This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa
File:                     cc57b996-1472-3501-b7aa-16621af1a48c.roa (raw, json)
Hash identifier:          wAFjyJ+93IEbSJnxmaIBL2qDFZSSebsHw6Kz7ZexKzM=
Subject key identifier:   A8:30:8C:0D:DF:3E:D8:9E:82:2A:44:B4:CA:7F:96:3D:EA:67:F2:F8
Certificate issuer:       /CN=1c6e98c6-c317-4bae-8a4b-23e26037e1f1
Certificate serial:       010D0C9F4328584C6E21A7F27F60931FFAD0C4C0
Authority key identifier: 03:E5:92:7A:88:59:9A:F7:18:56:4F:32:FC:04:9D:9D:6E:45:4A:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     393468
IP address blocks:        2620:135:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:a7:f2:7f:60:93:1f:fa:d0:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6e98c6-c317-4bae-8a4b-23e26037e1f1
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=68ec015a-7eab-41a7-88b9-ccd553f40f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:2b:17:17:b1:3a:d3:2e:c7:54:0c:28:d1:
                    2c:d2:0a:bb:e9:46:28:12:f4:34:82:38:5f:a3:26:
                    e9:36:f1:a2:05:84:7e:94:1b:fa:97:44:21:08:28:
                    cf:c4:5f:1c:cb:fc:49:ae:67:d8:cd:57:e1:d7:a5:
                    31:f8:b8:d8:94:2a:b0:e6:dc:f5:4d:89:08:18:7b:
                    d7:20:45:57:64:14:12:83:ef:3b:46:c9:1c:80:67:
                    cc:91:8f:a6:83:85:99:67:6d:17:bd:2e:27:b2:8a:
                    36:2d:2e:18:9c:fc:70:32:0a:95:87:b9:a2:9e:c7:
                    c3:fb:82:e6:1e:be:af:df:c5:82:aa:e9:64:8a:8e:
                    45:66:6e:98:77:ca:97:7f:eb:61:89:40:94:6b:a2:
                    06:4f:27:d8:e2:94:0a:71:82:31:15:ea:82:ca:45:
                    5e:8f:ad:c0:25:ea:73:52:db:11:08:b5:8a:f9:2d:
                    80:51:61:d5:a9:f2:fb:83:06:0d:20:44:66:e2:e4:
                    dc:cd:29:17:b5:ab:5d:d6:ba:19:13:25:d8:b0:11:
                    a8:fc:e6:87:6c:71:8d:6b:47:04:a2:74:03:21:14:
                    b7:37:06:99:dc:2e:d9:5a:1d:a7:c1:61:66:96:ff:
                    06:89:c5:24:1c:12:b9:ee:74:07:43:fb:78:d8:f5:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:30:8C:0D:DF:3E:D8:9E:82:2A:44:B4:CA:7F:96:3D:EA:67:F2:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.crl

            X509v3 Authority Key Identifier:
                keyid:03:E5:92:7A:88:59:9A:F7:18:56:4F:32:FC:04:9D:9D:6E:45:4A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0a:8a:03:68:5f:cf:02:7e:6c:fe:5b:1d:48:a9:d7:b3:aa:
         57:dc:1d:a1:1b:a2:43:1b:d2:c1:f5:c2:fb:1e:f6:71:9f:e9:
         9a:2a:0c:7f:2b:19:e8:bc:f7:1e:03:56:9d:2f:6e:a7:18:ee:
         8c:27:2f:fd:81:13:e7:c8:42:dd:9e:c1:b0:31:aa:68:a9:6e:
         fc:58:4c:16:98:fd:cd:b4:02:a0:61:e9:b3:ad:cd:d1:3e:e7:
         b0:f4:95:cb:1c:10:a1:76:fd:a9:68:b3:59:79:f3:bb:57:32:
         f2:c9:dd:6f:e6:dd:dd:eb:d8:23:fe:a4:81:9a:bb:fb:c1:2a:
         6f:3b:cd:5c:48:5f:87:23:16:bc:66:0c:f6:17:64:39:fe:38:
         6b:46:38:c8:51:72:12:01:6b:0d:0d:04:04:52:1b:30:1a:7c:
         06:a5:b4:26:fe:e5:70:b0:76:f3:8d:9d:2c:9c:6d:94:d6:73:
         45:a3:0f:3b:7d:70:f7:ea:3a:69:9b:bd:a1:19:5e:6a:58:9d:
         be:0a:24:4d:eb:74:49:d8:12:96:d9:d3:46:53:81:aa:9b:6f:
         b1:ec:9c:0b:d8:86:44:1a:77:08:f7:c2:b4:46:2d:b6:aa:df:
         87:0a:3f:7f:46:5d:1d:42:d9:02:4c:b7:45:29:92:76:b9:b3:
         fc:76:e6:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExuIafyf2CTH/rQxMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM2ZTk4YzYtYzMxNy00YmFlLThhNGItMjNlMjYwMzdl
MWYxMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk
NjhlYzAxNWEtN2VhYi00MWE3LTg4YjktY2NkNTUzZjQwZjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ErFxexOtMux1QMKNEs0gq76UYoEvQ0gjhf
oybpNvGiBYR+lBv6l0QhCCjPxF8cy/xJrmfYzVfh16Ux+LjYlCqw5tz1TYkIGHvX
IEVXZBQSg+87RskcgGfMkY+mg4WZZ20XvS4nsoo2LS4YnPxwMgqVh7minsfD+4Lm
Hr6v38WCqulkio5FZm6Yd8qXf+thiUCUa6IGTyfY4pQKcYIxFeqCykVej63AJepz
UtsRCLWK+S2AUWHVqfL7gwYNIERm4uTczSkXtatd1roZEyXYsBGo/OaHbHGNa0cE
onQDIRS3NwaZ3C7ZWh2nwWFmlv8GicUkHBK57nQHQ/t42PUR+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKgwjA3fPtiegipEtMp/lj3qZ/L4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYzZl
OThjNi1jMzE3LTRiYWUtOGE0Yi0yM2UyNjAzN2UxZjEvY2M1N2I5OTYtMTQ3Mi0z
NTAxLWI3YWEtMTY2MjFhZjFhNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWM2ZTk4YzYtYzMxNy00YmFlLThh
NGItMjNlMjYwMzdlMWYxLzFjNmU5OGM2LWMzMTctNGJhZS04YTRiLTIzZTI2MDM3
ZTFmMS5jcmwwHwYDVR0jBBgwFoAUA+WSeohZmvcYVk8y/ASdnW5FSvswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8xYzZlOThjNi1jMzE3LTRiYWUtOGE0Yi0yM2Uy
NjAzN2UxZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABNfAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABsKigNoX88Cfmz+Wx1IqdezqlfcHaEbokMb0sH1wvse9nGf6Zoq
DH8rGei89x4DVp0vbqcY7ownL/2BE+fIQt2ewbAxqmipbvxYTBaY/c20AqBh6bOt
zdE+57D0lcscEKF2/alos1l587tXMvLJ3W/m3d3r2CP+pIGau/vBKm87zVxIX4cj
FrxmDPYXZDn+OGtGOMhRchIBaw0NBARSGzAafAaltCb+5XCwdvONnSycbZTWc0Wj
Dzt9cPfqOmmbvaEZXmpYnb4KJE3rdEnYEpbZ00ZTgaqbb7HsnAvYhkQadwj3wrRG
Lbaq34cKP39GXR1C2QJMt0Upkna5s/x25ls=
-----END CERTIFICATE-----
Generated at Sat Jan 10 14:02:55 2026 by rpki-client