This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/323630353a643538303a3a2f33322d3332203d3e203436363930.roa
File:                     323630353a643538303a3a2f33322d3332203d3e203436363930.roa (raw, json)
Hash identifier:          t0d7jWZCW8xaBDbjdabOMaHXgVgwaiRrWbOr2MBuVjU=
Subject key identifier:   65:C5:70:7C:6E:70:82:D3:90:DE:7F:1F:C1:53:AA:1A:85:85:7B:F7
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       1B25A230CD2330D0C9004CE9FED022DD88B40F2E
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/323630353a643538303a3a2f33322d3332203d3e203436363930.roa
Signing time:             Thu 29 Jan 2026 06:03:20 +0000
ROA not before:           Thu 29 Jan 2026 05:58:20 +0000
ROA not after:            Thu 28 Jan 2027 06:03:20 +0000
asID:                     46690
IP address blocks:        2605:d580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Feb 2026 22:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:25:a2:30:cd:23:30:d0:c9:00:4c:e9:fe:d0:22:dd:88:b4:0f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Jan 29 05:58:20 2026 GMT
            Not After : Jan 28 06:03:20 2027 GMT
        Subject: CN=65C5707C6E7082D390DE7F1FC153AA1A85857BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b7:b8:74:ef:53:1f:12:16:fc:bb:4e:49:07:
                    a1:13:1f:38:1f:5f:6e:20:12:a7:cb:d3:20:b3:a6:
                    db:4b:fa:a8:16:7c:ac:35:5c:10:17:d7:33:db:97:
                    54:7b:b5:4f:3e:e5:9a:bc:0c:26:b1:31:ee:47:3e:
                    a6:a0:98:05:63:aa:77:c5:5f:5d:c5:5f:18:4d:1b:
                    9e:66:29:0a:1e:01:76:13:0e:3b:a4:66:a5:20:8e:
                    e3:e2:a7:9b:df:f9:96:72:ce:62:e3:fe:6d:29:11:
                    de:91:4b:71:18:84:89:12:cb:48:69:d7:0e:cc:0f:
                    9c:c4:20:b6:65:23:a6:4a:4e:4d:d8:94:38:98:0b:
                    d0:ce:b6:6d:75:29:49:4d:a1:37:2f:ff:08:24:8e:
                    b2:ff:f8:ea:e9:6e:d9:41:2a:71:39:7f:cc:1d:f1:
                    d5:2c:93:7b:48:5f:33:a0:c2:d4:03:da:15:19:a8:
                    30:0a:d8:ff:a7:fc:fa:83:f9:d4:a5:53:98:5d:1e:
                    6e:23:73:70:da:49:22:a7:6d:fc:03:a3:f7:82:fe:
                    84:ca:3f:61:6e:a5:56:29:73:b7:01:c8:a7:b7:82:
                    20:fc:20:42:73:3e:73:9c:a4:38:92:f4:0b:10:27:
                    ef:9a:3b:d0:d4:5e:97:ee:d6:ba:2a:e4:d4:9f:92:
                    ce:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C5:70:7C:6E:70:82:D3:90:DE:7F:1F:C1:53:AA:1A:85:85:7B:F7
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/323630353a643538303a3a2f33322d3332203d3e203436363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d580::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:fd:ac:6c:76:13:fe:6d:e9:cc:6d:74:12:62:66:a4:6e:54:
         4c:4c:99:b7:40:ad:50:ad:6a:ed:ab:2f:31:16:00:ce:9b:c5:
         e3:b5:93:b4:f9:a6:bc:f9:c1:17:30:a9:68:d6:d8:b6:04:2d:
         a8:cb:91:27:df:f6:9a:23:0a:66:f0:bd:1c:40:92:95:8d:fc:
         41:92:27:76:2f:8a:ac:cb:58:f7:ef:b8:e2:90:62:0b:cf:33:
         f0:16:85:b1:51:1b:af:da:0c:a5:ac:e7:d3:2f:9c:8f:c4:74:
         a7:1b:7b:ca:09:c4:b3:99:ec:e0:06:6d:03:48:2b:22:f8:5a:
         4e:64:96:d6:18:e0:7e:35:25:86:7f:e3:0d:50:c1:de:6d:62:
         fa:28:27:88:d3:15:04:75:bc:f0:70:37:d4:ad:a9:b1:fb:ea:
         d7:79:64:58:f4:ac:73:dc:cd:7a:7f:10:1a:eb:b5:17:41:24:
         4d:79:5d:f8:f1:4b:06:46:cb:18:05:46:01:03:15:77:95:d1:
         a3:0b:0a:68:7a:02:61:7d:f5:b7:3f:11:01:7d:08:3f:d3:3c:
         ba:90:fd:ff:db:f3:40:41:c1:1a:62:94:7d:f7:82:db:21:71:
         bd:a2:ef:e5:ff:d0:ad:00:ea:77:49:0a:e3:74:34:ce:e9:f1:
         46:80:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 10:42:35 2026 by rpki-client