This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1173935a-c79a-31d9-b7b9-062a1b1c4d4a.roa
File:                     1173935a-c79a-31d9-b7b9-062a1b1c4d4a.roa (raw, json)
Hash identifier:          dWjPnvQknHkdu33YBcAjJVJsdlzpWmtXrf9U+yMS2Nk=
Subject key identifier:   1A:FB:E6:EE:FC:CC:15:C9:B1:A7:34:DF:FC:A2:04:56:5A:93:98:64
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848D6BB593AF75745673D750500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1173935a-c79a-31d9-b7b9-062a1b1c4d4a.roa
Signing time:             Mon 10 Feb 2025 18:07:21 +0000
ROA not before:           Mon 10 Feb 2025 18:07:21 +0000
ROA not after:            Sun 11 May 2025 17:07:21 +0000
asID:                     834
IP address blocks:        23.26.148.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:bb:59:3a:f7:57:45:67:3d:75:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 18:07:21 2025 GMT
            Not After : May 11 17:07:21 2025 GMT
        Subject: CN=95d6afc6-c36b-42ce-bf70-2e0e9186b8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:0a:08:c5:c2:39:4b:25:bf:55:06:15:07:
                    c3:43:cc:68:ea:2a:39:b9:14:fe:6a:0a:1e:4d:7b:
                    b7:e9:d5:cc:3e:7f:92:c7:dc:ad:43:88:1e:f6:96:
                    77:3b:cf:df:6f:69:b4:ad:90:ad:13:d9:f3:d3:81:
                    6f:58:45:b8:f0:ea:2c:d0:4d:42:93:a9:26:bb:1d:
                    53:23:db:f5:59:a1:35:4c:19:ef:b7:fe:10:20:2c:
                    e3:a5:8a:61:14:5a:3c:27:19:71:48:4b:e1:d1:2a:
                    69:e2:16:a2:01:3a:a5:fa:12:a3:4b:4f:6d:04:f7:
                    06:70:a4:0a:24:a1:95:77:5d:aa:41:44:ba:9c:d3:
                    c0:c0:6a:89:0f:a5:08:87:96:35:41:5f:ed:0f:9e:
                    c2:61:1d:1c:24:2f:70:c8:37:63:c3:a5:ae:07:cf:
                    e6:3c:71:23:0b:8d:c6:cf:40:65:f1:b3:94:3c:2c:
                    0b:f4:d0:dd:1f:41:c2:ea:7a:9d:71:8a:c3:30:7d:
                    91:7b:3a:59:ba:60:c6:91:18:bf:bb:a0:d5:1c:6b:
                    72:18:84:09:93:ad:8b:69:9a:5a:49:2e:de:a7:af:
                    1e:d0:5f:43:97:f4:92:24:fb:33:7a:76:f6:c5:98:
                    e1:fd:0c:29:88:c0:e1:ec:bb:9d:93:fa:e4:58:65:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FB:E6:EE:FC:CC:15:C9:B1:A7:34:DF:FC:A2:04:56:5A:93:98:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1173935a-c79a-31d9-b7b9-062a1b1c4d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:67:7a:b7:30:91:c1:e2:86:d5:95:3f:0a:74:83:4a:f8:60:
         a4:05:c6:37:71:a8:a3:63:f3:0b:93:7c:7c:55:bc:2d:d0:d5:
         33:eb:3c:36:0c:27:4d:20:a7:b3:e1:9c:dc:39:49:2c:50:47:
         42:61:14:92:dd:48:63:a4:77:cd:ca:26:f6:a4:ef:1b:37:d3:
         92:d9:9c:3f:0e:9b:b0:cd:76:2c:1b:1c:e7:14:92:62:43:41:
         12:2d:3c:6d:97:bc:5c:60:69:0a:13:17:80:c6:f9:a1:2a:5a:
         88:3b:d4:93:cb:5b:48:28:06:46:1f:1c:d0:7c:83:17:cc:03:
         c9:3b:1c:56:01:18:6f:fa:a9:7b:57:da:87:ab:6e:06:1f:8e:
         0f:df:db:a3:ef:d9:3e:c5:cd:f4:f2:4b:60:a7:b9:ed:ee:56:
         44:f8:84:f4:98:25:e0:dc:ea:a7:ff:0c:e1:51:da:50:ca:8c:
         b6:29:e7:ba:50:eb:fd:02:6e:5d:81:1d:6c:5e:a2:e3:e8:90:
         ae:f2:c5:6f:07:28:28:39:8b:5f:bb:84:50:33:25:4f:2d:e8:
         f0:b9:ba:0f:aa:92:81:d9:1d:ed:f8:24:43:e3:73:6a:0a:aa:
         f3:a9:66:29:0a:77:70:cb:9c:11:32:a5:fb:93:82:72:85:53:
         4c:f9:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:21:05 2025 by rpki-client