This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/659d0660-b0b0-3169-bd78-adee92b4de2d.roa
File:                     659d0660-b0b0-3169-bd78-adee92b4de2d.roa (raw, json)
Hash identifier:          5Nln6mOz9t1ru5mQC3u1cNk70g7uOlE3aOX7J0BBObU=
Subject key identifier:   74:BC:63:0A:1C:66:C3:BA:11:71:7D:03:94:51:FD:3A:1C:44:93:F7
Certificate issuer:       /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Certificate serial:       010D0C9F4328584C3BE1037B57AC46BBCD7F9C00
Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/659d0660-b0b0-3169-bd78-adee92b4de2d.roa
Signing time:             Fri 19 Dec 2025 02:00:31 +0000
ROA not before:           Fri 19 Dec 2025 02:00:31 +0000
ROA not after:            Thu 19 Mar 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        2602:814:b008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3b:e1:03:7b:57:ac:46:bb:cd:7f:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
        Validity
            Not Before: Dec 19 02:00:31 2025 GMT
            Not After : Mar 19 01:00:31 2026 GMT
        Subject: CN=6791bbc7-8842-49c2-893e-c485302ba5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:46:06:b2:44:4c:de:44:de:4f:bf:b9:f4:76:
                    fa:8e:fa:aa:f6:92:2c:f7:2e:20:1f:54:43:7e:f1:
                    ea:9e:12:44:7b:7d:e2:9d:ae:e2:cd:3f:80:91:e2:
                    99:a7:3d:96:78:52:48:a5:0f:a3:03:d1:ba:b9:12:
                    ca:6a:76:37:2a:98:b9:32:f2:2b:22:4b:27:41:67:
                    53:13:e2:53:ae:f5:e6:da:40:6d:7c:7d:d4:65:2b:
                    12:be:db:23:55:07:21:ca:a3:5c:44:ec:d4:c8:48:
                    db:91:83:82:74:16:80:14:02:8f:f6:4d:83:36:65:
                    4e:59:9c:71:6d:9a:1a:65:f4:a1:b9:36:7b:97:4e:
                    97:65:2b:ad:c8:fa:6e:4a:94:76:08:94:d6:bb:48:
                    37:3f:00:15:1b:fa:45:be:5e:c7:f2:d6:d4:5c:27:
                    bb:93:69:c3:b7:5e:c5:ca:ed:81:91:f8:17:2d:45:
                    d9:d9:b3:29:2b:b0:6b:3a:80:07:29:23:73:37:c2:
                    1f:f1:7d:e5:fc:dc:36:8f:d7:ae:a0:1c:ac:a3:3b:
                    c3:34:b0:fc:8f:9a:99:45:d4:fd:1b:79:10:ec:3f:
                    02:18:08:33:b5:97:80:9d:e9:f0:ee:3b:db:de:03:
                    a2:4c:25:c1:4b:4a:2f:a9:c9:93:95:68:0f:4c:5b:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BC:63:0A:1C:66:C3:BA:11:71:7D:03:94:51:FD:3A:1C:44:93:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/659d0660-b0b0-3169-bd78-adee92b4de2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:b008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:75:8e:64:ab:54:e5:af:9e:c1:2e:24:ea:18:38:98:88:c7:
         4d:75:bc:be:0b:82:28:e1:e7:96:dd:17:7f:df:b9:b6:ef:18:
         03:6e:b9:04:70:31:2e:9f:42:48:e8:f0:69:36:47:53:71:c4:
         ec:fa:40:68:be:21:a7:94:f7:47:ea:85:80:0c:45:0b:9a:38:
         ca:50:fc:78:b2:2b:8e:3a:ec:c6:2e:75:d0:70:53:c5:5d:9f:
         1b:95:01:71:9f:fa:a6:ab:8e:ef:5a:e7:87:c2:37:dc:8b:a5:
         2f:9f:ee:a5:22:c7:2e:68:0b:9a:7a:87:27:58:bd:d7:16:d9:
         44:d4:cb:1e:80:59:d5:02:57:d5:6f:30:7f:30:0e:f7:00:56:
         fa:f2:ec:ab:b8:6e:2e:ff:46:de:64:57:6f:2d:e7:91:45:2f:
         01:03:8a:ba:48:12:2d:a2:90:bd:9f:32:3b:96:73:98:32:f9:
         68:76:37:dc:5a:d1:3b:7d:54:47:5c:96:b0:8f:8d:85:bf:44:
         37:5c:86:1d:fa:cc:55:af:35:54:21:55:9e:b9:f9:a8:24:76:
         2b:7a:ff:15:2d:b8:1a:4f:e1:7f:d4:e3:ae:df:86:e6:77:6d:
         ef:fc:a5:35:29:c4:b2:be:fe:2d:61:c9:5f:b9:aa:16:18:11:
         bd:12:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 23:28:23 2025 by rpki-client