This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa
File:                     a68e4148-cf1e-3897-950d-73b1670f964c.roa (raw, json)
Hash identifier:          Dio6DKWA/GrDgxLgV+5Pko2NxENPxdKASN9pxAF0d7U=
Subject key identifier:   8A:07:84:31:7F:CE:29:D8:DC:47:C7:65:DF:A2:E1:CB:88:75:46:A4
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584C1E93F5D9FB9A05B724021740
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa
Signing time:             Mon 08 Dec 2025 14:00:38 +0000
ROA not before:           Mon 08 Dec 2025 14:00:38 +0000
ROA not after:            Sun 08 Mar 2026 13:00:38 +0000
asID:                     3477
IP address blocks:        2610:20:8040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1e:93:f5:d9:fb:9a:05:b7:24:02:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Dec  8 14:00:38 2025 GMT
            Not After : Mar  8 13:00:38 2026 GMT
        Subject: CN=882e42fd-421d-470a-8e85-e2209e109170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:e5:49:fd:7f:e4:1f:2f:41:21:ec:4d:86:
                    4a:76:12:01:6d:71:75:fe:c1:98:1c:b1:09:f2:e0:
                    87:c0:3b:1e:29:91:61:4d:3b:35:4f:f8:3e:37:ab:
                    1e:5b:67:24:85:3e:15:4b:d2:06:aa:4b:aa:09:2e:
                    8e:32:ce:b9:60:44:5b:f7:54:fd:e4:5e:24:3a:87:
                    f1:29:1e:5f:9e:e3:53:44:97:2f:5d:35:c4:45:18:
                    7f:6f:64:d0:5f:a9:58:47:77:5c:51:fe:95:bc:d9:
                    b1:c3:04:a0:f0:51:de:d0:9c:0c:52:89:64:65:33:
                    95:67:18:38:20:4e:9e:19:a6:29:e2:a6:99:a6:9e:
                    46:17:c0:aa:b2:a5:14:dd:d7:d7:e6:d8:3d:90:2b:
                    9f:58:75:12:29:fd:86:43:12:67:9f:c2:4e:18:77:
                    7f:ca:cd:aa:3f:3a:33:c0:c5:be:74:01:ee:75:9c:
                    b8:f3:3a:95:e7:f8:a8:7f:9f:0c:33:94:ac:4a:8f:
                    5d:46:fc:1f:b0:25:0b:51:f8:01:aa:27:11:8b:12:
                    65:7b:86:fc:4d:cc:b9:2e:ba:7c:78:68:4f:b8:b3:
                    a5:64:2e:4d:2a:03:1b:d9:c8:1d:c5:05:25:88:79:
                    22:9d:27:22:1a:d7:e6:2e:10:86:95:d3:d9:23:e1:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:07:84:31:7F:CE:29:D8:DC:47:C7:65:DF:A2:E1:CB:88:75:46:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:13:85:83:f1:a9:ec:7d:0f:fc:70:f5:6a:be:29:d0:55:df:
         ae:7e:f7:bb:7b:e8:84:87:9a:71:71:60:3c:66:82:2b:e0:b7:
         22:2d:3e:44:4d:39:50:27:71:6d:bd:5f:75:49:22:62:c8:e6:
         0d:6d:e8:94:97:23:26:2e:c8:fa:ae:4b:0f:9f:a9:c7:44:d6:
         75:9e:15:37:14:f0:f2:c6:d8:b8:b7:93:12:8d:fc:c2:46:5f:
         c0:3a:85:24:64:28:e9:33:f9:65:33:70:3c:e0:ba:63:b2:eb:
         4c:ae:90:65:04:8b:e2:6c:6b:7d:23:5d:e5:6b:78:b5:9c:8a:
         91:93:09:0d:f5:04:db:40:0b:6d:d5:cb:c6:4b:c6:d1:86:6f:
         5d:59:f1:8e:e0:a7:d2:f5:3e:ee:9a:11:38:f7:f2:ed:3b:3f:
         10:12:3f:87:77:d0:05:e5:31:13:bf:1c:13:70:f1:69:ba:ed:
         bf:f1:a9:6d:02:7e:0b:90:2d:b7:34:4b:59:d2:36:e3:10:73:
         7a:ae:34:25:32:19:ab:fb:63:89:a9:e1:f8:66:7d:39:37:c3:
         75:49:94:af:ee:6c:b6:40:da:6c:c8:56:bb:36:3e:28:e5:74:
         61:cd:cc:ba:08:3b:1f:00:39:10:af:84:bf:69:80:21:66:41:
         2d:05:93:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwek/XZ+5oFtyQCF0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk
ODgyZTQyZmQtNDIxZC00NzBhLThlODUtZTIyMDllMTA5MTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTLlSf1/5B8vQSHsTYZKdhIBbXF1/sGYHLEJ
8uCHwDseKZFhTTs1T/g+N6seW2ckhT4VS9IGqkuqCS6OMs65YERb91T95F4kOofx
KR5fnuNTRJcvXTXERRh/b2TQX6lYR3dcUf6VvNmxwwSg8FHe0JwMUolkZTOVZxg4
IE6eGaYp4qaZpp5GF8CqsqUU3dfX5tg9kCufWHUSKf2GQxJnn8JOGHd/ys2qPzoz
wMW+dAHudZy48zqV5/iof58MM5SsSo9dRvwfsCULUfgBqicRixJle4b8Tcy5Lrp8
eGhPuLOlZC5NKgMb2cgdxQUliHkinSciGtfmLhCGldPZI+GtewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIoHhDF/zinY3EfHZd+i4cuIdUakMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYTY4ZTQxNDgtY2YxZS0z
ODk3LTk1MGQtNzNiMTY3MGY5NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIIBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADEThYPxqex9D/xw9Wq+KdBV365+97t76ISHmnFxYDxmgivgtyIt
PkRNOVAncW29X3VJImLI5g1t6JSXIyYuyPquSw+fqcdE1nWeFTcU8PLG2Li3kxKN
/MJGX8A6hSRkKOkz+WUzcDzgumOy60yukGUEi+Jsa30jXeVreLWcipGTCQ31BNtA
C23Vy8ZLxtGGb11Z8Y7gp9L1Pu6aETj38u07PxASP4d30AXlMRO/HBNw8Wm67b/x
qW0CfguQLbc0S1nSNuMQc3quNCUyGav7Y4mp4fhmfTk3w3VJlK/ubLZA2mzIVrs2
PijldGHNzLoIOx8AORCvhL9pgCFmQS0Fkwk=
-----END CERTIFICATE-----
Generated at Sun Dec 21 01:11:46 2025 by rpki-client