This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7921f72-1e1e-3023-a70f-6191483e885e.roa
File:                     c7921f72-1e1e-3023-a70f-6191483e885e.roa (raw, json)
Hash identifier:          goft/hd3UY1pNO04g++9Kx1fZnsS1gmTeoAKUbJ8dVc=
Subject key identifier:   05:70:16:B6:1F:8D:8E:48:3C:C7:71:B5:F1:62:37:30:20:A1:35:D0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584C3EABA98C3C27905AD32A9980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7921f72-1e1e-3023-a70f-6191483e885e.roa
Signing time:             Sat 20 Dec 2025 02:00:31 +0000
ROA not before:           Sat 20 Dec 2025 02:00:31 +0000
ROA not after:            Fri 20 Mar 2026 01:00:31 +0000
asID:                     852
IP address blocks:        2001:56b:400b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3e:ab:a9:8c:3c:27:90:5a:d3:2a:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Dec 20 02:00:31 2025 GMT
            Not After : Mar 20 01:00:31 2026 GMT
        Subject: CN=cec5a889-1bae-4c2c-b00b-176d7498f660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:c2:1b:b6:e2:c9:be:25:47:57:99:42:7a:
                    02:cb:81:a3:99:0d:e7:f6:c7:a7:39:a3:d1:91:af:
                    cc:9a:9f:5f:02:55:bb:d5:d3:f8:0b:52:65:c1:de:
                    43:6d:51:2a:43:ff:ab:47:da:39:e9:4f:f5:0b:b7:
                    52:36:0b:b6:07:a8:0d:b2:74:92:1e:62:83:d0:81:
                    65:aa:cd:48:58:72:ed:bf:ef:76:72:59:78:1f:58:
                    5c:6b:a7:25:d9:f9:3f:23:79:5b:57:50:72:46:e4:
                    8e:42:92:ec:8c:a5:f3:22:88:bd:12:42:75:b8:c7:
                    c0:74:7e:ca:7c:c4:ad:43:c4:77:ae:bb:f7:c3:75:
                    9f:3d:de:0e:69:d3:14:d4:3d:dd:9b:82:44:de:37:
                    5c:1f:62:6c:cc:30:23:94:8f:cd:8a:ce:47:ce:cf:
                    d8:b0:24:0c:33:ef:80:e9:6e:30:4b:c2:f8:92:57:
                    12:58:6d:65:49:84:19:1c:18:2b:c5:ae:1b:35:33:
                    04:b3:0b:25:d6:63:22:83:dd:4d:2f:ce:b2:2b:8c:
                    56:95:c7:87:4c:fa:1f:35:c6:22:33:69:62:c2:dc:
                    0e:5b:65:61:d3:48:7e:d6:2a:91:13:76:e9:7a:30:
                    58:60:f9:90:33:ef:c4:0e:ce:6d:28:b2:8f:34:96:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:70:16:B6:1F:8D:8E:48:3C:C7:71:B5:F1:62:37:30:20:A1:35:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7921f72-1e1e-3023-a70f-6191483e885e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:400b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:7f:e2:e2:0a:53:52:b5:2a:f1:7f:90:45:e7:da:53:66:d0:
         82:18:00:af:ce:25:84:f5:79:3c:a8:5f:e5:5f:73:77:3f:1d:
         cb:77:3e:f8:9d:46:15:f5:46:35:10:a5:36:62:4b:e7:36:55:
         5e:35:20:b3:b8:7c:03:33:e3:35:93:eb:37:7c:1d:6a:5e:a7:
         4f:ee:81:d2:54:2c:16:70:05:35:63:fe:59:25:9f:c8:ee:7b:
         7f:22:a2:5c:6e:ee:4a:1c:6c:d5:69:c0:11:cf:c3:0b:91:de:
         78:53:fb:a8:25:a5:6c:b5:6d:16:40:c6:53:7e:b2:27:82:d4:
         a0:0d:9b:0e:f3:b0:38:68:a4:cf:f3:06:25:02:68:ac:3f:a4:
         d7:32:c5:92:05:73:94:10:d9:7f:0a:50:67:a7:52:5a:fc:1b:
         5a:6e:39:b1:1d:7d:b7:a5:50:a6:8d:b1:c6:27:10:9a:d5:4b:
         54:a1:5a:db:dd:db:39:35:ab:17:4e:52:47:e8:cf:5d:1a:76:
         ff:db:aa:56:01:56:52:f7:fa:1e:50:07:e2:5a:4d:41:20:95:
         c5:0d:0c:79:cc:d6:67:fd:3a:ec:5e:f9:ad:75:dc:d6:52:1e:
         8b:1c:82:a5:b8:a5:19:9d:e8:9b:9a:31:8a:c5:87:65:9d:aa:
         8e:b5:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:55:46 2025 by rpki-client