This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4b2b627-ca05-3324-b101-def0c680209f.roa
File:                     e4b2b627-ca05-3324-b101-def0c680209f.roa (raw, json)
Hash identifier:          192PmmEOm7evx7HSbGtH8RV6FLMNtTT6zTER5uPc4MU=
Subject key identifier:   4A:55:87:80:E8:CB:51:18:E9:2F:54:8B:1C:72:6D:0B:83:01:17:3B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C45A66B52A3B2140A1DF60300
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4b2b627-ca05-3324-b101-def0c680209f.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     12041
IP address blocks:        2001:500:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a6:6b:52:a3:b2:14:0a:1d:f6:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=9d3a0623-8e17-4f9b-9bc8-1e947c82eaa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:6b:3a:39:71:9f:6d:9e:12:9d:fd:d9:99:
                    90:2a:af:cf:5a:48:8f:96:93:46:1c:a2:6e:74:63:
                    94:bb:44:e2:70:c8:f2:bb:ce:0a:f1:dd:c5:2b:e4:
                    a3:2e:15:43:24:e9:10:9d:90:cb:69:3a:82:33:9c:
                    d3:d5:49:1c:3d:fb:7e:4d:0e:6e:61:25:89:f9:a0:
                    c5:bf:79:74:c1:6e:6f:02:79:22:7a:94:72:06:8e:
                    64:74:67:a9:4d:13:fc:02:ad:47:25:b0:9a:7f:8b:
                    aa:61:0d:22:76:0d:5a:b5:22:b1:82:92:9d:8d:9b:
                    33:e7:bb:0c:53:cb:e8:45:94:0c:10:d5:f0:36:f2:
                    28:d0:b8:89:d7:8a:7f:1b:3d:d9:3a:40:f3:2f:93:
                    b8:98:4e:c3:69:78:18:df:24:bf:33:9f:a5:40:45:
                    e5:95:77:66:30:8c:0d:9c:f0:e7:ad:d8:d4:5c:0a:
                    63:ba:c8:64:cf:be:2b:52:5e:bc:a6:9f:3c:23:3e:
                    d6:4b:7a:df:3e:b9:f3:db:76:85:20:5d:31:3d:e4:
                    31:9b:81:92:53:d2:5d:89:40:33:b5:41:61:36:d7:
                    a0:fe:25:52:ff:cc:1c:4f:9e:50:96:74:29:76:62:
                    b2:f2:2f:0d:ea:17:f2:96:48:a2:01:16:6a:2c:20:
                    01:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:55:87:80:E8:CB:51:18:E9:2F:54:8B:1C:72:6D:0B:83:01:17:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4b2b627-ca05-3324-b101-def0c680209f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:e5:64:ef:71:de:e0:10:c6:52:49:9c:cb:80:a9:be:12:
         78:8e:de:dd:e7:33:76:3b:07:82:1a:2f:b8:41:c6:94:15:ec:
         49:0b:a1:2a:b7:8c:ce:1d:1e:46:d6:69:49:bf:a0:0a:4c:96:
         71:15:49:ea:39:f7:7b:ea:ab:40:ee:d6:25:14:a0:45:54:8e:
         c9:c3:39:d0:10:5b:6c:05:bb:7a:49:ff:46:6e:c7:d4:f1:c9:
         c1:41:f0:02:43:a6:f8:9a:6b:79:7b:10:56:ad:0d:2d:e5:ac:
         58:79:f9:a5:b9:9b:33:96:c3:24:76:55:33:2c:ff:d0:5e:ff:
         63:af:d7:ec:94:86:e0:7e:5f:07:14:43:ce:c7:43:84:2a:69:
         78:71:f3:5f:f4:da:f4:a2:7b:86:ab:fc:6a:bd:b6:4b:53:81:
         2d:a7:b1:3b:81:e6:6d:69:75:f8:00:06:0d:aa:0c:22:59:72:
         e0:7f:f2:cb:62:01:28:77:2c:67:06:7f:95:ea:50:d0:d0:c9:
         7a:a1:25:f2:bc:39:f4:3b:e4:d0:c8:5c:98:da:4e:2c:10:64:
         f4:ba:36:e3:ab:4b:7c:87:c4:7d:24:f9:14:94:10:e1:68:40:
         e2:24:18:54:d3:b7:ef:c8:93:20:62:42:03:5f:d3:96:94:50:
         b6:b2:d9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 02:56:11 2025 by rpki-client