This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf396b27-1498-3439-acc8-7ea8d9da0e83.roa
File:                     cf396b27-1498-3439-acc8-7ea8d9da0e83.roa (raw, json)
Hash identifier:          bqiyE/Q2e7AJuVBPPs+TTfz+0XjN85nHLwQJxnwtD8o=
Subject key identifier:   0D:5A:B6:A7:E6:53:D0:AA:C6:8F:E0:0B:F9:FD:BD:74:40:77:97:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CAB8C55D07CAED9766F967480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf396b27-1498-3439-acc8-7ea8d9da0e83.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     396580
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:55:d0:7c:ae:d9:76:6f:96:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=7c59698c-65f3-4089-89a1-2e799f08ebe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:16:e2:b7:cc:9b:c5:3a:55:0d:32:d8:84:
                    c1:cd:a4:9f:8e:ca:ac:27:64:9e:a9:38:39:64:ac:
                    58:92:16:c7:a2:7b:1d:ed:13:bf:41:00:3a:fa:99:
                    ee:e2:e4:92:b5:70:12:7f:26:88:af:5f:a5:af:f1:
                    95:ef:cc:07:85:79:3e:f9:26:33:c9:30:30:c9:69:
                    11:ab:5e:9e:88:f3:9a:71:10:13:18:65:8e:a9:7f:
                    ca:02:0b:81:08:21:3f:37:de:a3:75:e7:c5:70:c6:
                    d8:d7:5b:2b:46:43:b5:db:33:50:85:7b:42:46:d9:
                    c4:cf:c6:46:5f:c5:a4:35:fe:4b:86:7c:0e:92:c6:
                    3c:1e:0d:d8:c0:c9:1e:b2:c7:3a:ce:a2:5b:5b:32:
                    11:f4:73:c9:d3:28:53:76:a0:6f:0a:ed:35:5c:f2:
                    72:b0:be:37:9c:4f:6f:62:e3:65:09:6f:97:ff:6f:
                    d5:9d:7a:e0:af:d3:fb:16:9f:3d:90:ad:3d:a5:8d:
                    2e:71:6b:b1:97:6d:83:8d:4a:6c:03:48:50:4d:27:
                    58:49:4f:13:5b:d6:d2:b2:59:62:64:ce:f2:19:c0:
                    92:af:85:ef:70:ed:9f:08:a8:32:a9:4d:07:90:52:
                    0d:60:39:1e:19:84:eb:23:2c:12:b3:38:f3:dc:4b:
                    9c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5A:B6:A7:E6:53:D0:AA:C6:8F:E0:0B:F9:FD:BD:74:40:77:97:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf396b27-1498-3439-acc8-7ea8d9da0e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:00:fd:71:85:dc:82:7c:8e:4c:20:f0:5f:1c:a3:5a:90:70:
         31:ad:9f:c2:7d:f4:de:6a:96:00:03:ba:b6:5f:38:67:0c:6c:
         0e:c1:4a:89:b0:7e:6f:38:7e:0c:63:3b:cf:e4:1f:bf:de:7f:
         50:a5:46:80:ec:93:45:9c:a5:54:a1:93:ac:c2:e6:ad:7e:a5:
         b3:10:14:94:9a:95:a9:f5:c3:27:1b:09:d3:a0:82:02:f8:29:
         52:5f:d7:0f:4c:c3:c0:27:a1:99:7c:f1:f1:36:3a:85:af:fc:
         6b:5e:8d:a0:96:54:0e:72:60:bd:a9:76:59:da:3a:29:55:18:
         f5:a1:d8:fa:bc:db:2f:ac:39:25:c3:b2:aa:2c:8d:61:0c:5b:
         48:25:b5:3b:cc:ff:0a:95:22:8f:33:ae:83:00:27:26:6f:5e:
         43:bb:e4:c7:84:18:6d:c4:88:79:6b:a8:a8:19:1c:76:06:33:
         5d:42:40:d8:52:91:d3:55:82:31:5b:08:75:05:43:e6:e6:f8:
         56:75:c9:95:c7:f4:13:c7:0a:d2:3a:2a:8f:c7:e9:dc:03:58:
         48:f0:5f:a8:03:d2:b6:2d:8e:04:26:22:69:6f:85:9e:2c:11:
         96:1d:8d:d4:5a:6c:d6:c9:a8:0f:fb:68:86:62:5d:cf:bb:43:
         92:fc:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:22:05 2026 by rpki-client