This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6459b9-9c51-3a74-9de8-a4613d75046e.roa
File:                     bf6459b9-9c51-3a74-9de8-a4613d75046e.roa (raw, json)
Hash identifier:          TCwyA0IHovcSGOF2k2DLNZzrBngXUEse7w0I0/K4adc=
Subject key identifier:   53:0F:23:1D:77:77:16:2E:8F:22:6C:FE:79:D8:30:0A:C3:32:5E:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584C2C864EB0FA7E45A034207480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6459b9-9c51-3a74-9de8-a4613d75046e.roa
Signing time:             Sat 13 Dec 2025 14:00:38 +0000
ROA not before:           Sat 13 Dec 2025 14:00:38 +0000
ROA not after:            Fri 13 Mar 2026 13:00:38 +0000
asID:                     20172
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2c:86:4e:b0:fa:7e:45:a0:34:20:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 13 14:00:38 2025 GMT
            Not After : Mar 13 13:00:38 2026 GMT
        Subject: CN=abed91d7-4799-4124-8c5e-89fff35baae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e7:34:c9:9c:68:c2:49:08:dd:e2:7d:2a:77:
                    d4:a2:91:89:69:23:b4:25:5c:2e:93:c2:52:22:7a:
                    9b:15:26:3c:9d:21:82:84:fe:db:e0:b4:75:1e:11:
                    75:f6:f8:f2:71:17:ee:68:48:ae:6c:4f:8d:ac:3a:
                    f0:8f:b4:c6:ce:d6:8e:0e:09:ac:38:13:8e:a0:5d:
                    99:3f:ee:40:28:67:37:9e:50:f9:2e:db:40:c5:6e:
                    db:a8:f0:e2:66:26:04:89:74:b0:54:b0:f4:f8:40:
                    45:ee:e8:1b:3d:16:25:f2:08:d2:95:b5:14:22:72:
                    c5:db:96:c6:c4:96:09:d7:2f:a5:ff:e4:5c:59:53:
                    2f:73:87:d0:11:86:59:2c:20:e6:f6:b6:b3:cc:f4:
                    43:c8:e7:2b:2d:70:92:c7:29:8b:bc:60:a8:de:2e:
                    82:f4:30:4f:de:f3:c2:50:1f:8d:09:bb:f3:8a:e4:
                    5c:3b:18:b2:90:6d:6f:c6:30:1a:b6:83:33:e6:b4:
                    8c:79:ba:86:ca:ac:b1:5c:52:d1:11:89:bf:5a:a6:
                    30:30:64:2a:5b:02:5a:52:ab:fc:68:7e:55:20:47:
                    1b:1c:b4:2d:f2:a2:e6:ac:d2:30:33:ac:6f:78:9c:
                    ea:0f:4d:cd:89:75:f4:33:94:ab:32:f8:fd:7a:1b:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:23:1D:77:77:16:2E:8F:22:6C:FE:79:D8:30:0A:C3:32:5E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6459b9-9c51-3a74-9de8-a4613d75046e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:bf:56:cc:a1:a2:cb:53:59:fe:fc:ee:60:33:e2:5d:d8:31:
         ba:9b:c2:5a:cf:65:8d:7b:38:e9:f0:79:2a:23:e2:05:dd:bd:
         05:a2:94:b6:5e:0a:89:3a:a8:66:6f:db:95:69:9d:c4:bc:5e:
         3f:45:22:8a:2b:a2:d0:16:bd:3e:cc:88:49:c6:ff:52:cb:16:
         09:fc:69:d1:61:e1:a3:ba:99:93:2b:f3:cb:68:7f:0b:03:d7:
         06:12:05:60:4e:a9:30:4b:e3:86:56:6b:48:04:01:c9:b0:52:
         cc:dc:b2:3b:34:d9:35:98:67:d5:e1:62:d1:15:56:3b:76:7f:
         de:ca:34:ff:63:e8:75:25:25:9d:70:8f:6f:3c:8a:7b:a7:92:
         41:0e:a2:54:62:39:bf:8a:2e:fa:02:a7:de:90:52:12:a6:64:
         71:36:d5:a3:ce:b0:bc:41:6a:ca:97:fa:a5:e5:75:bc:a4:93:
         42:90:53:ca:ff:62:dd:81:34:2f:90:c1:d6:a2:3a:11:54:76:
         51:16:4c:6f:bd:a3:73:11:38:56:1e:11:1d:5a:f5:e2:42:0b:
         f3:16:c0:85:2a:3f:cf:08:0f:7e:bd:59:f5:a2:c2:a7:a4:91:
         16:f1:bb:07:04:bf:f0:8c:d4:4c:ba:63:6e:01:af:bd:bb:b4:
         9e:fc:8a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:43:12 2025 by rpki-client