This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa
File:                     3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa (raw, json)
Hash identifier:          PQyjvR48mcfcn5zaBoKmJlEBxjZosMvs/kX79akYxpE=
Subject key identifier:   BE:85:85:8C:BE:07:32:C4:5B:8D:DE:DA:26:06:0A:19:26:24:BA:AE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C6EBD3189FD1418DED640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     17408
IP address blocks:        2001:470:25e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:6e:bd:31:89:fd:14:18:de:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=1e56ebff-1e10-424e-aa91-1b6a8a2245ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ae:a5:98:d8:99:eb:22:bc:3e:5c:9e:94:80:
                    9b:c0:f9:90:9d:c2:39:95:73:6a:0e:2e:bb:bb:72:
                    c2:a3:b8:63:0c:4a:98:67:91:6e:de:1b:36:ec:af:
                    2c:1e:b5:bf:5b:ab:2b:27:b3:f7:38:42:1c:89:26:
                    6e:71:dd:2d:34:67:9c:ee:f9:b7:9a:47:6e:c4:cc:
                    25:d5:4f:7c:05:18:e6:2b:41:22:cc:40:67:47:12:
                    93:30:e1:07:05:77:a1:0b:d2:e2:3d:25:ff:54:eb:
                    8c:c2:b4:ac:e3:ab:e3:22:df:59:30:f0:f8:0d:39:
                    d5:4e:dd:71:27:ed:68:05:4c:13:64:1d:95:ca:8e:
                    d4:40:c1:67:aa:38:c5:a4:0a:3c:8d:9a:39:33:ee:
                    3e:ca:0e:d5:85:a2:ef:57:f9:b6:47:51:a9:96:97:
                    ff:05:0a:63:10:33:e2:24:f5:4f:b8:12:82:93:06:
                    f7:da:10:26:f3:db:a6:7d:9b:0c:b3:ec:65:44:4c:
                    9a:39:4a:99:ce:3a:a9:52:98:00:b0:ef:40:08:1e:
                    7e:81:93:c0:42:e5:1c:14:1a:5a:9a:75:11:30:e8:
                    14:85:ef:22:59:9c:cd:c0:a2:40:91:02:2b:27:14:
                    e1:c7:e4:5d:49:87:8e:f4:b5:a2:43:ff:99:38:11:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:85:85:8C:BE:07:32:C4:5B:8D:DE:DA:26:06:0A:19:26:24:BA:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1a:40:48:59:50:14:18:e5:b9:61:49:f4:d0:db:ac:1c:3e:
         84:3e:08:e6:c3:83:37:42:31:86:5d:f8:77:a6:bb:93:41:ca:
         65:24:49:11:4a:86:20:c1:30:52:3d:68:65:10:f7:77:c0:61:
         74:70:72:45:67:d5:50:81:a7:da:08:52:d7:6b:77:79:27:82:
         a5:d5:5a:9f:c5:1f:32:f0:75:5c:62:e9:cb:d2:06:42:07:76:
         8b:d9:2c:73:f0:09:40:e4:73:77:94:e4:af:47:a2:07:95:9f:
         a1:dc:64:cf:06:60:f6:ff:e3:77:af:17:48:be:2c:cc:0f:00:
         6a:67:dd:1d:63:73:59:d5:52:58:1e:0e:25:2d:4b:f8:e7:93:
         87:0c:80:7d:68:36:b3:b1:72:ac:15:11:0b:5b:2e:64:e3:47:
         50:f6:93:91:cf:96:ec:24:e7:3a:6f:04:f1:0b:80:10:3c:c5:
         2f:7c:42:c0:47:be:9c:9d:97:cf:7e:8e:8e:c1:0a:26:d3:35:
         e8:95:31:6e:ce:80:d4:4c:56:bf:99:43:24:61:3c:98:fd:97:
         cd:df:94:bb:04:e7:c6:85:82:3d:6c:a7:45:af:b5:10:06:ec:
         fa:0e:b1:8e:30:4b:c1:c8:d8:13:23:ed:77:12:71:69:a2:f1:
         dc:bb:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:48:33 2026 by rpki-client