This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35e5192e-124b-3357-9d81-6a7dc2a3cccf.roa
File:                     35e5192e-124b-3357-9d81-6a7dc2a3cccf.roa (raw, json)
Hash identifier:          FFWMzPCh5XZ+fImdT6n4Id907UmTJstPMRh3nFb8W/o=
Subject key identifier:   A5:C7:58:08:AB:A9:03:0E:22:B1:00:11:1B:79:9B:11:0A:AA:71:92
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849659831FA891FBFCF542D5A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35e5192e-124b-3357-9d81-6a7dc2a3cccf.roa
Signing time:             Wed 02 Apr 2025 22:17:07 +0000
ROA not before:           Wed 02 Apr 2025 22:17:07 +0000
ROA not after:            Tue 01 Jul 2025 22:17:07 +0000
asID:                     401152
IP address blocks:        23.26.207.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:98:31:fa:89:1f:bf:cf:54:2d:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  2 22:17:07 2025 GMT
            Not After : Jul  1 22:17:07 2025 GMT
        Subject: CN=60bea6c0-20c6-4505-ab0a-4d70ef5c0ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:9e:fb:bf:32:6b:1d:ac:75:0d:1d:b4:8e:
                    b8:41:df:19:84:dc:3a:21:b0:dd:8d:a9:c0:59:66:
                    9f:3d:03:8f:f1:02:26:86:80:85:fc:f1:84:ce:78:
                    e7:7f:3e:ff:81:ce:86:b5:ff:5d:48:ba:c3:bb:29:
                    81:a6:ca:4d:94:e0:65:ac:a9:63:17:10:29:bc:90:
                    5e:76:03:0e:8b:66:c0:34:bf:e8:64:7b:8d:bc:70:
                    ed:31:cc:74:63:68:90:54:9c:90:5c:e1:01:ae:0b:
                    36:5b:b7:ef:a9:e6:02:cd:bf:3f:b9:5e:b8:f8:b4:
                    d3:38:4a:9f:8f:c2:d5:7d:04:28:c1:e3:63:ff:8a:
                    f4:af:25:26:b4:00:15:57:74:8f:f5:61:26:85:50:
                    11:d0:d1:74:9c:5f:82:a3:f2:0f:d9:2d:d4:f3:3f:
                    30:1b:76:f6:67:d5:4e:ad:c6:95:e6:bd:20:0b:ba:
                    63:c1:5a:ec:67:c7:33:5b:a9:96:0b:a8:e5:0d:2d:
                    26:2c:f2:9b:93:b5:0e:cf:6b:5a:da:c5:b8:11:d7:
                    b2:bd:19:7f:10:c8:c4:99:e3:5b:df:03:0a:16:ac:
                    3e:a4:71:c9:6a:6d:c8:9d:72:58:94:39:c8:e1:83:
                    dd:5f:64:c4:ce:28:d8:0c:39:d1:ea:9d:a6:06:b3:
                    06:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C7:58:08:AB:A9:03:0E:22:B1:00:11:1B:79:9B:11:0A:AA:71:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35e5192e-124b-3357-9d81-6a7dc2a3cccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:74:3e:ea:da:62:71:c0:f5:85:19:b0:d2:14:8a:0e:fb:b7:
         bf:d6:d6:76:cb:0a:b0:75:f3:85:a4:34:93:9e:d5:87:e9:fa:
         08:68:c3:89:01:a2:d5:ee:d1:37:33:4e:c2:80:41:57:00:db:
         38:89:a0:9b:65:20:54:48:36:76:59:3b:59:97:12:d2:c5:c7:
         71:ae:03:1e:d0:60:01:23:59:87:0f:e4:cc:38:eb:92:e2:8c:
         c0:5e:7f:74:ba:60:a7:f0:c2:6b:70:45:75:59:b1:7e:77:ff:
         23:b8:73:9a:bd:a9:58:00:53:ee:02:0f:7e:f3:03:e7:7c:75:
         88:69:29:e8:c8:ca:d1:c5:f4:b7:fa:4f:18:6d:4f:22:04:dc:
         a0:de:0d:ef:02:49:64:88:cf:fd:d3:d9:26:bb:90:9d:51:ab:
         2f:1d:d3:14:ba:5f:ba:21:fb:d6:eb:aa:c5:a4:e9:5f:8e:1c:
         19:b3:9f:16:a2:46:6d:e0:db:38:9b:e4:11:2d:5f:98:0b:c3:
         89:e2:45:c8:c7:71:db:bb:21:88:e8:38:5f:c3:5d:93:d5:3f:
         45:9b:37:9d:14:84:52:b3:2b:94:f9:73:59:8d:5a:51:c0:79:
         37:9d:37:2f:38:70:b1:da:7d:d8:6a:66:07:46:88:fb:c7:83:
         4e:d6:a7:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEllmDH6iR+/z1QtWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDQwMjIyMTcwN1oXDTI1MDcwMTIyMTcwN1owLzEtMCsGA1UEAxMk
NjBiZWE2YzAtMjBjNi00NTA1LWFiMGEtNGQ3MGVmNWMwY2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hme+78yax2sdQ0dtI64Qd8ZhNw6IbDdjanA
WWafPQOP8QImhoCF/PGEznjnfz7/gc6Gtf9dSLrDuymBpspNlOBlrKljFxApvJBe
dgMOi2bANL/oZHuNvHDtMcx0Y2iQVJyQXOEBrgs2W7fvqeYCzb8/uV64+LTTOEqf
j8LVfQQoweNj/4r0ryUmtAAVV3SP9WEmhVAR0NF0nF+Co/IP2S3U8z8wG3b2Z9VO
rcaV5r0gC7pjwVrsZ8czW6mWC6jlDS0mLPKbk7UOz2ta2sW4EdeyvRl/EMjEmeNb
3wMKFqw+pHHJam3InXJYlDnI4YPdX2TEzijYDDnR6p2mBrMGSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXHWAirqQMOIrEAERt5mxEKqnGSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzVlNTE5MmUtMTI0Yi0z
MzU3LTlkODEtNmE3ZGMyYTNjY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFF0PuraYnHA9YUZsNIUig77t7/W1nbLCrB184WkNJOe1Yfp+ghow4kB
otXu0TczTsKAQVcA2ziJoJtlIFRINnZZO1mXEtLFx3GuAx7QYAEjWYcP5Mw465Li
jMBef3S6YKfwwmtwRXVZsX53/yO4c5q9qVgAU+4CD37zA+d8dYhpKejIytHF9Lf6
TxhtTyIE3KDeDe8CSWSIz/3T2Sa7kJ1Rqy8d0xS6X7oh+9brqsWk6V+OHBmznxai
Rm3g2zib5BEtX5gLw4niRcjHcdu7IYjoOF/DXZPVP0WbN50UhFKzK5T5c1mNWlHA
eTedNy84cLHafdhqZgdGiPvHg07Wp/M=
-----END CERTIFICATE-----