This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa
File:                     5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa (raw, json)
Hash identifier:          gBUja0JBrOq1G+9Y4rLCJPGG8kZFztmF0QG42ZgiYr8=
Subject key identifier:   BF:EC:D7:2F:65:72:B2:8A:72:42:0C:3E:ED:80:6A:05:E4:D0:98:18
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584BF8E0AC8E8321FD01E87884C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa
Signing time:             Tue 25 Nov 2025 02:00:31 +0000
ROA not before:           Tue 25 Nov 2025 02:00:31 +0000
ROA not after:            Mon 23 Feb 2026 02:00:31 +0000
asID:                     30103
IP address blocks:        2620:123:2020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:e0:ac:8e:83:21:fd:01:e8:78:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Nov 25 02:00:31 2025 GMT
            Not After : Feb 23 02:00:31 2026 GMT
        Subject: CN=cb27518d-1da5-4afc-8fb8-5938f5be646b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:df:4d:03:db:23:59:c8:3a:63:bf:3f:cc:
                    02:77:4a:26:cd:af:ab:eb:b0:5f:ec:01:62:75:58:
                    fe:b1:08:72:7b:2e:2b:db:36:e1:32:b5:3f:a5:ce:
                    7c:6c:f8:1a:4e:fe:28:86:9e:86:98:34:dc:54:92:
                    6e:49:8f:fc:8c:c8:c3:5b:24:5c:20:da:93:c8:10:
                    8f:67:e2:83:d5:dc:ea:99:0c:63:56:ff:c4:c6:ba:
                    85:0b:b0:30:5b:5d:7c:54:25:11:29:3c:57:9b:a8:
                    12:6a:c3:23:61:9a:77:58:b5:1a:1b:bd:52:9a:b9:
                    a6:00:c2:b0:3c:c6:d0:1d:07:3b:92:c2:7e:85:79:
                    a3:6a:39:b5:51:23:9b:1a:61:af:55:a8:85:ae:58:
                    6d:43:d7:82:a6:ef:50:80:a5:01:e9:2c:e6:22:10:
                    a8:e7:69:05:80:fd:2f:46:35:da:eb:e5:65:75:7d:
                    ee:42:b2:44:77:07:39:1f:50:3e:ae:2e:f2:a7:dd:
                    eb:7c:9f:f9:e6:18:ea:0b:a5:96:1f:1a:f3:f8:a2:
                    70:8d:22:0c:68:09:03:57:14:cd:8b:40:a8:92:90:
                    17:95:2b:ae:0d:0b:d4:98:16:2e:09:7a:4e:06:bb:
                    7c:d6:7d:58:37:f8:b3:69:bc:f4:5c:90:95:32:c7:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EC:D7:2F:65:72:B2:8A:72:42:0C:3E:ED:80:6A:05:E4:D0:98:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a5:8b:88:3a:8e:d7:bc:b7:12:3c:6c:35:e0:3e:34:f2:16:
         8c:c0:6e:bd:4b:cf:67:8e:31:24:30:7e:bb:ff:4f:0f:22:ee:
         88:7f:53:68:d2:e3:08:d8:8b:ba:71:d5:77:67:25:e8:c5:4c:
         6c:e8:b8:d6:b9:1e:73:c8:04:3e:78:e7:ef:e2:9d:a0:68:03:
         3b:15:48:ba:b1:95:3b:4c:21:7f:72:7b:63:b4:d0:73:0d:32:
         47:f3:a8:56:d4:b9:3c:d7:68:fc:6b:f0:5b:ce:88:e4:8d:d3:
         a3:ce:8d:8e:54:f3:f0:80:02:7a:35:0d:27:20:07:bd:21:d3:
         07:be:0e:0c:6f:0f:49:c6:cb:12:34:8a:d6:f2:f6:2b:bf:78:
         fe:92:42:c0:30:ba:e8:51:76:40:d9:98:18:95:11:73:93:d1:
         da:ca:02:78:0f:05:1a:c8:f5:d3:2a:e9:bb:9c:12:f4:b1:0b:
         a9:57:96:ad:eb:9e:16:78:43:77:04:a2:1f:11:a8:02:ae:1e:
         00:51:b9:d7:a2:e9:f8:35:f9:de:97:62:9d:2c:23:97:a6:7f:
         77:0d:73:65:5c:eb:da:59:60:e6:83:0c:15:7e:29:ea:78:c5:
         b8:b7:85:2f:8d:b5:24:0c:4e:1f:40:a9:9e:55:1b:95:02:f3:
         25:5b:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 10:22:02 2025 by rpki-client