This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa
File:                     3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa (raw, json)
Hash identifier:          H4a7bivuAaMvaVyDZ3ubGrcI9LbsTquF8OM4AeA04e0=
Subject key identifier:   15:AE:DC:3E:DC:A6:5E:61:54:78:46:D5:2F:23:FD:94:34:7F:89:EE
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C45A6A4D2442F8B670B21D4B0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     12041
IP address blocks:        2001:500:ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a6:a4:d2:44:2f:8b:67:0b:21:d4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=906e3429-ff92-4522-86a6-55306a09b305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:b6:be:0d:23:0f:9a:81:4a:25:71:6d:f2:
                    23:44:e0:9d:b3:38:b2:73:d7:e4:70:16:e1:2b:04:
                    75:61:d2:a1:5e:5e:f0:3e:b7:b3:89:fd:54:e5:63:
                    f4:d7:0c:e2:9e:90:c8:19:3c:f3:49:a9:87:77:4c:
                    56:16:3a:4a:85:42:0e:35:d0:6b:c6:5d:18:f6:10:
                    b6:1c:31:89:50:4c:9e:44:22:9d:f6:58:89:7d:46:
                    8b:64:b7:ff:0f:2c:4a:06:94:05:e8:2a:9f:20:96:
                    56:eb:e2:e3:84:47:16:bd:df:da:f3:c1:6e:48:3c:
                    93:4c:67:b4:a6:2a:db:81:d3:a7:4d:a0:01:d7:ec:
                    75:ee:6b:dc:89:f9:49:97:09:d9:a8:59:24:39:d0:
                    a2:0a:28:30:a9:4a:5f:54:aa:83:87:e5:07:2f:93:
                    7e:d5:59:b8:7f:15:a4:0e:94:69:14:d2:67:0e:c1:
                    59:18:92:aa:e8:73:c5:4e:14:7d:a2:0e:30:29:cb:
                    fb:bd:c1:fa:81:f6:0f:8c:94:8b:5b:80:ac:d5:14:
                    b0:27:27:da:f0:c0:ed:e4:25:e0:1c:9e:90:8b:94:
                    bf:7d:5e:83:c2:7f:e4:9c:9b:c3:bb:c3:5d:70:71:
                    76:70:a8:da:11:f3:7b:df:14:b3:50:fd:02:b5:69:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:DC:3E:DC:A6:5E:61:54:78:46:D5:2F:23:FD:94:34:7F:89:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:56:b5:33:74:4e:79:fe:ca:ca:ea:aa:d0:f5:b6:ae:5e:
         c7:cf:34:60:24:07:da:cc:9f:9e:f2:c2:45:30:cf:e7:ad:aa:
         db:e9:01:b7:d2:90:43:3d:ad:07:a8:67:18:9b:83:43:36:9e:
         11:41:e0:47:32:ca:fa:14:91:5d:fd:3c:66:60:4a:45:f9:d1:
         5d:88:6b:16:53:39:1a:ec:e4:d6:80:0f:5f:eb:85:73:07:9f:
         83:5a:8c:03:ed:5a:28:d6:c1:98:c9:d9:50:19:3a:a3:87:d6:
         25:25:b3:96:30:dc:f7:83:b3:12:66:52:0e:36:3f:6a:0c:4d:
         15:3d:45:53:94:f9:4b:ee:7f:a8:c1:a1:46:31:86:ee:e2:ec:
         4f:d4:e2:2e:57:5d:69:9c:80:33:89:2c:fc:60:3e:cf:c8:54:
         e9:81:c2:f6:de:78:b5:3d:10:b2:74:5f:87:c5:d0:43:b8:cc:
         e2:06:ae:11:9e:80:48:b7:9e:1e:8f:db:77:d9:9e:a9:78:8f:
         e1:7c:86:11:8e:1f:74:95:6b:18:dd:36:81:a2:66:ff:3e:2f:
         29:79:3f:df:18:1c:57:ed:e4:6e:bd:34:25:b2:3a:da:7e:a5:
         85:eb:b7:d2:7c:f1:8b:21:4b:a5:b4:b4:49:53:79:1b:a1:d8:
         0f:ce:2b:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFpqTSRC+LZwsh1LAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk
OTA2ZTM0MjktZmY5Mi00NTIyLTg2YTYtNTUzMDZhMDliMzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeK2vg0jD5qBSiVxbfIjROCdsziyc9fkcBbh
KwR1YdKhXl7wPrezif1U5WP01wzinpDIGTzzSamHd0xWFjpKhUIONdBrxl0Y9hC2
HDGJUEyeRCKd9liJfUaLZLf/DyxKBpQF6CqfIJZW6+LjhEcWvd/a88FuSDyTTGe0
pirbgdOnTaAB1+x17mvciflJlwnZqFkkOdCiCigwqUpfVKqDh+UHL5N+1Vm4fxWk
DpRpFNJnDsFZGJKq6HPFThR9og4wKcv7vcH6gfYPjJSLW4Cs1RSwJyfa8MDt5CXg
HJ6Qi5S/fV6Dwn/knJvDu8NdcHF2cKjaEfN73xSzUP0CtWky4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBWu3D7cpl5hVHhG1S8j/ZQ0f4nuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Q5ZjkyNmItNDNlNi0z
YmRhLTg2YTMtYjBjNGUxN2MwYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGpJVrUzdE55/srK6qrQ9bauXsfPNGAkB9rMn57ywkUwz+etqtvp
AbfSkEM9rQeoZxibg0M2nhFB4EcyyvoUkV39PGZgSkX50V2IaxZTORrs5NaAD1/r
hXMHn4NajAPtWijWwZjJ2VAZOqOH1iUls5Yw3PeDsxJmUg42P2oMTRU9RVOU+Uvu
f6jBoUYxhu7i7E/U4i5XXWmcgDOJLPxgPs/IVOmBwvbeeLU9ELJ0X4fF0EO4zOIG
rhGegEi3nh6P23fZnql4j+F8hhGOH3SVaxjdNoGiZv8+Lyl5P98YHFft5G69NCWy
Otp+pYXrt9J88YshS6W0tElTeRuh2A/OK+s=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:59 2026 by rpki-client