This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af082e6d-a8dc-39c2-95ae-111f14afa6c6.roa
File:                     af082e6d-a8dc-39c2-95ae-111f14afa6c6.roa (raw, json)
Hash identifier:          qccxAOrk8TTtmmA3SwRhjCiia0I0ol7eGwep//PC3Mk=
Subject key identifier:   FB:2A:F4:C3:06:7D:49:C4:34:EA:98:C0:61:E9:78:21:D5:B6:DA:47
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C18FB8A75010C2A2123AA3380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af082e6d-a8dc-39c2-95ae-111f14afa6c6.roa
Signing time:             Sat 06 Dec 2025 14:00:38 +0000
ROA not before:           Sat 06 Dec 2025 14:00:38 +0000
ROA not after:            Fri 06 Mar 2026 14:00:38 +0000
asID:                     20940
IP address blocks:        2600:1417:47::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:18:fb:8a:75:01:0c:2a:21:23:aa:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  6 14:00:38 2025 GMT
            Not After : Mar  6 14:00:38 2026 GMT
        Subject: CN=a5bff201-4335-4fc7-aa6b-6bda4466ed66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:8d:99:48:0f:23:27:6b:18:76:35:92:3f:
                    8d:f1:e4:f4:aa:b7:af:6f:93:78:29:17:18:51:b3:
                    c0:6a:84:a2:43:57:46:6d:35:54:94:41:4d:19:49:
                    1d:ec:8e:8e:e0:54:ee:3a:db:17:af:ee:9d:7d:7a:
                    05:81:22:9a:c9:28:f1:3c:f8:d9:32:98:1b:d3:07:
                    d6:d7:83:99:85:95:3a:9a:ab:23:c2:aa:32:24:da:
                    3b:df:6c:e3:ce:cc:80:15:e5:81:e6:df:cf:81:be:
                    a3:ea:6c:35:d7:a7:fa:4b:a2:90:74:4b:33:88:c3:
                    30:1d:16:97:69:7e:e5:bb:77:9c:05:32:95:5d:49:
                    d9:a8:64:01:13:7b:a0:cd:72:ed:6a:ec:44:03:c9:
                    40:d2:e9:cc:41:56:0a:c4:06:c3:7e:0b:37:06:cd:
                    62:06:4a:94:de:c4:4b:ca:13:21:56:28:19:41:b1:
                    d2:d1:58:14:1b:9e:af:e8:9c:fd:f9:bc:7d:86:69:
                    86:1a:e5:75:af:bb:4c:be:6b:75:65:46:c7:49:08:
                    1e:73:ef:b8:ef:5c:02:c6:24:cc:d8:68:7b:f2:55:
                    24:23:32:c5:6c:4b:9e:e9:03:f0:55:b8:7a:b4:4c:
                    af:00:84:ce:bb:67:9f:1c:f1:14:34:68:0b:85:83:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2A:F4:C3:06:7D:49:C4:34:EA:98:C0:61:E9:78:21:D5:B6:DA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af082e6d-a8dc-39c2-95ae-111f14afa6c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:47::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:2f:e9:59:11:b8:15:da:55:f7:bc:39:83:7f:17:f6:a9:e1:
         ae:db:12:4f:e3:cb:54:46:ac:d6:b9:d7:ac:ca:99:f1:4b:e5:
         75:1e:a0:55:6f:b1:d6:b7:51:b4:8d:40:0a:75:8a:0a:5a:de:
         44:27:cb:6a:e8:96:fa:15:93:cb:b7:cd:61:dd:8b:e1:e3:49:
         7b:90:df:ba:e3:b3:cd:f8:7f:22:7d:1f:2a:a6:d7:74:00:0a:
         27:0c:32:0d:4f:55:c9:4b:24:4c:1e:01:06:df:c3:f1:eb:53:
         42:ef:14:df:af:42:9e:6f:27:cc:3f:45:ad:cf:7b:f9:45:be:
         b1:82:6d:0e:60:fc:98:bd:31:5c:ef:16:50:e4:4c:43:e7:15:
         37:c3:58:01:60:bf:7f:56:e0:0d:66:c2:db:3f:e2:cb:e3:3c:
         91:b1:97:df:c6:8f:a3:0a:d7:d1:09:60:ab:66:4a:fe:3c:06:
         01:84:80:63:d6:5e:1b:c7:85:ce:1b:2b:49:27:97:35:32:11:
         2a:0c:19:2f:c7:d5:54:13:e6:1f:7c:1e:82:40:bd:b4:89:09:
         b7:38:3f:f2:0c:2e:c1:f9:c3:ca:aa:bf:9c:d4:36:ab:b9:59:
         3a:2c:92:0e:40:79:a3:e7:57:04:da:f5:79:26:f4:8b:ff:fd:
         ec:d2:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:13:30 2025 by rpki-client