This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/aaf68392-5b50-32d1-a4a3-9f0e1d40c5ce.roa
File:                     aaf68392-5b50-32d1-a4a3-9f0e1d40c5ce.roa (raw, json)
Hash identifier:          gF/jzYaw5UqWGja4RRNbKsurhQGnfoHFxH/GvyxuB+0=
Subject key identifier:   AD:E1:45:36:AF:7A:2D:A2:D1:CB:97:32:35:59:7B:22:17:5B:73:AC
Certificate issuer:       /CN=dfe6dbdd-2611-4405-b156-fd403fa6b530
Certificate serial:       010D0C9F4328584C7541E6CAB4EAD5ACC5D9A040
Authority key identifier: 31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/aaf68392-5b50-32d1-a4a3-9f0e1d40c5ce.roa
Signing time:             Thu 08 Jan 2026 15:17:00 +0000
ROA not before:           Thu 08 Jan 2026 15:17:00 +0000
ROA not after:            Wed 08 Apr 2026 14:17:00 +0000
asID:                     14054
IP address blocks:        2602:f476:a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:75:41:e6:ca:b4:ea:d5:ac:c5:d9:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe6dbdd-2611-4405-b156-fd403fa6b530
        Validity
            Not Before: Jan  8 15:17:00 2026 GMT
            Not After : Apr  8 14:17:00 2026 GMT
        Subject: CN=52fbcafa-1478-429a-b78d-14798a848e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:26:a3:cf:95:10:06:e4:6f:62:d6:04:4e:06:
                    3f:07:2f:e3:8c:39:8b:df:1c:55:6e:7d:f6:53:26:
                    e2:09:2f:30:4c:5c:cc:09:42:c7:a8:27:e5:f1:8e:
                    1a:eb:58:d3:ff:d6:38:24:c3:4e:53:8a:71:2a:4c:
                    9e:5d:94:2d:aa:81:87:97:37:e0:82:71:56:c9:75:
                    e2:a4:af:5e:d3:1b:46:f4:6c:7e:94:e4:60:d2:7d:
                    af:09:87:8a:83:49:6e:63:e9:85:b8:56:12:47:69:
                    34:ac:aa:04:bd:32:c7:6e:60:fd:64:55:98:02:a0:
                    67:00:15:fb:cb:cf:6f:de:cf:40:1f:3c:ac:4b:c3:
                    73:48:bc:ea:c0:0d:a8:48:d7:2b:8d:56:00:56:e7:
                    54:a2:f1:69:a7:02:7e:2e:1a:2a:67:16:70:31:85:
                    3b:06:cc:37:1c:cd:cd:cd:c6:ba:e6:29:13:fe:7c:
                    d9:50:eb:eb:85:ac:7b:f9:b5:30:03:4f:30:72:df:
                    b1:68:ef:ea:fa:34:34:e1:d7:37:7b:08:cf:7c:2e:
                    65:50:d5:51:0e:2a:1a:b9:05:64:72:84:79:40:91:
                    c6:e0:38:e3:85:8c:63:73:0c:1f:e6:68:b1:96:7a:
                    26:b1:fd:53:64:44:be:da:2a:a9:2f:8e:b6:c7:97:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E1:45:36:AF:7A:2D:A2:D1:CB:97:32:35:59:7B:22:17:5B:73:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/aaf68392-5b50-32d1-a4a3-9f0e1d40c5ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl

            X509v3 Authority Key Identifier:
                keyid:31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f476:a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:13:f6:80:73:df:ba:f0:d6:c1:b1:2d:53:46:da:c3:56:
         c8:6f:cf:3e:89:81:ec:69:9f:42:15:58:e2:4a:25:5b:69:ce:
         5d:8e:ad:ac:1d:4e:3e:52:9a:2c:8c:d6:7c:94:d5:d8:92:27:
         f0:30:d6:21:db:24:06:3d:3b:2d:4e:06:6b:aa:68:99:2d:1e:
         0f:10:46:cc:ae:3a:a6:cd:fa:f1:96:2e:0a:2b:94:b4:6c:2a:
         11:a6:91:24:2b:e3:ec:1f:e4:aa:4e:fa:77:7a:c3:e2:1a:ef:
         07:e0:80:ab:0f:d6:44:71:c7:29:ee:d5:5c:db:95:7b:da:39:
         6e:d0:cc:34:18:cf:43:54:5e:f6:19:53:27:f1:68:69:4d:a3:
         0b:f4:10:c4:06:b6:9e:5a:33:0d:05:e2:73:76:c4:95:80:7d:
         29:b3:99:0b:99:81:7f:72:4b:00:07:65:07:c7:aa:61:b2:6b:
         e9:81:75:e6:4b:a2:8e:b4:a5:69:3e:34:6c:be:44:d5:91:c6:
         09:43:ca:d1:31:20:16:8a:28:7d:57:b3:e4:ec:7d:c2:89:db:
         90:7b:05:0a:3c:e7:09:fd:82:1e:75:0f:bf:f1:74:d3:15:fe:
         65:5e:c0:2b:56:df:c9:96:ad:02:f9:0d:58:50:16:3c:d8:44:
         4c:0e:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:17:31 2026 by rpki-client