This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa
File:                     f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa (raw, json)
Hash identifier:          4rhNSYeHOvUEbOp551XBs4C7JssGBuTzOw2yNjPRuvk=
Subject key identifier:   48:7F:C3:74:A0:FE:DE:EB:46:C2:06:AA:12:16:F4:C8:B0:60:D6:1C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C4440FBFFB1F8FC46E3A98C80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa
Signing time:             Mon 22 Dec 2025 02:00:32 +0000
ROA not before:           Mon 22 Dec 2025 02:00:32 +0000
ROA not after:            Sun 22 Mar 2026 01:00:32 +0000
asID:                     207266
IP address blocks:        2001:500:47::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:44:40:fb:ff:b1:f8:fc:46:e3:a9:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 22 02:00:32 2025 GMT
            Not After : Mar 22 01:00:32 2026 GMT
        Subject: CN=9b16e72f-5ef5-4af6-a7e9-1d0d8c81527b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:40:f6:40:9e:b7:29:30:30:a4:e3:8e:40:
                    54:1f:46:e1:df:b3:a5:59:c4:75:15:cb:fe:38:11:
                    61:80:a9:3b:e4:10:d0:d8:a4:81:8e:aa:48:0f:9c:
                    7e:7e:45:d3:46:83:79:e7:af:44:1c:b2:cd:64:62:
                    77:36:9b:d7:18:0f:9e:73:33:34:7e:ea:35:05:75:
                    fd:cb:5b:df:fe:0f:29:9e:3d:36:c5:47:e3:b4:61:
                    4a:e5:89:0e:d0:dd:bf:17:ee:6c:d9:6d:e2:b8:12:
                    29:77:c2:01:75:5f:8f:05:c3:b5:2e:65:c7:f5:38:
                    2a:2e:2b:91:9b:fd:29:ec:34:13:aa:96:9d:88:1d:
                    7f:04:ff:79:d6:90:be:c4:01:58:96:2d:aa:53:18:
                    a5:32:a6:d2:16:7d:11:1f:18:d2:cd:0e:69:a7:f1:
                    20:aa:32:4e:a5:a3:e9:e9:27:8e:ba:0d:17:4f:ed:
                    69:58:b3:37:9f:07:97:4e:3d:57:1d:d6:b1:01:ec:
                    98:6e:48:c4:a2:93:94:f6:f0:7c:48:c7:90:cd:ea:
                    31:db:a8:ec:68:1d:ce:e5:2b:3d:6d:36:41:67:61:
                    a1:20:0e:1d:c2:e1:c2:04:e4:3f:02:d4:10:9f:4a:
                    46:8a:d1:48:b1:fb:e7:6b:4a:d6:7c:2a:ac:ae:af:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7F:C3:74:A0:FE:DE:EB:46:C2:06:AA:12:16:F4:C8:B0:60:D6:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:47::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:11:1e:87:7f:14:6f:2f:a2:02:b9:6c:3e:3b:61:1a:32:5a:
         fa:41:30:91:5d:af:45:28:34:7d:ab:9e:f3:fb:08:5e:02:ac:
         e2:d2:7f:a1:9c:8b:7f:d5:22:0b:6a:84:4d:08:44:27:08:b3:
         ee:6a:aa:56:0d:08:61:64:5f:2b:17:6a:15:be:87:8b:a1:cd:
         40:6a:15:78:84:32:d4:03:b1:92:08:d4:3d:20:d6:ff:de:aa:
         c6:52:c6:ac:b6:0f:7b:bd:c0:4f:10:fc:f4:ab:df:3f:ec:dc:
         e0:24:42:82:d0:7e:0f:c7:81:e3:bd:bb:48:08:88:70:01:f5:
         24:4f:db:19:2e:d3:37:14:0d:9e:81:12:bd:dc:28:78:d0:7b:
         40:9a:19:09:42:33:e7:b7:fc:cb:06:1f:2c:8d:5d:5b:b9:1c:
         4b:ea:d5:ba:2f:07:87:db:a6:75:a3:40:66:44:ad:a6:46:78:
         29:ca:eb:39:4c:50:3e:17:a1:d1:ca:d2:2a:13:ee:7a:e0:db:
         9f:cd:d5:47:3f:ba:50:a4:a3:c6:d9:98:df:8e:0a:11:ad:88:
         19:e9:d4:fb:33:a6:f9:04:b8:a6:5c:c5:24:dc:b0:e7:84:ca:
         01:a9:e2:e6:40:84:96:26:63:a4:a2:1a:a2:04:be:d7:37:59:
         4c:fb:16:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:26 2026 by rpki-client