This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4560e7-1722-3c2c-9e61-3703ea722f90.roa
File:                     bf4560e7-1722-3c2c-9e61-3703ea722f90.roa (raw, json)
Hash identifier:          CvHVzgLcJMnM1NIErOmCHmSlxSFuYybjwCJU1uUmFVM=
Subject key identifier:   28:C1:C8:B4:8F:13:A2:22:D5:BB:15:D1:DB:83:7E:0B:64:E4:4D:5E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C2C8649EA82CDBFC6DFB17C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4560e7-1722-3c2c-9e61-3703ea722f90.roa
Signing time:             Sat 13 Dec 2025 14:00:38 +0000
ROA not before:           Sat 13 Dec 2025 14:00:38 +0000
ROA not after:            Fri 13 Mar 2026 13:00:38 +0000
asID:                     35994
IP address blocks:        2600:1408:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2c:86:49:ea:82:cd:bf:c6:df:b1:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 13 14:00:38 2025 GMT
            Not After : Mar 13 13:00:38 2026 GMT
        Subject: CN=cbbf62ce-53fc-44eb-873b-982c79bc6fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1d:22:3a:94:67:27:9d:dc:dc:ef:14:87:35:
                    3f:e5:fb:5d:57:49:6b:b7:64:03:ee:4f:7f:7c:70:
                    ad:f4:60:57:49:b6:3a:b5:12:42:09:20:c1:ec:8c:
                    dd:d3:5e:b1:6e:cf:b5:d6:4c:77:b2:71:1d:e1:4e:
                    01:92:36:90:c8:98:08:73:b6:3d:a3:82:3b:df:11:
                    15:31:e2:5c:c1:4d:e7:43:e8:7e:9b:79:93:87:5a:
                    dd:b3:7a:91:8e:b3:22:e6:a9:2f:0f:d3:1e:22:35:
                    6d:ae:f9:1e:d4:0c:96:10:38:4f:d2:03:0c:6b:a2:
                    f1:ae:ed:13:33:2b:d3:29:56:77:b1:b4:59:8a:e1:
                    5a:62:0e:7e:63:ac:9b:66:8e:7e:42:2c:d8:71:f6:
                    b6:f6:f2:69:39:91:ca:0e:19:d6:bf:dc:8f:0e:05:
                    f1:18:2c:bb:37:20:23:73:6e:75:09:43:6c:fe:33:
                    16:83:89:58:24:e9:58:b2:d0:aa:af:61:5a:12:63:
                    05:27:97:0f:0b:48:25:d6:c7:cd:3a:fd:92:41:23:
                    9c:c3:ac:c2:3c:ea:2d:e3:53:15:b8:cd:e8:e5:4f:
                    c5:24:13:32:26:1f:40:b8:6d:88:2c:90:d5:bb:9c:
                    bc:be:48:1e:93:da:78:74:79:2a:e3:cb:c0:66:1d:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C1:C8:B4:8F:13:A2:22:D5:BB:15:D1:DB:83:7E:0B:64:E4:4D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4560e7-1722-3c2c-9e61-3703ea722f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:bb:8b:75:b0:49:35:31:b1:ac:e6:aa:c9:f2:c8:0c:b5:5c:
         f4:13:92:aa:77:2d:3c:fe:9d:6a:13:cf:14:67:8d:ff:60:0c:
         4d:26:96:64:ff:ba:6f:b9:e3:ef:1f:8a:95:0b:a2:84:58:6d:
         4b:c9:21:f9:9a:77:47:ed:50:44:23:84:bd:ab:0a:89:f2:6b:
         7e:f3:04:1d:56:64:ce:db:17:37:29:18:a7:62:96:e6:dc:c9:
         27:93:21:a4:5f:72:6f:f7:04:e5:e9:eb:a2:02:7a:9b:4a:19:
         6f:d4:20:b1:67:8f:8d:1a:c1:64:44:83:ef:be:20:42:8a:22:
         d8:a1:50:98:31:f0:dc:fa:51:cd:a3:9b:7d:d9:3c:41:90:dd:
         cd:ed:5d:99:ff:85:0e:ae:cf:b7:64:e6:f8:83:6e:8e:6b:d5:
         a5:72:51:63:40:1c:ad:42:39:2a:71:3a:34:9f:26:c4:39:44:
         ef:93:c9:dd:ae:c5:76:81:c6:d3:f8:b9:da:f3:4d:b0:db:67:
         71:0f:1f:20:48:61:bb:66:5b:d2:16:69:dd:ff:8c:01:49:be:
         8d:78:d1:91:1e:f9:de:85:37:89:39:d7:15:ec:62:32:e0:74:
         37:15:95:e6:75:4a:f5:6d:bf:95:6d:28:9d:42:c8:59:3c:48:
         a1:24:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:14:40 2025 by rpki-client