This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a4bf91c-38a0-3f37-b659-10e39433e985.roa
File:                     1a4bf91c-38a0-3f37-b659-10e39433e985.roa (raw, json)
Hash identifier:          yt+gLdH7POhA+EJSCOkVdy7rWSMaHoM5NNK9AIvuN2A=
Subject key identifier:   52:1B:58:CC:E1:D6:55:9C:06:78:75:77:35:C9:DE:F6:F4:59:57:A2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C3DFEC2133CCCA3CB56CBC000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a4bf91c-38a0-3f37-b659-10e39433e985.roa
Signing time:             Fri 19 Dec 2025 20:12:15 +0000
ROA not before:           Fri 19 Dec 2025 20:12:15 +0000
ROA not after:            Thu 19 Mar 2026 19:12:15 +0000
asID:                     30036
IP address blocks:        2604:2e8f:e400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3d:fe:c2:13:3c:cc:a3:cb:56:cb:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Dec 19 20:12:15 2025 GMT
            Not After : Mar 19 19:12:15 2026 GMT
        Subject: CN=ad7adbcb-2947-4c20-a343-3e04fbd3fea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:39:9e:eb:01:3f:83:41:5b:13:2c:0a:c5:
                    28:ed:38:ab:eb:7b:13:86:df:e0:66:5a:74:d0:ea:
                    9c:78:6d:93:41:a3:eb:83:65:65:1e:4a:33:68:a5:
                    92:2f:60:e4:c3:d6:50:02:3b:c7:78:ea:0b:41:fa:
                    24:8e:25:fa:c5:ed:6d:05:1f:e4:08:9e:10:5a:25:
                    67:19:2e:9f:d7:fb:4a:59:24:44:67:08:3c:cd:8a:
                    eb:54:af:c7:f3:a5:22:4a:15:39:8a:f7:2c:ad:c5:
                    98:75:f8:63:e2:10:82:dd:72:6e:7d:c1:fc:a7:e4:
                    2e:ca:6c:ad:68:2c:67:cd:ad:60:5b:6b:c2:b3:61:
                    cc:2c:e6:6b:56:fc:85:a2:29:64:e6:47:4a:0d:29:
                    29:e7:df:a1:28:53:82:01:f9:93:0a:88:a3:9c:fe:
                    41:e4:f8:ab:32:a0:a4:16:85:0a:d3:37:3a:ca:c2:
                    2b:89:3d:1d:fa:a5:65:ae:1f:78:f5:d0:54:38:9d:
                    57:41:69:71:08:67:bf:fa:29:1f:a8:ee:45:34:c2:
                    ea:fc:fb:57:08:f0:e7:5b:f1:34:f2:14:5f:78:3c:
                    b3:f0:6b:e7:24:a3:cc:b3:16:34:65:f1:df:e6:d5:
                    ad:17:71:44:a2:84:f7:ef:81:eb:26:84:7f:58:4f:
                    3c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1B:58:CC:E1:D6:55:9C:06:78:75:77:35:C9:DE:F6:F4:59:57:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a4bf91c-38a0-3f37-b659-10e39433e985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:e400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f8:f0:68:d7:d4:b1:38:6d:a5:ff:9d:a2:64:1d:36:4e:e2:
         5e:09:44:87:85:c6:1e:11:fa:5d:a8:5c:cf:6d:76:09:2a:1c:
         bf:86:58:48:b3:53:1d:c5:f8:be:65:d3:bf:e3:b5:9f:6e:b5:
         e3:b5:dc:4f:62:08:46:b7:21:c8:56:2e:d5:b3:d1:0f:da:6f:
         02:86:e3:b7:8f:12:02:46:18:67:9a:14:b1:25:37:7b:6b:55:
         6c:12:87:a7:6e:7c:be:9b:95:4a:20:84:22:aa:c9:ea:84:21:
         40:4f:d9:8c:41:8e:39:ca:a8:0d:d0:d3:9b:3a:a0:c5:64:44:
         32:52:ba:d1:10:1a:bc:4f:90:6c:7f:91:78:0d:d3:d8:86:25:
         71:07:b1:e5:58:5c:0f:1d:b6:64:c6:67:0e:a2:25:97:cc:24:
         bb:5b:6e:4e:5b:dc:73:4b:b5:91:e6:c9:43:6d:a3:33:e4:98:
         db:50:7c:74:fc:b2:ee:8a:08:10:45:f3:89:81:0a:ad:32:37:
         64:c8:ed:78:7b:03:b9:8d:9c:dc:da:f6:b5:59:d3:ac:e0:a1:
         99:10:f8:1f:c4:77:0c:69:9b:05:6b:fd:7b:af:8e:42:ee:00:
         e8:67:61:44:d4:4e:97:86:be:d6:26:b0:66:61:0b:3d:ce:6c:
         63:1b:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:29:25 2025 by rpki-client