21:16:05:92:b4:70:8f:80:70:a8:45:86:ed:4b:
         f2:92:41:72:91:f6:ea:41:1f:2f:ab:10:90:41:d6:cc:73:ab:
         d9:6a:f9:cb:39:ae:9d:12:e2:bc:b5:18:85:b1:a6:7c:1c:c3:
         fe:2a:8a:c6:6c:92:89:3d:3c:5e:b0:ab:3a:f1:67:87:03:f4:
         49:66:b8:e5:3d:fa:1f:03:1a:23:8b:b0:53:20:94:24:c7:89:
         0f:1e:47:f6:cf:4c:12:c4:02:e3:39:97:b6:cd:06:34:4b:39:
         e9:49:eb:35:cb:84:47:e2:51:9c:66:43:24:c9:bc:3b:a2:6e:
         68:f6:9b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:19 2026 by rpki-client