This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86e03c27-9b33-3f9c-ae68-892062f45997.roa
File:                     86e03c27-9b33-3f9c-ae68-892062f45997.roa (raw, json)
Hash identifier:          y02Om/0SgM+Use+sCjlGfkcyb1QvsUMEfcijA56MvHU=
Subject key identifier:   2C:29:A4:3D:7B:1F:DF:85:51:5C:C0:6A:32:4C:32:45:CD:4A:D2:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CB121B880BBD9C4DAA39E0F30
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86e03c27-9b33-3f9c-ae68-892062f45997.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     41568
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:b8:80:bb:d9:c4:da:a3:9e:0f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=0ca247d4-0fb8-479d-b361-93335fe426cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:83:5f:ec:be:60:2b:12:e5:31:3e:33:9e:
                    10:2f:c1:ad:22:68:88:db:64:b5:b1:92:37:5e:28:
                    1c:44:51:45:99:e5:87:a8:5e:f1:d9:d8:31:f0:06:
                    dc:f5:90:91:05:1c:e6:73:c2:ff:07:c4:10:32:0b:
                    1c:f7:c4:9f:5e:bb:b4:60:02:cc:2e:d1:73:e1:c8:
                    55:b3:e0:25:74:3d:6a:7a:68:71:75:5b:76:83:55:
                    78:09:ca:0a:25:9d:31:18:1a:04:93:af:1c:33:4c:
                    00:2d:76:6a:b4:f1:b7:9b:7a:08:45:8b:c3:28:64:
                    89:c6:f5:d7:c4:6f:c2:aa:67:68:64:d3:7b:b6:e3:
                    f7:7c:e1:76:3f:f5:7f:8f:a8:ce:ba:bd:62:d6:74:
                    8a:68:03:5d:89:87:f8:e3:f9:56:3d:02:c7:be:9e:
                    70:a1:28:c2:c4:2e:3c:fa:b2:ff:4a:36:60:87:88:
                    2c:dd:27:71:b7:c3:54:75:3d:2c:d6:82:41:25:b7:
                    da:c0:b7:97:ff:94:32:b5:db:88:86:41:3d:5f:66:
                    88:00:59:57:44:82:31:42:6f:5f:50:c8:21:4a:35:
                    32:25:b1:ac:b2:29:d1:b8:29:b7:79:40:1d:0b:46:
                    fe:ad:2c:0e:ac:c7:8f:0c:b2:94:15:65:0c:f1:d6:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:A4:3D:7B:1F:DF:85:51:5C:C0:6A:32:4C:32:45:CD:4A:D2:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86e03c27-9b33-3f9c-ae68-892062f45997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ae:6f:41:17:8b:ad:4f:8d:da:fa:06:86:20:77:a6:26:8d:
         ee:55:b4:1c:c2:be:82:ff:d5:3d:12:e4:fc:d0:33:3f:32:97:
         ad:8d:71:61:57:dc:91:35:43:66:0e:cb:6c:92:5b:59:d1:3c:
         c6:e0:06:cd:5f:92:18:fb:a2:02:87:af:8d:31:45:88:81:4d:
         85:4d:c0:52:db:96:ff:0b:c3:0d:ac:4d:80:99:73:4d:bf:a1:
         a7:53:85:47:0c:f7:cd:c8:5b:97:aa:46:df:59:12:69:90:a0:
         1d:42:d9:db:dd:0d:b9:4c:3c:0f:e0:16:85:8f:cf:a5:dc:08:
         80:9a:eb:70:a8:64:4e:c4:cd:67:4d:3c:c8:4a:1a:1e:96:45:
         29:bb:2a:65:e6:0a:43:0c:92:4b:a9:40:87:46:99:f6:7e:1b:
         da:0d:21:dc:34:27:42:cf:58:0d:6e:ee:ff:6a:fa:e7:cf:1f:
         7b:45:10:24:ca:a5:8e:c7:78:29:7d:01:13:e8:42:05:04:57:
         9a:15:62:fc:5e:f8:e1:5f:52:ab:c2:34:0b:be:de:f7:dc:51:
         b7:4a:fd:65:a7:ec:27:de:45:c2:e5:3c:14:ee:bb:d0:12:40:
         70:30:09:e8:5a:db:9c:ce:fc:f7:ff:cd:72:6a:68:e8:28:0c:
         9b:91:9c:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyxIbiAu9nE2qOeDzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MGNhMjQ3ZDQtMGZiOC00NzlkLWIzNjEtOTMzMzVmZTQyNmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QWDX+y+YCsS5TE+M54QL8GtImiI22S1sZI3
XigcRFFFmeWHqF7x2dgx8Abc9ZCRBRzmc8L/B8QQMgsc98SfXru0YALMLtFz4chV
s+AldD1qemhxdVt2g1V4CcoKJZ0xGBoEk68cM0wALXZqtPG3m3oIRYvDKGSJxvXX
xG/CqmdoZNN7tuP3fOF2P/V/j6jOur1i1nSKaANdiYf44/lWPQLHvp5woSjCxC48
+rL/SjZgh4gs3Sdxt8NUdT0s1oJBJbfawLeX/5QytduIhkE9X2aIAFlXRIIxQm9f
UMghSjUyJbGssinRuCm3eUAdC0b+rSwOrMePDLKUFWUM8dakpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCwppD17H9+FUVzAajJMMkXNStLbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODZlMDNjMjctOWIzMy0z
ZjljLWFlNjgtODkyMDYyZjQ1OTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKSub0EXi61Pjdr6BoYgd6Ymje5VtBzCvoL/1T0S5PzQMz8yl62N
cWFX3JE1Q2YOy2ySW1nRPMbgBs1fkhj7ogKHr40xRYiBTYVNwFLblv8Lww2sTYCZ
c02/oadThUcM983IW5eqRt9ZEmmQoB1C2dvdDblMPA/gFoWPz6XcCICa63CoZE7E
zWdNPMhKGh6WRSm7KmXmCkMMkkupQIdGmfZ+G9oNIdw0J0LPWA1u7v9q+ufPH3tF
ECTKpY7HeCl9ARPoQgUEV5oVYvxe+OFfUqvCNAu+3vfcUbdK/WWn7CfeRcLlPBTu
u9ASQHAwCeha25zO/Pf/zXJqaOgoDJuRnBQ=
-----END CERTIFICATE-----
Generated at Tue Feb 3 06:33:25 2026 by rpki-client