This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32332d3234203d3e20383334.roa
File:                     3230352e3231312e3135342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          IHqODg39A/L7e5Qa+whlpf5JX59Aw5JFxr/E12fElO0=
Subject key identifier:   6E:64:DA:CD:51:1B:A5:E2:6C:94:66:CC:42:46:B6:77:89:1D:07:F3
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       4B3285C4C2941A94C8CD69BFEE5038C8AC6E03C4
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32332d3234203d3e20383334.roa
Signing time:             Thu 25 Sep 2025 00:01:00 +0000
ROA not before:           Wed 24 Sep 2025 23:56:00 +0000
ROA not after:            Thu 24 Sep 2026 00:01:00 +0000
asID:                     834
IP address blocks:        205.211.154.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Mon 29 Sep 2025 09:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:32:85:c4:c2:94:1a:94:c8:cd:69:bf:ee:50:38:c8:ac:6e:03:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Sep 24 23:56:00 2025 GMT
            Not After : Sep 24 00:01:00 2026 GMT
        Subject: CN=6E64DACD511BA5E26C9466CC4246B677891D07F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:af:bd:29:e1:02:4f:36:c4:60:75:ea:04:
                    9d:7e:da:80:be:65:cd:13:f9:38:d0:67:3f:28:ec:
                    3c:ba:e9:d0:05:b4:1a:1c:66:75:c5:cc:06:01:95:
                    63:01:f5:ef:b6:bf:95:8c:a9:9a:b2:ba:bc:33:96:
                    ba:11:8f:a8:2b:20:3f:70:a3:46:ce:46:87:fd:b1:
                    ee:90:5d:5b:da:03:ca:00:d5:17:51:1c:36:81:5b:
                    be:2b:6b:1c:d7:02:cd:52:44:eb:6e:63:91:7d:ff:
                    87:e4:4e:53:53:ee:7e:31:c1:35:87:95:56:59:ea:
                    37:12:0a:2b:0c:27:13:8d:f6:08:4c:7f:62:ef:fd:
                    85:8a:04:25:99:59:90:87:27:a0:c8:8e:e1:80:c2:
                    46:50:87:09:df:55:b5:bc:0f:ee:2b:ea:f8:06:ea:
                    b7:43:92:b7:18:9d:f1:b2:ba:96:19:9b:db:b0:8f:
                    7f:75:9c:7d:a6:f1:fa:45:3c:83:22:11:30:6c:be:
                    75:b9:56:f4:b1:91:6f:a5:4e:9c:a1:c5:65:a2:7c:
                    99:0d:4d:0b:2e:8b:e7:cd:34:49:9a:cd:fd:35:57:
                    6d:5c:5d:e1:56:7f:6d:d7:5d:83:9e:4f:73:fa:bd:
                    07:7f:44:55:07:c7:99:9e:81:a3:12:08:52:84:1c:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:64:DA:CD:51:1B:A5:E2:6C:94:66:CC:42:46:B6:77:89:1D:07:F3
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:40:9e:f5:7e:03:4a:d2:f8:da:1b:8f:01:2f:02:fd:62:b9:
         5c:ab:73:d7:85:01:01:af:ef:1d:c0:d3:3f:4e:70:22:68:a6:
