This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa
File:                     b8428946-1e88-3bc3-9f06-263a19c73513.roa (raw, json)
Hash identifier:          W8gXJ+Dk6j0JtjBFc2RzIn9tgD2P6H03XhPNpG4IhQw=
Subject key identifier:   2D:F1:F6:CD:BE:59:B1:E7:E6:61:F4:1A:C6:F7:C3:C1:9D:5B:20:01
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328584C470BCA4FCB4D0B8A22CA8380
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa
Signing time:             Tue 23 Dec 2025 02:00:31 +0000
ROA not before:           Tue 23 Dec 2025 02:00:31 +0000
ROA not after:            Mon 23 Mar 2026 01:00:31 +0000
asID:                     206018
IP address blocks:        2602:fc09:f70::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:47:0b:ca:4f:cb:4d:0b:8a:22:ca:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Dec 23 02:00:31 2025 GMT
            Not After : Mar 23 01:00:31 2026 GMT
        Subject: CN=a0911dca-68e2-4ef8-8320-54b7cc4e0c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dd:e8:6f:f1:7d:ae:5f:85:0f:e9:a9:f6:9c:
                    24:4d:2c:50:41:25:9f:9a:35:ab:56:ed:f8:6b:7d:
                    5c:61:6b:f3:1d:e5:22:16:d3:7d:3b:d3:39:9f:c8:
                    d4:2f:75:63:70:61:b6:d7:f6:15:41:77:a9:79:80:
                    e0:5b:e5:44:bc:51:b2:a8:6a:d7:15:fc:5c:22:24:
                    81:af:8c:01:27:64:0a:11:ce:16:47:25:d2:36:64:
                    19:cb:7d:0e:2c:c8:04:65:c8:13:82:fb:19:56:a9:
                    da:df:8a:85:6f:b6:a6:bd:2a:37:e1:6b:2c:28:a9:
                    e3:a1:52:3d:5b:d3:db:c9:33:65:8f:8c:e7:82:8d:
                    29:fe:3d:71:00:b4:69:5d:44:f8:19:dd:53:d7:6a:
                    58:bc:d9:fe:73:0a:51:cb:17:1c:5e:90:b6:c8:7f:
                    90:34:dc:ee:a0:c9:02:a0:fc:62:5b:74:80:ee:7f:
                    ba:70:7f:f7:10:31:0f:fa:ad:b3:b1:3f:a5:74:41:
                    f8:0e:e0:58:c8:36:82:f6:5b:15:93:4c:b9:67:62:
                    ff:c1:9f:81:ae:d4:97:72:3f:bf:f0:4b:20:ae:40:
                    90:aa:e9:e8:03:22:13:20:c0:7b:49:67:88:61:e5:
                    e2:72:ff:b9:37:3c:14:7d:16:69:69:0a:4e:9b:4d:
                    f0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F1:F6:CD:BE:59:B1:E7:E6:61:F4:1A:C6:F7:C3:C1:9D:5B:20:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:f70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:86:f8:e1:95:9a:03:95:45:3e:79:8c:3b:cf:52:36:2a:0f:
         21:6a:1b:18:c7:95:39:f1:50:12:14:22:9b:cf:62:99:16:c8:
         b0:b2:dc:b7:27:99:6b:ea:16:5a:e3:f1:12:a1:cf:bd:48:c8:
         89:40:a1:e0:2e:8c:99:c3:fc:03:9b:99:e4:e7:1a:f0:7b:99:
         40:ce:eb:00:02:ea:8f:b9:25:c3:2d:42:89:d6:81:c8:37:45:
         65:ab:6f:79:3e:13:0c:cf:5e:03:a5:fd:6f:cf:46:3a:e6:d8:
         db:6d:79:e0:b5:a0:03:3f:42:15:da:1f:fb:e4:2c:80:ec:ea:
         a4:b2:2b:22:14:e8:d6:f2:30:f3:f3:10:93:45:05:9f:24:07:
         53:1f:0b:23:37:c4:0b:2f:d4:75:ec:67:e7:df:f8:5b:12:7f:
         e7:d8:40:a9:6c:8d:0c:2d:88:55:46:0f:9d:f9:38:f5:12:9f:
         e4:2b:8d:6a:f2:96:05:48:78:57:03:98:b3:9a:72:cc:21:dc:
         49:50:ac:3e:b7:73:8d:0a:2c:af:04:26:5d:2d:cf:f5:45:7d:
         f0:4a:e6:09:a4:48:5b:50:62:66:c7:7c:d4:1a:a7:fc:61:58:
         1f:ce:cc:c8:95:10:bc:12:80:0c:07:af:05:41:44:fb:2d:b1:
         c6:c0:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:52:58 2025 by rpki-client