This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35151947-66b8-31f6-b1f5-acea57cefaea.roa
File:                     35151947-66b8-31f6-b1f5-acea57cefaea.roa (raw, json)
Hash identifier:          /krWINqYD/VGSbpaAMNyofjkle840iGUbhGnSVy26Cc=
Subject key identifier:   A6:1B:96:5F:57:78:6E:30:FC:93:19:36:E9:83:54:98:47:30:8E:E7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C4176860FAE80B50170D4EE80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35151947-66b8-31f6-b1f5-acea57cefaea.roa
Signing time:             Sun 21 Dec 2025 02:00:30 +0000
ROA not before:           Sun 21 Dec 2025 02:00:30 +0000
ROA not after:            Sat 21 Mar 2026 01:00:30 +0000
asID:                     19905
IP address blocks:        2604:2e8d:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:76:86:0f:ae:80:b5:01:70:d4:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Dec 21 02:00:30 2025 GMT
            Not After : Mar 21 01:00:30 2026 GMT
        Subject: CN=4bf33c68-2279-42f9-b1ad-a32afcd6f8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:88:29:fa:11:89:2e:f4:5c:a2:83:5e:ba:
                    39:5d:e1:5d:8a:4c:2f:da:fb:26:c7:66:e0:0e:3b:
                    78:57:bf:a4:e8:62:69:64:ff:24:28:7e:c2:a2:3e:
                    10:15:21:15:00:90:6e:37:ac:cb:a7:b3:7f:3a:f6:
                    73:dc:08:bf:6b:bc:9f:55:08:81:2c:81:c9:74:b1:
                    2c:c1:e7:52:f4:27:91:b2:f2:f5:d0:4c:09:a6:8a:
                    5f:f7:f0:65:58:c5:ca:85:1b:c7:52:67:39:ce:d8:
                    70:50:94:cb:82:aa:de:72:00:39:ed:a0:58:a4:c9:
                    59:65:3a:51:8e:d0:2f:74:b1:36:4e:b1:7d:a5:b1:
                    bb:c2:b6:f9:50:ec:cc:8c:6e:9b:4b:6b:84:d8:f5:
                    04:a0:97:d6:7e:e7:9e:db:ac:bc:16:ea:43:51:db:
                    1f:bb:8c:aa:ba:f0:0a:ee:16:38:44:5a:25:7e:b7:
                    2f:66:83:86:d8:54:fb:4f:2b:f8:40:a2:3a:4a:68:
                    23:33:80:eb:14:07:1c:fe:23:2a:40:8f:28:52:b1:
                    44:dd:0b:98:ed:90:48:30:6b:88:ad:a6:60:db:d6:
                    de:1b:70:b5:32:eb:8f:ad:45:7f:a4:59:07:d7:64:
                    bc:8d:35:33:c7:c2:62:52:f5:b0:28:5c:01:81:1c:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1B:96:5F:57:78:6E:30:FC:93:19:36:E9:83:54:98:47:30:8E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35151947-66b8-31f6-b1f5-acea57cefaea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ea:d9:02:23:3a:9e:72:2d:0e:4c:c4:31:b6:c9:7c:92:6a:
         9e:a0:73:32:c2:84:cc:8b:c1:d7:8f:97:69:d1:c0:bb:87:dd:
         a2:0d:0d:85:7d:8a:40:29:16:a8:42:48:35:61:18:15:0b:83:
         f7:fe:91:7b:91:50:73:35:b1:0b:88:cb:9c:7c:02:b3:a2:2e:
         70:7b:5d:e4:75:28:9c:ff:99:9e:cb:e6:00:bf:39:aa:80:12:
         9a:d3:a3:66:6b:1f:2f:60:dd:f1:5a:50:d8:ad:bf:24:85:60:
         45:29:cc:4c:fd:14:f5:04:4a:59:ab:ae:5b:ee:f0:8d:72:3b:
         13:4f:ed:09:88:4b:d0:1f:d2:76:40:bc:b2:97:89:3b:27:83:
         ff:64:a9:00:6a:4d:df:5d:09:d7:29:7a:79:bb:06:c0:31:2c:
         f1:2d:25:cd:66:85:dd:bc:db:cb:f8:ca:47:75:77:f9:c0:d8:
         20:d1:3c:53:d8:cc:52:49:df:b8:f3:18:19:cc:45:77:60:37:
         46:5a:cb:75:32:5d:ec:2f:b9:c1:24:09:2b:d3:ef:b4:f0:b4:
         b5:47:9e:7b:ee:37:88:ee:6e:f5:fd:bb:55:55:54:1d:5b:7f:
         79:8f:5e:c1:2f:cf:53:91:75:bd:ee:52:a3:62:63:61:34:88:
         39:ef:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:28:45 2026 by rpki-client