This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2f5a9c3f-ea79-354d-8bb2-a9498cf689f0.roa
File:                     2f5a9c3f-ea79-354d-8bb2-a9498cf689f0.roa (raw, json)
Hash identifier:          bv5v4Z644Ulm9E9cZaE/N2Ne6L97Ahu1moyOv1+PSVY=
Subject key identifier:   12:7E:E8:55:EF:13:67:8D:80:8B:05:39:14:6C:42:6A:54:D5:37:BE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BD5FB03DAC9F1771DBB492F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2f5a9c3f-ea79-354d-8bb2-a9498cf689f0.roa
Signing time:             Wed 12 Nov 2025 14:00:37 +0000
ROA not before:           Wed 12 Nov 2025 14:00:37 +0000
ROA not after:            Tue 10 Feb 2026 14:00:37 +0000
asID:                     19905
IP address blocks:        2604:2e87:4400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d5:fb:03:da:c9:f1:77:1d:bb:49:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Nov 12 14:00:37 2025 GMT
            Not After : Feb 10 14:00:37 2026 GMT
        Subject: CN=a01b8a7c-e369-46c3-8342-a38d92f5e551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:ca:1b:00:0d:db:c5:89:99:75:9d:63:11:
                    e1:53:69:a2:03:e3:a5:62:6b:1c:c0:e1:de:5b:78:
                    3c:b4:23:45:1e:78:33:cb:84:ea:21:f3:17:1d:dc:
                    8d:6a:85:72:7a:5f:61:0a:16:b1:04:4d:dc:b7:7a:
                    2b:1a:d2:ac:b4:4c:42:a6:f0:0b:b7:0b:e2:8a:c4:
                    9f:ce:8e:38:af:b8:8a:fa:b6:86:8f:4e:d2:05:1a:
                    80:7d:f2:3e:3e:b2:66:25:c6:db:d9:4e:0b:1c:53:
                    e4:48:94:dd:f6:a7:69:87:0b:8f:cd:bf:b6:48:e4:
                    32:38:90:d3:c1:69:f9:5a:7b:e0:f5:08:a9:a9:65:
                    41:1e:91:40:44:a9:25:b4:2f:ca:d6:f6:83:22:02:
                    19:73:d7:c3:29:7b:c5:b4:7d:a2:90:b8:cd:d9:ba:
                    6b:79:91:2e:75:4d:14:7c:4e:b6:39:ad:9b:50:fc:
                    0a:fe:ad:e1:4e:60:f6:dd:26:eb:be:c5:bd:0b:07:
                    74:4a:68:3a:36:ae:1e:0f:b2:6c:f2:b0:af:f8:1f:
                    67:c7:fb:68:8c:07:45:9e:69:22:60:55:56:13:a3:
                    c2:c8:6c:ba:e6:fc:59:c1:8f:1c:fb:55:87:48:f0:
                    11:98:c5:af:ff:69:3c:0c:e9:c7:ab:e2:6e:d6:92:
                    a4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7E:E8:55:EF:13:67:8D:80:8B:05:39:14:6C:42:6A:54:D5:37:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2f5a9c3f-ea79-354d-8bb2-a9498cf689f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:4400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:fa:76:d1:0d:05:fc:54:c9:1e:a6:6b:87:9d:f3:5e:65:
         dd:4b:37:99:3b:7c:a0:bf:d7:c3:13:cc:31:aa:53:49:80:15:
         f2:c3:b7:07:59:b2:17:74:18:28:45:ce:6c:9a:27:8f:f7:16:
         1f:7f:2d:fb:2e:6d:f6:81:e8:e0:4b:f6:74:49:b8:b8:14:4e:
         a1:6c:c8:e4:53:49:2c:43:de:75:cf:f3:ea:65:6d:b0:5f:e0:
         4d:4d:27:75:84:29:a0:00:c7:34:19:6e:7f:56:7e:03:d7:b2:
         1d:27:76:6e:7b:f5:d9:c6:5f:c3:aa:e3:32:2c:3c:72:60:03:
         7a:1f:f0:8f:8f:01:5a:2e:38:1c:77:1b:0c:a2:e5:36:8c:5a:
         ae:18:03:12:26:2b:e0:31:3e:5b:0a:f6:72:0e:3b:ae:2c:ec:
         f9:3e:8c:3f:b6:58:5a:7e:4b:2b:9c:e5:08:54:a6:74:36:1f:
         1b:04:b6:03:7f:f9:c6:3e:01:68:b3:b5:66:17:d9:2d:d1:20:
         65:d4:46:4d:ab:ef:71:52:22:b1:e9:63:87:2a:66:af:72:93:
         01:d3:5e:a1:28:a6:7f:db:37:86:92:07:22:33:4a:52:6f:bc:
         1e:ea:0c:04:fa:15:32:c4:b9:64:7c:db:58:54:8d:60:1a:d8:
         99:e7:be:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 17:04:40 2025 by rpki-client