This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa
File:                     fff9ea91-21f3-3786-be09-fd1a98051694.roa (raw, json)
Hash identifier:          K57di2a1Lbyhyli0P+F+RBPuS59TW+g64SjtCGH8Luk=
Subject key identifier:   46:2F:DA:B0:94:5E:03:85:E0:19:9E:1D:82:D0:FC:29:3D:7E:1B:1A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C2C86559C00A41EE009036440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa
Signing time:             Sat 13 Dec 2025 14:00:38 +0000
ROA not before:           Sat 13 Dec 2025 14:00:38 +0000
ROA not after:            Fri 13 Mar 2026 13:00:38 +0000
asID:                     17717
IP address blocks:        2001:470:3fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2c:86:55:9c:00:a4:1e:e0:09:03:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 13 14:00:38 2025 GMT
            Not After : Mar 13 13:00:38 2026 GMT
        Subject: CN=532a7e87-5f83-4358-950f-7141034eee15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:09:10:cf:50:b6:f1:ec:72:b9:8f:66:f4:
                    4e:ba:b1:44:2d:ff:7e:eb:e6:e5:f6:aa:7e:3c:2d:
                    47:e3:ce:07:15:17:49:98:04:58:17:00:77:9f:a0:
                    61:61:ff:ed:4c:71:4c:73:21:f7:af:39:77:9a:c1:
                    70:5f:64:9b:b6:0d:00:51:53:a1:d4:fb:8d:6e:22:
                    f2:59:12:85:f0:ed:10:ce:61:29:02:85:39:e9:72:
                    ec:f9:85:c0:7d:c5:1d:d1:05:12:23:89:c2:ea:81:
                    02:25:ac:d7:8c:c3:cd:90:f3:6f:8b:77:c1:b4:98:
                    6a:9b:84:52:bf:7d:7c:18:ce:f5:e7:3d:e8:71:76:
                    d5:6f:5c:e9:ee:e6:60:9f:bf:13:ab:98:35:f9:92:
                    73:d7:6f:53:29:5c:fc:ed:ac:3b:a2:95:8d:9b:08:
                    19:62:fc:13:da:f1:29:d7:ff:7d:ac:68:5b:be:72:
                    e9:2d:80:b1:b6:ef:54:9e:91:2b:07:58:00:d8:55:
                    22:5c:2d:9f:a1:19:7c:1e:b6:15:61:a9:3f:7b:0a:
                    6e:50:5a:26:49:23:fa:6e:ff:ca:51:84:41:e3:4b:
                    c7:c0:6a:72:2d:48:40:70:68:a3:72:2c:5a:7f:9f:
                    bd:73:b3:12:50:fa:5a:9b:13:7d:df:d1:cd:ec:1a:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2F:DA:B0:94:5E:03:85:E0:19:9E:1D:82:D0:FC:29:3D:7E:1B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e4:72:39:4e:60:78:3d:66:68:d4:73:27:46:db:5d:b2:4a:
         74:1f:1d:12:8e:4c:b6:81:d2:cd:f9:54:3b:4f:8c:7e:8f:dc:
         aa:a6:d0:79:5a:8b:8b:8b:58:69:92:62:4c:b9:33:41:05:01:
         9e:a3:c6:cc:1f:3e:0d:23:6a:b8:8a:16:8a:10:9e:4c:30:17:
         a6:79:68:7f:0d:e3:5c:f2:06:06:57:52:c1:f8:92:0a:66:62:
         c7:b4:5c:95:ac:ef:40:d3:dc:9a:09:c4:56:08:99:06:b2:a9:
         0c:f7:f5:b2:26:17:32:17:ff:08:bd:09:14:33:c8:02:40:a4:
         5a:c1:72:81:4d:13:5e:67:a1:8e:cd:ac:e9:81:66:da:2b:4c:
         a4:4f:7c:21:7f:c5:aa:53:38:04:0d:b3:fc:1a:f8:d8:13:74:
         4c:58:20:eb:63:83:63:e2:49:3d:cd:08:15:b2:98:1d:88:d5:
         17:f8:6d:48:b4:23:e2:70:31:a3:e5:88:7d:53:1e:26:c7:f0:
         ae:d0:ae:13:d5:83:ba:9a:16:8b:91:bf:8b:f3:b9:7e:c4:fb:
         32:fd:99:87:f1:4b:83:e2:d3:70:19:d7:d4:48:4c:5d:df:67:
         0e:3d:66:ec:98:3c:b3:75:20:37:5b:07:ca:1e:f7:52:b3:0a:
         31:36:8b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:53:44 2025 by rpki-client