This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa
File:                     40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa (raw, json)
Hash identifier:          iIgQR9oBMUbTk1vQSUVVjnTzlHAh3DQ/NzqfjU+AOYs=
Subject key identifier:   13:00:90:47:24:BC:BD:3B:D5:29:8E:BA:DB:FF:77:9F:DD:FB:75:3C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CB121B601A01550EA96D32B00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     20172
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:b6:01:a0:15:50:ea:96:d3:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=9943b10f-9550-4ca5-a954-466fdd34540c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:bd:1e:87:d8:ab:dd:89:77:63:cc:96:52:
                    42:63:90:61:38:13:86:d9:53:06:ed:90:c6:f9:3f:
                    3d:0c:01:19:b5:e5:df:4d:4e:cb:20:8d:1e:1d:27:
                    8f:50:d2:5a:5e:bc:54:aa:41:c8:23:a2:17:01:c0:
                    01:19:a4:47:9b:8c:32:4e:5b:56:4d:8a:e9:78:f5:
                    8d:3c:d9:4f:38:63:fc:7a:ee:ed:81:ec:5a:46:ab:
                    f5:59:67:2a:88:86:71:22:be:ba:27:c3:2c:2f:bf:
                    a2:ee:66:4d:d1:95:24:08:70:57:f4:b0:9d:fc:5a:
                    62:b9:5b:ca:b6:d4:19:2b:92:5a:ba:92:8b:93:ad:
                    9f:bf:e8:11:9b:33:3c:c6:25:46:57:fb:c2:ec:2f:
                    12:e9:fe:3d:5e:c5:b6:9f:14:39:7e:cd:87:84:0e:
                    b8:cb:96:4f:ea:93:ba:99:64:5d:d5:3b:58:21:5d:
                    55:58:5b:0b:83:1a:9b:cf:b4:b3:ad:76:e8:8d:42:
                    24:f9:72:bd:5b:59:e4:59:0f:92:38:ed:2f:3e:ad:
                    1d:09:40:bb:71:a3:2f:f5:1b:9e:18:e4:02:c1:0d:
                    bc:90:a5:cf:d1:9d:a3:54:9c:76:e8:2e:04:05:6c:
                    82:6d:d9:ad:87:90:a0:b8:04:1a:d7:3b:d9:8e:0c:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:00:90:47:24:BC:BD:3B:D5:29:8E:BA:DB:FF:77:9F:DD:FB:75:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b8:51:f4:94:54:55:33:c8:48:5f:01:44:ff:da:8e:0d:d5:
         8f:fd:36:2f:55:2e:cb:aa:4e:27:c2:0e:d7:48:35:f0:fa:78:
         24:7c:86:c6:48:02:7b:4b:07:c9:8e:5a:ea:c2:ad:14:9c:76:
         2d:69:3b:df:b5:b4:54:0a:16:23:3c:bb:89:09:4b:d1:b2:c6:
         69:e2:18:17:71:fb:ed:07:a6:fb:b5:87:4f:9b:84:8e:af:04:
         50:18:55:eb:48:45:12:97:44:e4:c5:2c:a9:2d:bd:2b:c5:d0:
         b8:d4:66:0d:7f:04:06:73:8f:39:69:7d:63:4b:58:1c:ac:3c:
         28:ee:68:df:6a:b4:1f:5a:ca:be:c2:7e:8f:96:84:e5:d1:05:
         b5:fe:6a:52:f3:96:8c:f1:4d:fc:95:ae:5b:ee:79:ff:3e:6e:
         e7:23:1e:ec:da:1e:6f:08:94:79:6e:37:b5:93:e8:44:1e:b4:
         0f:51:6c:0c:21:03:84:af:17:a6:5d:27:4f:63:70:19:fe:5a:
         10:90:c2:77:b8:e6:a4:79:1b:80:0d:bb:29:5a:2c:a5:f9:14:
         1a:16:9f:86:8a:24:fb:ba:00:fc:3d:aa:bd:71:d7:9f:d9:c2:
         a5:ae:61:26:74:3c:e3:9c:64:01:7d:dd:20:9c:32:3b:01:4a:
         8e:a7:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:58:51 2026 by rpki-client