This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa
File:                     1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa (raw, json)
Hash identifier:          V1cr1GQh6ywOkQEFL+whCTyJMdvI+NUzE/J0zte4I+s=
Subject key identifier:   F5:C5:8A:65:8C:8D:01:F0:E6:FF:70:0E:CE:27:84:E6:52:C5:CE:2C
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584BF1E5E140215CE626E8B29F80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa
Signing time:             Sat 22 Nov 2025 14:00:39 +0000
ROA not before:           Sat 22 Nov 2025 14:00:39 +0000
ROA not after:            Fri 20 Feb 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        2620:116:800c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f1:e5:e1:40:21:5c:e6:26:e8:b2:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Nov 22 14:00:39 2025 GMT
            Not After : Feb 20 14:00:39 2026 GMT
        Subject: CN=020450d0-041f-418f-b19b-2a7a6b933ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:57:cc:53:42:c4:b3:1c:0f:ba:ad:0b:f4:47:
                    99:0d:5e:42:44:cf:b7:4a:e8:e3:38:fd:9d:0a:c7:
                    be:d6:e4:fa:4c:02:c9:9b:5a:11:1b:8a:92:46:22:
                    34:cb:1b:86:f3:67:bf:de:93:3e:8b:18:cd:fb:db:
                    3b:d3:53:75:8f:a7:b0:45:40:44:e3:fe:e7:d0:c8:
                    23:40:af:39:11:bd:79:10:e1:de:dc:f6:e6:23:2e:
                    b4:ac:f2:64:d2:5c:96:fa:22:8f:35:90:32:a5:56:
                    a6:af:91:f7:cb:4c:1b:30:67:be:2e:bb:56:87:5d:
                    7c:f6:7b:b2:b8:4e:e4:6b:0d:a6:96:3f:e9:2c:ce:
                    b0:ff:c8:2c:ad:f2:7d:d8:ee:04:db:40:7f:06:0a:
                    ae:3d:25:52:c4:27:56:f1:20:bc:29:ca:cf:a4:a4:
                    31:e8:4c:3f:e6:5e:be:ec:75:1f:a0:d4:3e:97:fe:
                    4c:72:ee:ba:7c:5e:0e:f0:bc:84:69:00:95:16:da:
                    04:5f:10:da:1d:df:02:cf:50:72:57:fd:fb:6e:b3:
                    ac:b0:8d:df:ec:88:9e:33:38:72:8e:aa:3f:fa:4b:
                    42:24:16:24:be:37:fb:b6:2d:f3:15:1b:08:58:78:
                    54:56:df:bc:d7:f8:59:0b:2b:97:3c:c4:24:b5:d2:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:8A:65:8C:8D:01:F0:E6:FF:70:0E:CE:27:84:E6:52:C5:CE:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:dd:3c:a6:d4:b6:0c:b0:b1:99:57:14:aa:6c:42:16:ef:
         22:4d:d4:f4:48:88:ea:c0:96:1d:81:06:fd:fa:06:94:13:05:
         70:d2:13:dd:d4:3a:b2:22:9d:96:2e:bf:df:38:bb:c7:f2:f3:
         6b:e8:bc:22:04:ac:83:85:5b:9f:08:e1:71:b0:98:be:f6:ae:
         9a:9d:72:5a:42:80:d0:24:d8:6f:7d:ac:a6:e6:73:ec:93:13:
         6b:23:11:f4:16:3d:bf:95:a9:28:35:cd:c8:40:f8:93:cf:a8:
         41:44:aa:b6:fd:1d:0a:25:8b:0a:0a:58:cd:1f:0f:5c:cb:89:
         a5:ab:5e:9d:65:05:86:9a:8f:0d:35:e3:1f:a3:b3:a4:2a:06:
         89:e3:f9:cb:28:aa:54:60:38:97:49:1c:0f:a7:ac:d0:0c:38:
         93:c8:ed:7d:08:d4:1a:f9:cf:39:bb:93:3c:85:5c:c7:4c:54:
         da:fc:51:0b:47:e1:12:28:df:34:94:f6:bc:51:ad:c9:e0:0a:
         28:d9:80:bc:6e:95:44:b3:a1:8e:61:17:6d:3e:44:b2:35:b8:
         9f:d1:f6:41:f3:2b:c2:26:93:e4:77:f4:90:6c:c3:37:e3:14:
         62:3a:c9:6b:64:12:fa:1d:86:51:74:94:44:8e:15:79:57:bd:
         dd:d7:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:54:06 2025 by rpki-client