This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dde6e25-b721-3b73-87bb-20ff3f8beba2.roa
File:                     3dde6e25-b721-3b73-87bb-20ff3f8beba2.roa (raw, json)
Hash identifier:          vxi0bXulEeNgQ+G0aWFU0rKZ87d/zpYYfwWtWXcPHmk=
Subject key identifier:   2C:15:E1:B1:5A:04:29:7A:C8:15:81:AA:19:20:BE:B4:C4:B2:3F:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C2C8649D705F591C3DBD07880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dde6e25-b721-3b73-87bb-20ff3f8beba2.roa
Signing time:             Sat 13 Dec 2025 14:00:38 +0000
ROA not before:           Sat 13 Dec 2025 14:00:38 +0000
ROA not after:            Fri 13 Mar 2026 13:00:38 +0000
asID:                     35994
IP address blocks:        2600:1408:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2c:86:49:d7:05:f5:91:c3:db:d0:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 13 14:00:38 2025 GMT
            Not After : Mar 13 13:00:38 2026 GMT
        Subject: CN=c70220b0-5d9a-45fd-a99b-3789118591f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:a5:c9:4e:5f:fc:af:60:e9:66:52:1b:06:
                    3a:07:93:47:c0:a6:d2:c3:9a:c2:e2:90:80:a1:cd:
                    2d:92:76:32:69:c2:d7:50:d3:95:2f:46:6d:b6:bc:
                    79:c4:0b:5c:8d:41:6f:b0:c3:bf:ff:bd:92:62:07:
                    c1:92:9d:68:79:ae:e7:5f:89:19:d9:fd:a6:09:0f:
                    ec:ce:d8:33:ab:45:41:8c:e3:a6:6f:33:43:9c:f9:
                    b7:4e:61:cd:40:21:83:6c:01:c9:dc:87:9d:ba:98:
                    e9:cb:4d:69:71:e9:e7:32:f0:b7:e9:3d:58:d1:43:
                    5f:bc:86:38:ee:b0:32:e0:f4:1f:a0:64:13:ea:b0:
                    4c:e7:ef:af:3f:5f:e9:42:bf:03:20:3b:81:97:fe:
                    2b:6a:70:da:46:be:b2:be:89:17:7a:92:70:79:d8:
                    4f:a3:88:6e:96:ab:c2:68:d2:1f:6e:57:57:44:51:
                    db:19:20:40:e9:c4:41:85:d0:be:83:8e:8b:3f:f5:
                    fd:7a:21:ab:87:8a:75:66:5f:6e:d3:a8:2c:0a:d7:
                    46:ba:e7:26:36:a2:88:58:a6:a5:d8:24:e8:8f:3c:
                    f0:37:0c:14:86:46:e7:95:ef:67:a7:19:27:f4:7b:
                    7a:13:ef:fc:7a:1d:b3:b4:4e:db:e7:06:74:4e:f8:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:E1:B1:5A:04:29:7A:C8:15:81:AA:19:20:BE:B4:C4:B2:3F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dde6e25-b721-3b73-87bb-20ff3f8beba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:ef:29:b7:1c:98:29:22:e4:77:be:22:d0:e2:ec:12:d9:
         9d:5f:f9:3f:dd:e9:a2:13:c7:30:a3:95:dc:60:36:59:bc:85:
         26:85:c8:7e:4a:6f:ee:c2:ee:e5:e5:60:1d:fd:22:5a:20:14:
         2e:fd:f7:9d:89:a0:9a:90:8a:69:43:a4:89:c3:f3:fd:25:fb:
         96:20:5f:09:15:5c:17:51:9c:35:d1:af:1e:45:d5:2a:bb:b0:
         7b:8e:39:2f:e4:12:e4:4a:f3:4d:b4:39:71:13:ed:29:3b:dd:
         c7:54:f8:05:5d:79:d2:c2:43:c5:1e:e1:7d:ef:62:19:bb:b0:
         fc:44:42:61:a1:53:37:ee:db:db:98:33:06:7e:ae:db:52:ce:
         8d:4c:db:e1:2b:1f:cc:ca:21:0c:a6:06:44:d4:04:93:b1:a9:
         99:6f:ec:f5:01:c8:38:ce:fe:fe:ab:3b:5b:d0:27:be:a5:be:
         44:ac:5d:9a:4a:d4:b5:64:85:16:9d:0f:99:bd:71:c6:7c:9b:
         60:7e:42:a7:6b:7b:dd:4a:d8:73:0e:75:b5:6d:2c:3d:a8:ba:
         8c:9e:d3:ea:a2:f8:30:af:ca:82:88:04:f1:b1:80:3a:37:32:
         76:1f:1b:b7:9b:8b:fe:2b:b1:10:1c:c1:f5:00:b5:36:ac:eb:
         bc:ea:6f:e0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwshknXBfWRw9vQeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTIxMzE0MDAzOFoXDTI2MDMxMzEzMDAzOFowLzEtMCsGA1UEAxMk
YzcwMjIwYjAtNWQ5YS00NWZkLWE5OWItMzc4OTExODU5MWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTOlyU5f/K9g6WZSGwY6B5NHwKbSw5rC4pCA
oc0tknYyacLXUNOVL0Zttrx5xAtcjUFvsMO//72SYgfBkp1oea7nX4kZ2f2mCQ/s
ztgzq0VBjOOmbzNDnPm3TmHNQCGDbAHJ3Iedupjpy01pcennMvC36T1Y0UNfvIY4
7rAy4PQfoGQT6rBM5++vP1/pQr8DIDuBl/4ranDaRr6yvokXepJwedhPo4hulqvC
aNIfbldXRFHbGSBA6cRBhdC+g46LP/X9eiGrh4p1Zl9u06gsCtdGuucmNqKIWKal
2CTojzzwNwwUhkbnle9npxkn9Ht6E+/8eh2ztE7b5wZ0TvhAmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCwV4bFaBCl6yBWBqhkgvrTEsj/VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RkZTZlMjUtYjcyMS0z
YjczLTg3YmItMjBmZjNmOGJlYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCBAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAINK7ym3HJgpIuR3viLQ4uwS2Z1f+T/d6aITxzCjldxgNlm8hSaF
yH5Kb+7C7uXlYB39IlogFC79952JoJqQimlDpInD8/0l+5YgXwkVXBdRnDXRrx5F
1Sq7sHuOOS/kEuRK8020OXET7Sk73cdU+AVdedLCQ8Ue4X3vYhm7sPxEQmGhUzfu
29uYMwZ+rttSzo1M2+ErH8zKIQymBkTUBJOxqZlv7PUByDjO/v6rO1vQJ76lvkSs
XZpK1LVkhRadD5m9ccZ8m2B+Qqdre91K2HMOdbVtLD2ouoye0+qi+DCvyoKIBPGx
gDo3MnYfG7ebi/4rsRAcwfUAtTas67zqb+A=
-----END CERTIFICATE-----
Generated at Sat Dec 20 04:48:16 2025 by rpki-client