This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa
File:                     3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa (raw, json)
Hash identifier:          Ohr++9SoGxwh8WLTM0XSBafdNhfebSP1F/H0+j/d8E0=
Subject key identifier:   55:8D:29:2E:23:75:1D:A2:25:E6:AA:49:46:83:45:4A:1E:16:7F:89
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C45A82E371F1AD385AF1E7400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     12041
IP address blocks:        2001:500:d3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a8:2e:37:1f:1a:d3:85:af:1e:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=f8700907-db04-4ddd-8bcd-ce541c5689b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:8d:c1:bb:6a:79:22:b0:52:4a:b8:03:00:
                    c2:4b:49:4f:c3:f8:0e:d9:1c:6e:d6:b3:b2:07:3f:
                    d6:77:23:79:9e:aa:c7:90:e8:d8:fd:51:19:fe:3b:
                    33:98:7d:2c:a6:56:ad:05:12:90:e8:4b:1e:27:45:
                    2e:fa:6b:fb:13:14:7e:50:4e:b4:b9:cb:b8:de:f6:
                    75:d5:fd:89:ee:1d:f0:dc:00:6c:5c:bf:64:80:62:
                    fd:d3:dd:b2:78:c0:58:57:96:7d:ba:40:92:5a:72:
                    6e:28:41:c3:65:d4:94:45:65:d5:ee:17:b9:50:fa:
                    3f:bd:58:3f:57:5a:03:4e:a5:de:44:aa:de:ab:9b:
                    fc:fc:5a:7c:c8:81:fa:d0:00:56:08:48:7f:1f:a5:
                    2d:20:2c:ce:70:dc:91:59:d1:ee:49:43:07:79:32:
                    d2:91:4b:9b:55:1e:69:c0:bd:7d:5e:74:9b:9c:8d:
                    80:ce:f5:a4:fa:ef:84:53:81:cd:9f:59:e2:55:30:
                    fb:cc:c2:c4:53:7b:be:a9:9f:96:47:45:b5:79:b6:
                    d7:96:ae:b6:4a:b8:0a:68:07:d6:a7:0d:92:77:5f:
                    39:21:f8:4b:79:d0:00:45:8a:ad:3c:d9:a7:24:91:
                    9e:d2:0d:bd:82:cd:63:b4:36:6b:71:01:ec:49:99:
                    23:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8D:29:2E:23:75:1D:A2:25:E6:AA:49:46:83:45:4A:1E:16:7F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:05:b8:ee:c4:02:bb:34:13:19:d8:c4:9f:e7:10:f0:b7:
         59:10:f2:09:4e:d5:fc:f6:b2:d7:54:ca:85:f4:a4:b5:f2:fa:
         9f:5b:fe:23:f7:4c:57:7b:b3:a9:62:02:b6:89:2a:e3:8d:11:
         a5:f7:d9:b1:dd:82:44:e1:99:6e:11:72:34:0f:86:59:a2:b9:
         e3:90:57:ad:ed:0e:ff:41:cb:84:cd:4d:a3:d6:10:ed:37:a3:
         b0:fa:77:a3:b7:6e:f3:b6:18:99:8e:a0:ed:36:a9:0f:ba:67:
         58:f6:96:0c:e6:85:3c:f2:70:c4:a0:d0:40:31:2d:05:bc:82:
         c6:d0:eb:e7:8c:28:7d:85:e7:e4:0c:67:5f:9e:44:99:84:fb:
         2f:0a:a0:a8:a7:5f:99:4a:5c:60:fa:b6:d5:09:cc:4c:08:25:
         cf:84:66:23:2a:d2:fc:f3:65:58:f6:61:4f:d6:fd:85:8a:74:
         3f:2b:39:ad:c1:d8:3f:1b:2d:ef:1f:ba:bb:7f:59:4c:fa:a0:
         db:28:4a:9c:b1:52:d9:40:ac:cc:24:ba:15:da:59:d0:40:d2:
         f0:17:1f:a1:f7:1d:6b:aa:49:03:11:40:d2:09:63:72:aa:05:
         5f:94:e2:9e:2c:c4:e6:4e:b0:78:15:d3:74:d3:a2:65:90:50:
         67:c5:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:35:08 2026 by rpki-client