This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa
File:                     43df424b-8041-30e0-bf83-a35ba1b54f1a.roa (raw, json)
Hash identifier:          UB3eho3egadp5wnEXoqQGkZtMO+/gra+eP4tT3JylSc=
Subject key identifier:   F6:3D:F8:AE:E4:0E:50:30:97:EC:CA:BC:45:81:33:74:23:14:6C:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584C401135F45C3B5E31691A8AE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa
Signing time:             Sat 20 Dec 2025 14:00:38 +0000
ROA not before:           Sat 20 Dec 2025 14:00:38 +0000
ROA not after:            Fri 20 Mar 2026 13:00:38 +0000
asID:                     397203
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:11:35:f4:5c:3b:5e:31:69:1a:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 20 14:00:38 2025 GMT
            Not After : Mar 20 13:00:38 2026 GMT
        Subject: CN=85d28d70-61de-421b-9b5f-649a5f86990d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:20:98:01:0a:b1:6c:0c:23:a5:6c:5e:d4:
                    be:48:bb:26:ff:2c:52:13:d6:2c:8f:da:b2:e8:ae:
                    8c:b4:36:70:7f:f8:0c:71:d1:0a:8e:71:c9:a8:44:
                    9e:29:95:8e:67:89:a8:48:bd:80:3d:5f:4f:1e:7f:
                    38:37:1d:53:da:fb:7c:96:bb:f9:bf:e1:96:22:aa:
                    d6:2c:74:e2:a3:34:8a:19:0c:c4:32:01:40:1c:2a:
                    75:1a:9d:f6:20:b2:5f:81:88:6c:bf:24:5b:3a:ee:
                    b5:26:e4:fd:3d:fe:91:02:b4:72:fe:a6:2c:ab:a3:
                    40:a4:89:fa:3e:98:94:0f:e3:40:4e:91:97:6e:9e:
                    b9:dd:d4:a7:eb:5f:11:76:00:4e:55:1d:8d:a1:85:
                    5c:9e:41:cb:02:f9:95:a5:0e:9e:5a:85:d6:f0:e9:
                    f2:42:61:7b:42:00:43:4c:fa:67:bd:43:00:38:21:
                    78:ff:69:db:1d:a1:00:fe:d6:ed:24:1e:7c:1d:82:
                    48:40:7c:12:54:4b:46:01:ac:fb:3b:e6:32:9d:85:
                    10:e0:0b:93:aa:6d:1e:50:c2:0c:3d:ed:f5:2c:4b:
                    e6:d5:a9:87:a6:53:85:87:af:34:e5:fd:5d:4b:53:
                    c8:ab:b0:22:46:02:34:72:25:bf:29:0f:24:09:48:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3D:F8:AE:E4:0E:50:30:97:EC:CA:BC:45:81:33:74:23:14:6C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:23:de:73:9f:ae:05:fd:97:1f:0b:cc:03:75:42:80:ea:78:
         f9:f2:94:9a:76:6d:0b:6c:1b:2f:2e:e3:21:b4:35:27:8f:dc:
         8d:11:66:98:e9:a8:01:c8:4c:a6:a3:ef:82:c0:e6:4e:0e:0a:
         c2:f3:90:81:5a:f9:28:24:a4:4f:b2:fc:4d:10:47:59:77:24:
         4b:17:17:3d:6d:09:61:fc:84:38:f4:a3:5e:ec:b8:a7:30:dd:
         d8:a5:8e:52:72:59:54:fc:ad:11:fc:74:7a:a2:49:04:79:88:
         e2:70:18:89:a4:38:d5:54:2e:e7:84:6f:07:a5:56:18:f0:4f:
         7d:ea:80:f3:52:38:ba:ee:6d:ae:b9:94:db:a6:5e:9d:a6:32:
         44:eb:2d:c8:50:51:40:cb:5b:cb:a3:a9:a3:f9:71:7c:22:56:
         29:a5:75:ee:af:6e:18:5d:d9:d2:7a:98:50:3e:3f:86:29:a0:
         1c:29:3b:71:75:71:ea:4b:a0:6d:ad:07:8c:3f:ef:8d:e0:10:
         27:fa:22:7e:4c:3b:29:48:8f:fd:10:c9:1a:47:91:6a:d9:3d:
         6f:56:50:6b:e0:fe:80:a2:2a:ef:62:03:7f:9a:77:8f:d2:d4:
         2d:14:75:15:11:d4:b4:78:a9:4e:79:41:1b:80:90:48:73:95:
         60:cc:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:53:18 2025 by rpki-client