This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa
File:                     3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (raw, json)
Hash identifier:          JZhFCOtqRPDL4S1+iP3Z80JUrKeze/UyBubmdh0K4ew=
Subject key identifier:   BD:90:2F:FF:ED:EA:C2:9E:7E:15:E3:4B:92:82:2C:57:D0:F6:BE:74
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584C2426433E321864578F5CDF38
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa
Signing time:             Wed 10 Dec 2025 14:00:38 +0000
ROA not before:           Wed 10 Dec 2025 14:00:38 +0000
ROA not after:            Tue 10 Mar 2026 13:00:38 +0000
asID:                     14230
IP address blocks:        2607:fb20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:26:43:3e:32:18:64:57:8f:5c:df:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Dec 10 14:00:38 2025 GMT
            Not After : Mar 10 13:00:38 2026 GMT
        Subject: CN=20b68d6a-b2ae-4b3f-ada6-47c878da9e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:23:88:9c:67:ca:67:84:72:16:0d:4c:18:
                    10:2a:b2:15:15:6d:a9:58:23:c3:88:7b:7b:b6:4a:
                    f2:fa:00:16:02:ce:27:87:ab:02:c3:0d:f7:53:1c:
                    47:53:f3:f8:a5:c2:de:42:b5:ce:4a:55:be:2c:07:
                    16:14:2e:3f:64:4d:d8:b9:0e:b4:ba:b3:92:2d:ac:
                    7a:1b:f0:b6:dd:98:e3:7f:2e:e7:4e:b2:15:69:2a:
                    1b:cc:7e:ea:da:7a:37:aa:59:62:0c:6f:c0:73:98:
                    1e:33:18:69:c6:0f:69:c0:b2:8c:45:06:2a:60:05:
                    19:27:f0:13:f7:26:3e:4f:11:86:42:dd:ad:d7:1c:
                    c3:d2:7a:da:c8:01:09:22:3b:28:78:25:43:83:16:
                    0f:43:99:4e:92:04:a5:df:25:0e:50:41:2d:36:9c:
                    c8:09:01:ca:4a:21:12:de:5d:15:5b:1f:b6:96:1e:
                    13:f8:32:f6:ed:4a:02:ea:8e:65:b2:05:7f:61:e9:
                    1c:bc:51:e3:2b:77:cc:0a:84:c4:01:f3:2b:9a:56:
                    17:3e:45:54:4c:57:cd:4a:21:6e:ce:01:38:0d:3e:
                    ed:53:5d:0c:12:ec:c8:0c:20:56:1d:8f:b2:88:65:
                    49:60:b3:b2:be:b8:a6:d4:35:37:84:d5:07:c9:fb:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:90:2F:FF:ED:EA:C2:9E:7E:15:E3:4B:92:82:2C:57:D0:F6:BE:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a9:f7:c0:d9:55:c5:89:1c:4a:f3:1e:96:9a:dd:76:ec:5c:
         2b:39:9d:6c:6f:0f:25:b4:0d:37:4b:01:4e:1b:6c:d9:63:8a:
         82:7c:af:a8:e9:00:c0:0b:3e:1e:47:e8:c1:dc:94:7e:a3:80:
         c9:8b:c9:74:49:e8:d0:de:34:af:d1:7c:65:df:34:02:24:f1:
         91:dd:c1:18:28:38:f5:63:e1:2d:1e:2c:0d:16:20:9b:89:f3:
         d4:f9:cb:b1:d6:f0:84:f5:90:6a:aa:fc:66:1e:1d:5c:cd:d6:
         99:54:e7:06:75:9e:88:0e:ea:9d:ea:4c:49:eb:d2:e2:9f:64:
         7a:d0:50:af:09:4d:78:f2:ba:00:15:8a:8b:a9:5b:44:76:c4:
         6b:87:45:0c:32:46:fd:78:cb:41:eb:3f:f5:26:d3:1b:aa:8b:
         98:8b:95:85:cd:32:d4:e9:0a:a4:b6:39:a8:9a:f2:01:90:3e:
         77:5f:67:1d:ea:db:89:14:69:f4:52:8a:71:ac:aa:db:37:81:
         ed:d2:ad:4c:ef:84:fc:5d:77:c8:4c:ae:ce:5a:64:d0:55:f0:
         52:31:d5:49:37:ab:4d:35:f4:80:8c:e4:33:42:4f:17:79:be:
         92:d9:a8:e1:ca:05:67:de:9e:31:22:10:34:e4:1f:83:17:37:
         e3:af:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:07:22 2025 by rpki-client