This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f42c5acb-aa52-33ec-a9c0-d7ae0368fc7e.roa
File:                     f42c5acb-aa52-33ec-a9c0-d7ae0368fc7e.roa (raw, json)
Hash identifier:          XKNVbiItsPCGsHIUrEGm34XwRKWty9OADqgX9nkOhxk=
Subject key identifier:   E1:C0:84:E3:66:A7:97:7A:9D:FF:18:A6:35:BE:B7:40:18:6D:06:8C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C18FB8615058201C30F83B080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f42c5acb-aa52-33ec-a9c0-d7ae0368fc7e.roa
Signing time:             Sat 06 Dec 2025 14:00:38 +0000
ROA not before:           Sat 06 Dec 2025 14:00:38 +0000
ROA not after:            Fri 06 Mar 2026 14:00:38 +0000
asID:                     20940
IP address blocks:        2600:1417:76::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:18:fb:86:15:05:82:01:c3:0f:83:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  6 14:00:38 2025 GMT
            Not After : Mar  6 14:00:38 2026 GMT
        Subject: CN=edd1565e-17f4-4141-8ff3-3e6c707e3c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3f:63:d3:22:22:68:c7:d9:d1:5c:b6:8c:aa:
                    47:c4:57:e1:61:d5:c4:51:d8:e3:1b:40:09:9b:54:
                    b6:77:97:c4:33:14:d8:6e:62:89:14:9a:93:79:cd:
                    e8:cf:7c:b0:0f:e1:89:6a:cf:ea:fc:d1:fb:9e:4d:
                    7f:e6:e1:9f:59:ce:9d:b5:07:84:f1:c5:cc:b1:5c:
                    1a:08:f0:d8:fa:c5:6e:f3:98:a6:5c:b2:89:09:8e:
                    78:8c:5c:c0:27:2a:43:99:3b:8f:ee:ef:a0:a3:9d:
                    d7:30:1b:4d:ae:4c:f7:69:66:4a:cd:d5:03:07:8c:
                    b9:cd:a5:43:47:8a:13:fd:e6:bd:52:c4:34:aa:e1:
                    61:97:ed:e0:1b:27:e0:20:3b:83:af:89:3e:df:8e:
                    96:9b:89:89:06:65:30:35:7f:1b:82:48:ff:3b:f8:
                    ad:88:e8:24:ac:4f:21:6c:50:8b:68:ef:ae:de:12:
                    2d:9e:43:04:a6:04:79:13:0f:00:5d:62:be:02:e8:
                    e5:f6:ef:a2:20:1d:3e:d7:03:1e:0d:62:7f:71:55:
                    ea:f3:dd:3f:56:bf:19:ab:89:c6:20:a4:93:96:2d:
                    b3:cb:41:b8:45:f1:d4:39:50:47:6a:89:55:a5:e7:
                    05:19:11:15:df:e2:8c:fa:ba:a4:01:8d:1b:90:aa:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C0:84:E3:66:A7:97:7A:9D:FF:18:A6:35:BE:B7:40:18:6D:06:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f42c5acb-aa52-33ec-a9c0-d7ae0368fc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:76::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:8c:53:77:86:2f:2e:eb:c0:6c:2c:6a:a3:f1:3e:4a:82:37:
         d4:20:ed:0c:96:a3:c2:60:79:bf:e1:eb:a4:59:90:d1:81:83:
         26:c5:39:11:2b:d6:bf:97:b4:5f:9d:61:ec:9d:00:7e:dc:ad:
         08:ae:81:8e:5c:af:d7:d5:8d:46:ff:1f:f9:d9:07:ee:da:30:
         8f:48:21:c1:32:f0:42:bc:28:6a:31:95:66:81:b5:2f:03:1a:
         0c:0d:d0:86:09:81:d8:d2:3c:3a:4f:6d:69:46:4d:40:14:6d:
         60:d2:1c:a3:e5:c4:82:d8:16:ca:9b:d2:a2:19:06:85:11:ae:
         da:1f:ce:0d:dd:cc:a5:c9:c5:72:32:d6:d6:84:df:b4:80:e1:
         85:70:74:be:6f:df:96:ec:4e:2b:41:f6:7f:d6:d4:71:7a:d2:
         bf:c8:dc:70:a4:b8:8f:f7:5d:9f:18:ef:72:97:94:5c:3b:3f:
         11:f6:c7:04:c7:48:f9:6c:d4:80:0a:1f:e3:03:81:5d:fb:39:
         1f:16:7d:22:0f:ef:cd:f9:2a:7c:b4:3e:c7:f1:b9:42:6a:9b:
         ba:41:c5:2e:01:8e:5b:a6:48:b4:14:3d:6c:d5:03:ae:23:15:
         43:70:70:e2:2f:9a:8a:59:ad:fc:11:e1:10:48:c7:1e:e6:d2:
         eb:e4:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:20:10 2025 by rpki-client