This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28f00cc0-2814-3b3a-82bd-71e597880e5a.roa
File:                     28f00cc0-2814-3b3a-82bd-71e597880e5a.roa (raw, json)
Hash identifier:          hUWR3CQvxyV4au2UQfYdZe/O4+TadbEL+Zotyd1hofA=
Subject key identifier:   09:0A:9A:86:6E:DA:53:C5:ED:95:61:CC:96:DE:37:2F:6E:D5:F3:08
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BF615F389D1ADFC41C7189B80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28f00cc0-2814-3b3a-82bd-71e597880e5a.roa
Signing time:             Mon 24 Nov 2025 02:00:32 +0000
ROA not before:           Mon 24 Nov 2025 02:00:32 +0000
ROA not after:            Sun 22 Feb 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e87:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f6:15:f3:89:d1:ad:fc:41:c7:18:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Nov 24 02:00:32 2025 GMT
            Not After : Feb 22 02:00:32 2026 GMT
        Subject: CN=cb463c08-148f-401b-9eb2-a7a889f7a6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:9a:c9:e1:10:40:12:8c:70:c5:9b:20:82:
                    a2:a9:65:ee:9b:5f:28:6b:8a:09:0a:3a:83:9a:be:
                    eb:ed:2d:6c:79:12:50:72:5e:c0:10:ea:ac:99:f6:
                    58:44:59:d3:49:ce:92:0f:86:da:fb:dd:70:b0:37:
                    ba:e5:e1:be:9a:4e:3d:98:11:d4:e0:f2:84:72:50:
                    96:1b:94:27:ac:9e:38:c5:10:0c:73:31:d1:1e:26:
                    96:55:93:0a:90:03:9d:5b:19:8b:4c:7d:fc:bb:0c:
                    bd:d5:d8:39:16:fb:5e:da:09:8f:2b:df:a2:f1:32:
                    5c:76:cf:fc:5e:28:be:71:e7:3b:72:a6:2e:22:86:
                    39:4f:81:bf:f0:d1:46:48:b4:1c:ee:bd:80:c0:8e:
                    01:6c:9e:68:91:e6:03:ff:9d:57:a2:71:34:cc:57:
                    15:71:81:e0:8d:68:29:21:ad:a7:ef:48:20:74:b8:
                    73:c6:43:01:b6:9f:a3:08:87:3a:f9:08:5c:d2:76:
                    ff:2d:99:81:66:1c:22:39:c9:f0:78:81:45:14:16:
                    ad:f3:4a:89:d8:3e:52:6e:92:d3:3d:60:8f:af:13:
                    d0:37:fc:6e:17:0b:8a:ca:63:0e:da:4f:8a:c4:9f:
                    ed:a6:94:5b:a4:5d:5e:9c:96:b6:8e:35:53:00:d3:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0A:9A:86:6E:DA:53:C5:ED:95:61:CC:96:DE:37:2F:6E:D5:F3:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28f00cc0-2814-3b3a-82bd-71e597880e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5f:87:f3:d5:3c:9e:fc:7e:71:4e:bc:ab:4a:88:65:70:35:
         8d:e9:70:cb:7a:b8:4e:81:5b:02:27:df:3c:07:77:4d:31:74:
         5d:e5:6b:f7:b4:01:fa:4e:3f:57:08:b5:f4:90:11:d3:87:d1:
         24:fb:58:8b:d8:46:c1:63:e1:fa:ad:99:4d:ce:fe:75:7f:11:
         8e:b0:71:76:1d:3e:77:a2:97:a5:9d:5d:1c:ab:9b:85:a3:40:
         76:01:76:f5:56:65:cf:f5:4f:5f:6e:e9:a3:15:b4:50:c5:2d:
         84:89:4a:d6:e5:d4:dc:70:48:ce:f4:02:14:b6:7c:08:60:1b:
         62:7f:ed:e5:ac:e6:72:ca:79:f1:8d:85:63:bf:96:4a:99:78:
         43:bb:86:4b:b7:cc:d6:95:c1:cb:39:ee:06:f6:b3:10:09:ad:
         79:3c:c2:51:5a:11:7c:8a:35:64:a2:05:ae:f0:12:fc:e9:a9:
         fe:fe:0f:be:e9:91:86:e0:e2:6f:89:66:d9:e0:96:80:5e:ba:
         f2:4a:70:ec:8b:57:02:99:07:f7:79:a7:9a:81:fe:5f:c8:03:
         33:1e:37:e5:d0:fa:d9:8e:b6:12:4c:bb:80:82:97:f6:0e:eb:
         21:97:17:ef:80:00:b3:a7:0c:b9:09:6f:24:69:63:33:e0:81:
         f5:48:90:b6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEv2FfOJ0a38QccYm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk
Y2I0NjNjMDgtMTQ4Zi00MDFiLTllYjItYTdhODg5ZjdhNmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHeayeEQQBKMcMWbIIKiqWXum18oa4oJCjqD
mr7r7S1seRJQcl7AEOqsmfZYRFnTSc6SD4ba+91wsDe65eG+mk49mBHU4PKEclCW
G5QnrJ44xRAMczHRHiaWVZMKkAOdWxmLTH38uwy91dg5Fvte2gmPK9+i8TJcds/8
Xii+cec7cqYuIoY5T4G/8NFGSLQc7r2AwI4BbJ5okeYD/51XonE0zFcVcYHgjWgp
Ia2n70ggdLhzxkMBtp+jCIc6+Qhc0nb/LZmBZhwiOcnweIFFFBat80qJ2D5SbpLT
PWCPrxPQN/xuFwuKymMO2k+KxJ/tppRbpF1enJa2jjVTANN3tQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAkKmoZu2lPF7ZVhzJbeNy9u1fMIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjhmMDBjYzAtMjgxNC0z
YjNhLTgyYmQtNzFlNTk3ODgwZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh+gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATl+H89U8nvx+cU68q0qIZXA1jelwy3q4ToFbAiffPAd3TTF0XeVr
97QB+k4/Vwi19JAR04fRJPtYi9hGwWPh+q2ZTc7+dX8RjrBxdh0+d6KXpZ1dHKub
haNAdgF29VZlz/VPX27poxW0UMUthIlK1uXU3HBIzvQCFLZ8CGAbYn/t5azmcsp5
8Y2FY7+WSpl4Q7uGS7fM1pXByznuBvazEAmteTzCUVoRfIo1ZKIFrvAS/Omp/v4P
vumRhuDib4lm2eCWgF668kpw7ItXApkH93mnmoH+X8gDMx435dD62Y62Eky7gIKX
9g7rIZcX74AAs6cMuQlvJGljM+CB9UiQtg==
-----END CERTIFICATE-----
Generated at Tue Nov 25 13:58:14 2025 by rpki-client