         f0:f3:2d:9d:60:39:1c:42:84:52:af:d4:0a:b6:79:5a:e2:11:
         61:9e:72:6c:9e:4f:44:c6:02:64:00:8a:53:fc:65:b9:d1:42:
         aa:7a:ec:91:94:b3:db:3d:71:51:da:64:53:80:9b:1a:b0:ea:
         d5:f3:39:a5:f1:1e:5e:86:98:4f:73:2a:e6:99:8c:69:1f:6a:
         41:86:b9:9f:ed:d6:42:e8:12:b5:1e:c8:1e:2a:4c:a9:98:90:
         85:a2:18:a5:a4:f7:bf:32:b8:c8:c3:4d:d0:57:3a:35:47:1c:
         a7:49:4f:a0:a9:62:8b:73:0a:09:66:6d:26:51:0d:7f:74:b6:
         5b:1a:12:5d:e8:45:ca:45:43:87:ef:c4:af:d7:43:1a:25:ec:
         3f:da:59:75:ac:a9:ac:80:d7:8f:38:a1:3a:18:1f:8d:53:4a:
         11:3a:f7:bf:04:d8:9e:43:6b:fb:71:1b:c2:a5:96:ea:d4:50:
         1a:ee:bb:42:7f:82:d6:90:e6:d8:9e:18:46:df:b5:25:61:0d:
         45:84:57:36:b3:6f:db:9b:06:07:f3:d4:cd:e1:ff:16:3c:c5:
         31:3c:1d:e1
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUSzKFxMKUGpTIzWm/7lA4yKxuA8QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2MDEzOTNmNzhlZTEyZmU3ZjczYWU3OWJiZmI3NGI0
MzFkYTc3MDBjZWYyY2Y4Y2YwHhcNMjUwOTI0MjM1NjAwWhcNMjYwOTI0MDAwMTAw
WjAzMTEwLwYDVQQDEyg2RTY0REFDRDUxMUJBNUUyNkM5NDY2Q0M0MjQ2QjY3Nzg5
MUQwN0YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbCvvSnhAk82
xGB16gSdftqAvmXNE/k40Gc/KOw8uunQBbQaHGZ1xcwGAZVjAfXvtr+VjKmasrq8
M5a6EY+oKyA/cKNGzkaH/bHukF1b2gPKANUXURw2gVu+K2sc1wLNUkTrbmORff+H
5E5TU+5+McE1h5VWWeo3EgorDCcTjfYITH9i7/2FigQlmVmQhyegyI7hgMJGUIcJ
31W1vA/uK+r4Buq3Q5K3GJ3xsrqWGZvbsI9/dZx9pvH6RTyDIhEwbL51uVb0sZFv
pU6cocVlonyZDU0LLovnzTRJms39NVdtXF3hVn9t112Dnk9z+r0Hf0RVB8eZnoGj
EghShBzqlwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFG5k2s1RG6XibJRmzEJGtneJ
HQfzMB8GA1UdIwQYMBaAFLIb0XcaltefcHlgkVEvJ4ERFI7wMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjI0NzdmYzQwYWFiLzAv
QjIxQkQxNzcxQTk2RDc5RjcwNzk2MDkxNTEyRjI3ODExMTE0OEVGMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzhjYWJjMWI0LTliZGYtNDBhNi1iYmJiLTY2YWU5ZDVhNjg1YS8zNzYw
MTM5M2Y3OGVlMTJmZTdmNzNhZTc5YmJmYjc0YjQzMWRhNzcwMGNlZjJjZjhjZi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGYy
NDc3ZmM0MGFhYi8wLzMyMzAzNTJlMzIzMTMxMmUzMTM1MzQyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHN05owDQYJKoZIhvcNAQELBQAD
ggEBACBAnvV+A0rS+NobjwEvAv1iuVyrc9eFAQGv7x3A0z9OcCJopvDzLZ1gORxC
hFKv1Aq2eVriEWGecmyeT0TGAmQAilP8ZbnRQqp67JGUs9s9cVHaZFOAmxqw6tXz
OaXxHl6GmE9zKuaZjGkfakGGuZ/t1kLoErUeyB4qTKmYkIWiGKWk978yuMjDTdBX
OjVHHKdJT6CpYotzCglmbSZRDX90tlsaEl3oRcpFQ4fvxK/XQxol7D/aWXWsqayA
1484oToYH41TShE6978E2J5Da/txG8KllurUUBruu0J/gtaQ5tieGEbftSVhDUWE
Vzazb9ubBgfz1M3h/xY8xTE8HeE=
-----END CERTIFICATE-----