This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3149b8d3-e414-36a9-ac73-fed0f0ae991a.roa
File:                     3149b8d3-e414-36a9-ac73-fed0f0ae991a.roa (raw, json)
Hash identifier:          I7QX9DFMfW0KQinA2OCclnAI48Qn1Gk2Dbk62GAIqVo=
Subject key identifier:   C2:F4:0B:17:0C:EC:13:DA:74:B1:7E:6C:49:C2:24:10:E6:C1:E5:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584C1E93A04C8AF2784B41424420
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3149b8d3-e414-36a9-ac73-fed0f0ae991a.roa
Signing time:             Mon 08 Dec 2025 14:00:38 +0000
ROA not before:           Mon 08 Dec 2025 14:00:38 +0000
ROA not after:            Sun 08 Mar 2026 13:00:38 +0000
asID:                     33287
IP address blocks:        2001:559:83bc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1e:93:a0:4c:8a:f2:78:4b:41:42:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  8 14:00:38 2025 GMT
            Not After : Mar  8 13:00:38 2026 GMT
        Subject: CN=24600d03-6bf5-408a-afb4-b1b9be0ecc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:b4:5c:d4:6d:d9:6d:39:be:fd:e5:10:e9:
                    c0:e4:3a:61:fa:4b:ab:b6:04:a9:30:7c:0e:19:57:
                    2c:a9:05:a0:83:7c:66:e9:05:a6:fc:ef:5e:36:a5:
                    87:82:ff:fd:c1:b6:b2:32:3d:68:ec:ad:80:41:a5:
                    2c:e0:67:d9:c0:4e:45:30:f2:c9:0f:ee:10:21:34:
                    61:e7:50:01:4a:9f:38:de:c2:3a:e2:80:c9:92:1a:
                    48:c6:51:f5:fd:24:8a:53:7d:f6:22:25:79:02:d6:
                    4b:97:51:ae:b0:8c:87:27:b7:fc:e2:61:31:61:99:
                    27:59:a9:37:d4:81:28:8a:c5:fe:3a:91:83:80:ac:
                    6b:1a:d7:78:3c:c7:36:9f:28:50:c3:52:b7:01:99:
                    1e:db:5f:4f:9e:95:b9:2d:f5:44:14:79:59:44:eb:
                    08:22:fa:67:41:e3:6e:95:0e:84:b8:3d:f0:a8:08:
                    0d:87:49:b7:d8:fe:92:95:c7:39:39:09:e2:a8:0f:
                    e1:cb:28:e0:fc:04:89:77:7a:19:11:c4:3d:cb:1e:
                    b3:f4:ba:a1:5b:79:c0:45:02:a3:2d:99:d6:fc:ec:
                    38:50:96:06:93:e2:be:d5:2f:22:e3:73:9d:fe:ba:
                    89:68:fb:94:97:13:59:9a:e6:d3:13:20:6d:9f:a8:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F4:0B:17:0C:EC:13:DA:74:B1:7E:6C:49:C2:24:10:E6:C1:E5:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3149b8d3-e414-36a9-ac73-fed0f0ae991a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:83bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:54:60:fe:b1:c7:91:77:37:26:35:6a:b9:97:89:43:a6:f2:
         e9:e9:fb:63:02:31:f7:2c:dd:22:7d:9d:b1:de:f5:7c:42:0b:
         90:40:93:59:d1:b0:f1:85:6b:4e:b3:19:89:63:9c:07:08:ad:
         81:6d:83:d4:6f:26:77:2d:e8:cb:69:d6:2b:69:12:ef:38:87:
         02:c4:96:56:17:02:79:19:07:31:d8:62:91:b1:94:59:dd:28:
         29:7b:6e:5b:07:bf:58:93:5b:85:05:64:ce:54:fb:d0:a4:9f:
         bc:8f:8a:c5:57:8a:a2:89:db:50:ac:d3:13:02:7d:53:0c:c7:
         89:99:fb:3f:0f:14:9a:a1:f4:6f:39:f1:b7:a0:65:57:9f:97:
         8f:05:e0:c6:a9:58:86:00:52:01:d9:e6:e6:97:44:8c:08:01:
         7f:7b:8a:c3:5a:7b:7a:47:46:c0:c4:34:28:c5:da:71:d5:7b:
         7f:a8:9a:30:09:e1:19:45:aa:4c:59:7b:6f:7d:76:a4:98:57:
         39:df:4b:54:8f:7f:e1:7a:b3:fc:6f:61:bb:f5:7d:f0:3b:19:
         71:cf:e1:20:a6:b8:05:5e:e5:47:6c:5d:eb:40:61:43:ec:df:
         df:cc:35:d6:ca:f2:6b:6c:8e:67:25:bb:be:52:e9:89:40:e9:
         ce:09:5d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:07:47 2025 by rpki-client