This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa
File:                     c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa (raw, json)
Hash identifier:          PNxRrN63lsBt4nXjS+Qjduq1Y0H8pw47CtxVVy4of4s=
Subject key identifier:   11:47:9C:6F:3B:E2:05:20:DE:C7:97:6A:D8:F8:07:4E:25:AB:2E:19
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584BCF006637E39E4C86BA468F00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa
Signing time:             Mon 10 Nov 2025 02:00:31 +0000
ROA not before:           Mon 10 Nov 2025 02:00:31 +0000
ROA not after:            Sun 08 Feb 2026 02:00:31 +0000
asID:                     31898
IP address blocks:        2603:c000:2300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cf:00:66:37:e3:9e:4c:86:ba:46:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Nov 10 02:00:31 2025 GMT
            Not After : Feb  8 02:00:31 2026 GMT
        Subject: CN=70d7e5bf-4688-436c-b232-2ca61efee208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:22:38:f2:aa:66:6d:4d:8e:0c:52:03:4f:
                    8b:0d:a0:ea:cc:9c:57:44:fc:1c:37:b6:4b:71:24:
                    48:fa:88:6a:69:79:f0:79:5a:ee:79:5a:60:4e:b5:
                    ef:b1:ae:08:bc:32:cf:fd:c4:1d:56:10:fb:04:c4:
                    2f:ec:ab:1b:ad:f5:61:b6:64:ba:74:01:14:4d:86:
                    f4:52:81:55:93:e3:30:bd:e4:7e:3e:eb:90:8d:f4:
                    2f:ed:1c:c7:53:43:ae:cb:8b:13:d6:70:9a:65:26:
                    b4:7c:16:92:52:2e:f3:96:60:48:7b:7d:00:0d:d4:
                    16:ab:ad:2c:bc:54:c7:84:3e:30:3a:9d:ba:c9:62:
                    09:68:11:b8:19:ab:8d:1b:9c:80:c4:50:76:7e:06:
                    e3:a1:09:70:61:d8:ad:8a:9a:34:56:58:49:99:7a:
                    c3:cf:bd:fe:d2:80:2d:9f:fb:a7:09:6c:cd:68:3d:
                    2e:26:5d:e1:80:2d:94:a6:08:69:88:4e:48:c9:00:
                    46:f8:ed:27:3c:3b:08:c1:38:c3:94:3f:9f:b3:ff:
                    06:d6:4b:5f:56:f6:3b:ff:e7:ae:a4:53:ad:f6:1f:
                    bd:74:57:14:3d:4f:3b:e0:e0:0a:33:c8:91:79:9f:
                    07:1e:79:ee:bf:dd:ec:2c:1d:35:e0:48:d3:7f:a8:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:47:9C:6F:3B:E2:05:20:DE:C7:97:6A:D8:F8:07:4E:25:AB:2E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c000:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:38:29:98:35:50:c9:df:b1:84:92:22:a0:36:29:01:fc:7c:
         f4:0f:96:80:3d:1e:bb:7a:a2:a3:3d:eb:3f:cf:4e:5d:6c:8a:
         59:f7:e9:de:ce:43:96:64:4b:c5:ff:99:ea:64:a0:36:ad:32:
         91:28:b3:50:85:3b:6f:1a:61:e4:3c:0d:34:cf:62:da:e8:c6:
         e4:6a:e8:eb:ac:38:6f:03:da:5f:65:1d:78:13:f4:44:59:b9:
         e4:4b:e0:69:3b:0a:58:1c:d6:ca:cd:6d:e8:49:82:02:9f:66:
         a1:a9:25:b7:b8:c3:4e:43:19:a1:f2:96:93:5f:22:9d:86:4d:
         f0:bb:0d:66:73:0e:76:e6:cc:b1:5b:32:97:54:ec:e7:83:f0:
         fa:5f:72:d2:04:31:b5:85:6f:73:b5:71:4f:6c:6d:0e:2b:d9:
         74:65:bb:77:68:a1:57:ef:e8:bc:8a:1a:1d:f1:b7:50:d7:61:
         aa:12:25:a5:86:60:4a:72:92:0b:65:44:3d:e4:2a:04:a7:06:
         ba:04:87:40:ff:7d:a1:f4:c4:89:95:72:22:7d:41:2e:77:65:
         be:fd:68:12:04:7b:1a:a1:02:ce:8c:f0:02:00:4b:f4:3c:a2:
         aa:e8:a4:26:8d:5d:38:d6:89:3e:24:54:90:8d:18:59:99:ae:
         a3:59:6b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:22:10 2025 by rpki-client