This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa
File:                     d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa (raw, json)
Hash identifier:          w8pdOLRfaZ//LzuoOafixlra8uZjqmEkSraoNrPEFs8=
Subject key identifier:   0A:59:FD:84:E6:C1:47:4D:2B:3A:75:22:2F:61:52:6E:A1:2F:C3:E0
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C45A83ABC0102D5F7CE91CE00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     12041
IP address blocks:        2001:500:ca::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Feb 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a8:3a:bc:01:02:d5:f7:ce:91:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=cfae07dd-3931-419a-ae1a-b02dafe0e189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:9d:4f:ab:9f:7c:d1:7f:fd:eb:37:f5:7c:
                    f6:1b:4a:f9:7c:b9:4d:94:ab:1b:14:b8:d0:7b:d0:
                    79:6e:3a:19:38:1e:5e:ba:eb:61:70:9c:85:d0:3d:
                    dd:6c:25:94:8d:fe:9e:ec:7c:9e:8a:3b:de:c8:c3:
                    22:b6:79:91:a7:d6:f5:e3:c6:28:b0:f4:4e:8e:c3:
                    db:ab:27:4b:f9:c3:e9:27:ba:27:a2:c6:f8:13:61:
                    9e:20:c6:55:c5:32:82:5e:cf:6d:5b:c4:01:38:fe:
                    ac:4b:6e:0c:45:bd:58:a1:45:f0:6e:9f:82:96:77:
                    cf:ed:57:f2:54:c6:8a:1d:d8:cd:11:7d:61:a5:b2:
                    b4:be:f8:18:11:2d:97:51:80:bc:3f:c7:b8:01:8c:
                    e9:37:b0:2c:b0:c8:37:78:1f:8a:29:f5:e4:37:91:
                    f5:d2:f2:22:b9:84:17:ca:b5:42:59:88:06:03:54:
                    c6:1a:ff:28:e8:23:84:bf:4f:0b:7e:48:72:9b:50:
                    d8:3e:85:15:15:83:e1:ae:f0:73:9e:4f:db:d8:5b:
                    3f:16:5a:9e:0d:67:3d:e7:f0:43:0e:ed:43:53:8b:
                    7d:81:48:da:56:e5:c9:4f:30:42:8f:50:34:fe:49:
                    3c:1b:93:d4:fe:fd:2a:92:ce:6a:3c:ad:30:96:08:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:59:FD:84:E6:C1:47:4D:2B:3A:75:22:2F:61:52:6E:A1:2F:C3:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:ca::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:d7:7c:ad:62:5d:d0:f8:fd:5c:d9:af:34:60:90:48:df:
         e1:52:fc:03:8a:31:1b:70:11:5c:b3:97:0a:4b:70:cf:af:20:
         6e:8c:18:ed:87:15:44:30:95:d4:f8:87:a4:68:c9:d9:a7:b9:
         f8:ac:70:86:d9:50:f0:d7:53:9e:b2:dc:4d:44:d6:6a:d2:55:
         b3:bd:13:6b:69:55:10:0f:74:0c:dd:80:21:7d:12:cf:7e:70:
         61:2c:6c:6a:6e:c8:5c:2d:85:22:92:11:73:32:41:37:29:60:
         a8:fe:5b:83:5d:38:5d:7a:69:a9:39:7c:07:fc:25:f1:b0:3a:
         2d:ed:aa:01:f9:aa:b2:28:73:9d:c4:2c:3f:a7:00:c1:1a:07:
         66:60:b6:98:21:3f:c9:51:c1:df:c0:2e:7a:f6:ae:7f:85:63:
         b5:48:46:a3:c3:ed:09:f0:a8:80:89:1f:de:ba:67:88:b1:29:
         2e:aa:2f:64:b4:5b:f9:90:eb:c2:ef:8d:32:bd:43:1d:62:49:
         5a:25:42:1b:e6:fa:b4:fc:e4:7f:6a:41:53:82:b2:5d:5b:1f:
         3b:04:db:e2:9a:d0:ee:67:0a:ba:f2:67:ea:d4:a0:a5:ba:78:
         08:df:32:98:f0:e0:fd:6f:44:03:62:97:0f:bc:43:69:b9:c2:
         9e:41:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 05:40:45 2026 by rpki-client