This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa
File:                     c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa (raw, json)
Hash identifier:          HXORR3hUDn3cpKiD5edxAfOEm7Roj9FQx+mdTghlcc4=
Subject key identifier:   3F:46:E7:73:61:9D:AE:2F:8C:41:8E:16:EC:92:57:23:E3:34:F4:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584C40113A967E0969C2CF3AA600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa
Signing time:             Sat 20 Dec 2025 14:00:38 +0000
ROA not before:           Sat 20 Dec 2025 14:00:38 +0000
ROA not after:            Fri 20 Mar 2026 13:00:38 +0000
asID:                     396581
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:11:3a:96:7e:09:69:c2:cf:3a:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 20 14:00:38 2025 GMT
            Not After : Mar 20 13:00:38 2026 GMT
        Subject: CN=530294c8-028a-4db5-b62d-d2f10fa2eaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:26:e1:36:88:4a:c3:f3:46:9e:f6:39:16:
                    04:19:ff:1d:b9:37:83:ec:97:33:f8:d6:6b:6f:81:
                    34:1b:a9:6d:bb:a1:a7:2e:25:a3:01:23:ca:e1:4e:
                    a2:5f:18:2b:2b:6b:60:b1:26:af:93:30:12:da:fb:
                    e2:e3:d7:6a:f9:d0:2b:68:25:c5:cd:ea:86:e2:a8:
                    fe:3d:d5:0d:b7:30:d1:40:d5:95:dc:6c:a6:e6:50:
                    44:8d:3c:48:03:29:73:c4:cb:70:c0:21:21:2f:53:
                    64:61:89:70:2d:e3:4d:c9:35:00:ae:58:41:d7:99:
                    75:ec:0d:74:ef:dd:98:bc:8d:9a:ce:94:33:d4:4d:
                    51:b6:8e:94:59:17:d4:be:31:c7:f3:11:ca:9a:9d:
                    a9:0f:41:a3:0a:ca:58:3b:17:ea:96:71:e9:ef:6e:
                    81:b3:13:c2:b3:47:2c:5e:41:a3:af:ef:bf:7b:17:
                    41:df:49:b4:8c:bd:eb:9e:1a:91:3e:6d:14:42:1e:
                    42:2f:bc:ed:02:1e:23:c1:9f:9a:56:48:db:86:5e:
                    c8:e3:ff:f8:86:fa:d0:10:74:77:99:bf:ec:37:75:
                    35:cf:0a:97:56:82:82:1c:fa:78:09:0d:1e:78:07:
                    34:80:7d:7f:1a:ec:ce:4b:cd:07:eb:e2:56:9d:ad:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:E7:73:61:9D:AE:2F:8C:41:8E:16:EC:92:57:23:E3:34:F4:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:65:cb:96:18:4c:fd:0d:64:58:25:bc:90:af:b9:6c:75:35:
         23:f1:16:75:84:bc:f7:27:17:89:9f:2f:dc:9e:b9:c6:42:06:
         e5:82:a1:5f:7d:64:a7:c0:bb:a2:cc:35:8b:5d:76:73:1a:2d:
         fe:a3:34:8e:84:f2:48:f5:bc:49:1b:76:d5:96:05:06:52:44:
         ce:65:bb:03:af:50:9e:2d:52:3b:fd:12:d2:1f:e1:14:47:15:
         6c:c3:45:73:e5:9d:c4:72:a0:c5:65:72:cc:6a:d3:c0:e2:bf:
         18:08:a7:2d:6a:88:e5:4f:f8:7d:14:3c:d9:be:f1:bf:37:40:
         b9:6f:fb:70:7c:47:53:97:aa:f8:50:50:89:b9:c0:cb:89:b1:
         af:6d:e7:60:57:ab:23:a9:04:88:88:3f:e7:b8:f2:21:56:0d:
         c4:0d:dc:71:50:92:95:1c:d3:e5:01:5f:25:0f:db:f1:77:6f:
         16:78:d1:d4:ce:2a:d9:f7:e3:46:a2:b8:f3:31:51:9f:0a:cb:
         12:91:54:a4:75:c5:c2:dc:bf:61:21:a6:ad:ed:22:b4:05:eb:
         0c:43:3d:bd:38:24:b8:ca:d2:5a:43:79:e9:ba:82:0c:7c:73:
         7b:06:e0:47:31:c5:ea:15:97:62:7b:35:57:53:2c:9f:3b:38:
         74:72:10:3d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExAETqWfglpws86pgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk
NTMwMjk0YzgtMDI4YS00ZGI1LWI2MmQtZDJmMTBmYTJlYWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MAm4TaISsPzRp72ORYEGf8duTeD7Jcz+NZr
b4E0G6ltu6GnLiWjASPK4U6iXxgrK2tgsSavkzAS2vvi49dq+dAraCXFzeqG4qj+
PdUNtzDRQNWV3Gym5lBEjTxIAylzxMtwwCEhL1NkYYlwLeNNyTUArlhB15l17A10
792YvI2azpQz1E1Rto6UWRfUvjHH8xHKmp2pD0GjCspYOxfqlnHp726BsxPCs0cs
XkGjr++/exdB30m0jL3rnhqRPm0UQh5CL7ztAh4jwZ+aVkjbhl7I4//4hvrQEHR3
mb/sN3U1zwqXVoKCHPp4CQ0eeAc0gH1/GuzOS80H6+JWna0cRwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFD9G53Nhna4vjEGOFuySVyPjNPRGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQzOGVlYzgtYTVhNS0z
NmYxLWIwNzEtMmQ1ODFiZmUxNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBSZcuWGEz9DWRYJbyQr7lsdTUj8RZ1hLz3JxeJ
ny/cnrnGQgblgqFffWSnwLuizDWLXXZzGi3+ozSOhPJI9bxJG3bVlgUGUkTOZbsD
r1CeLVI7/RLSH+EURxVsw0Vz5Z3EcqDFZXLMatPA4r8YCKctaojlT/h9FDzZvvG/
N0C5b/twfEdTl6r4UFCJucDLibGvbedgV6sjqQSIiD/nuPIhVg3EDdxxUJKVHNPl
AV8lD9vxd28WeNHUzirZ9+NGorjzMVGfCssSkVSkdcXC3L9hIaat7SK0BesMQz29
OCS4ytJaQ3npuoIMfHN7BuBHMcXqFZdiezVXUyyfOzh0chA9
-----END CERTIFICATE-----
Generated at Mon Dec 22 07:57:34 2025 by rpki-client