This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa
File:                     40c0a776-c145-3a93-b32c-e24909188dcc.roa (raw, json)
Hash identifier:          BIlxA3r77ZqbIhTsDDtCg9Pa31fP1E97Qvp5AdF6OLk=
Subject key identifier:   8B:7D:98:74:2D:CD:8E:C8:36:16:3F:24:35:ED:29:C9:5F:6F:41:5E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C66DEBF8B5AC705F40240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     22296
IP address blocks:        2001:470:8f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:66:de:bf:8b:5a:c7:05:f4:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=17cef158-b162-4a45-bd54-2dc23c29ef3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:3f:29:2c:74:e3:a1:56:64:ac:1f:f7:00:
                    a6:5f:1e:92:ac:d6:64:cc:4c:c2:26:80:fe:cc:5f:
                    81:1c:4a:d7:b6:38:6a:73:f2:aa:5a:09:58:f4:13:
                    cb:03:fa:ad:74:89:04:38:ad:d3:95:d0:74:19:84:
                    96:f8:8c:0c:ad:3f:9f:2f:da:0c:60:74:db:c6:06:
                    e1:d0:2b:28:07:a6:04:60:7e:54:45:26:c2:f7:c4:
                    1f:93:98:91:17:dc:be:bf:b7:6c:db:9d:18:4d:fd:
                    7a:65:1a:f9:4c:d5:0c:24:6c:25:48:96:09:3f:1c:
                    aa:48:dc:28:44:10:35:e0:db:77:43:91:7d:e7:ad:
                    cc:90:83:8c:78:a7:e4:58:2c:f1:5d:6d:7c:61:02:
                    63:1a:26:ea:d5:94:de:43:2c:c2:93:a2:5d:c7:7e:
                    57:8a:28:cb:4a:22:d6:87:0b:90:a0:7b:9d:70:f1:
                    dd:d2:be:9c:6a:f4:91:19:40:33:e0:51:86:34:a5:
                    01:fc:97:5e:4c:ff:d0:17:d9:43:e7:8b:bf:5c:99:
                    ae:d2:02:2d:1b:e2:5a:35:89:45:a1:cf:c5:df:73:
                    3e:7a:c4:a6:db:93:b6:73:65:84:38:18:99:63:bd:
                    f7:35:dd:4c:c5:f6:b6:3e:d3:a6:7f:cc:d3:99:de:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7D:98:74:2D:CD:8E:C8:36:16:3F:24:35:ED:29:C9:5F:6F:41:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:8f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:dc:3a:52:03:43:2f:50:d1:28:70:d0:b0:ae:09:48:12:76:
         db:e1:b9:7f:3b:0d:11:43:0c:0e:e5:69:b0:40:3c:46:cb:4a:
         ab:59:42:4b:7b:ac:b1:b9:bc:fd:e2:d8:17:9b:78:32:f0:cd:
         f1:cd:3d:44:1a:6f:fb:7a:4c:6b:4e:36:c6:54:8b:9c:94:f4:
         10:0e:68:23:e2:95:01:e1:c9:85:55:4e:72:2e:0a:aa:99:18:
         84:42:25:fe:fd:c3:82:17:84:20:9b:93:ed:b7:cf:46:9c:8d:
         bc:4d:73:dd:60:96:7d:94:f5:4c:90:35:6a:e2:42:00:28:c9:
         1f:b8:4c:3f:51:a0:21:14:11:f6:9c:cb:cd:28:e7:1b:ed:dd:
         8b:a5:6f:91:77:22:5c:7a:4f:27:e5:7a:18:1c:81:d0:ff:16:
         f1:50:05:72:9b:25:4b:d5:41:ea:73:e9:e7:6d:c4:67:ad:dd:
         bc:f0:90:8f:41:d5:42:79:f7:b4:8c:b7:36:25:1e:bb:57:e4:
         7f:80:5c:c3:28:de:d1:01:ad:63:e7:da:d4:32:7a:2b:ba:08:
         e4:50:60:6e:0d:e7:2d:10:0e:26:45:17:40:0a:79:bc:b5:d9:
         e7:cd:1f:06:5d:cc:f2:ca:3e:72:f4:1e:fb:18:0b:e7:89:ff:
         cb:4c:6a:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx5TGbev4taxwX0AkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk
MTdjZWYxNTgtYjE2Mi00YTQ1LWJkNTQtMmRjMjNjMjllZjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0I/KSx046FWZKwf9wCmXx6SrNZkzEzCJoD+
zF+BHErXtjhqc/KqWglY9BPLA/qtdIkEOK3TldB0GYSW+IwMrT+fL9oMYHTbxgbh
0CsoB6YEYH5URSbC98Qfk5iRF9y+v7ds250YTf16ZRr5TNUMJGwlSJYJPxyqSNwo
RBA14Nt3Q5F9563MkIOMeKfkWCzxXW18YQJjGibq1ZTeQyzCk6Jdx35XiijLSiLW
hwuQoHudcPHd0r6cavSRGUAz4FGGNKUB/JdeTP/QF9lD54u/XJmu0gItG+JaNYlF
oc/F33M+esSm25O2c2WEOBiZY733Nd1Mxfa2PtOmf8zTmd7nHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIt9mHQtzY7INhY/JDXtKclfb0FeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDBjMGE3NzYtYzE0NS0z
YTkzLWIzMmMtZTI0OTA5MTg4ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF3cOlIDQy9Q0Shw0LCuCUgSdtvhuX87DRFDDA7labBAPEbLSqtZ
Qkt7rLG5vP3i2BebeDLwzfHNPUQab/t6TGtONsZUi5yU9BAOaCPilQHhyYVVTnIu
CqqZGIRCJf79w4IXhCCbk+23z0acjbxNc91gln2U9UyQNWriQgAoyR+4TD9RoCEU
Efacy80o5xvt3Yulb5F3Ilx6TyflehgcgdD/FvFQBXKbJUvVQepz6edtxGet3bzw
kI9B1UJ597SMtzYlHrtX5H+AXMMo3tEBrWPn2tQyeiu6CORQYG4N5y0QDiZFF0AK
eby12efNHwZdzPLKPnL0HvsYC+eJ/8tMapg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:59:13 2026 by rpki-client