This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/978e6218-59c7-37b1-9f0a-324fa8034868.roa
File:                     978e6218-59c7-37b1-9f0a-324fa8034868.roa (raw, json)
Hash identifier:          xNGv5d85pcgrrxr+TtSbFskoveI0UyIu+uhrRaBczMQ=
Subject key identifier:   EB:0C:4C:0E:35:AD:6B:58:92:17:7F:22:85:58:AF:E5:3D:B6:7D:9E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D805356908EFD8D79C5D0A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/978e6218-59c7-37b1-9f0a-324fa8034868.roa
Signing time:             Tue 13 May 2025 21:58:55 +0000
ROA not before:           Tue 13 May 2025 21:58:55 +0000
ROA not after:            Mon 11 Aug 2025 21:58:55 +0000
asID:                     7385
IP address blocks:        108.165.239.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:05:35:69:08:ef:d8:d7:9c:5d:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 13 21:58:55 2025 GMT
            Not After : Aug 11 21:58:55 2025 GMT
        Subject: CN=a38f895b-50b4-4ff7-8287-273a7e087e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:8e:a9:66:e8:b8:77:72:8b:ea:ab:b9:3d:
                    45:47:b0:92:98:65:0d:b4:59:f1:3f:ec:4e:6a:e0:
                    c0:65:55:3d:e6:1c:8d:80:f5:f4:ae:91:09:6f:f9:
                    d0:61:5f:be:81:6d:54:41:49:f1:52:67:43:fb:27:
                    61:a3:05:38:a9:8a:15:bc:70:7e:e6:b8:d9:be:c6:
                    da:e9:d9:3e:0d:df:fe:48:1e:a5:fb:a4:91:f1:46:
                    bc:7d:0a:73:e4:5e:bd:73:e5:99:ee:c4:95:1b:bd:
                    05:d5:40:f4:d3:b4:6a:86:0b:3a:fc:69:17:3b:11:
                    6d:50:ca:bf:9d:c7:e9:cb:30:a0:d6:29:44:da:83:
                    ac:a9:c9:84:45:96:a7:8d:df:a3:e0:72:a4:26:a0:
                    5c:0b:fa:6e:9a:23:7d:41:8c:a2:0e:ae:a7:fa:e6:
                    c1:79:40:90:75:86:61:7a:c3:9f:70:dc:88:7f:45:
                    86:49:0f:d3:47:eb:e8:bc:ab:c8:92:09:10:f8:5b:
                    11:a2:6c:ed:4d:17:fb:2a:ca:1d:8f:8f:31:49:26:
                    9a:bd:55:97:c3:ed:35:92:a3:d2:91:75:5c:5e:27:
                    d1:91:c5:cf:b3:21:0c:8b:f9:95:9c:4f:d0:3f:09:
                    c8:8e:35:0a:27:6b:8b:04:82:de:e0:92:8d:50:e7:
                    43:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0C:4C:0E:35:AD:6B:58:92:17:7F:22:85:58:AF:E5:3D:B6:7D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/978e6218-59c7-37b1-9f0a-324fa8034868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:32:ff:16:8e:7c:09:b2:54:97:9c:69:c1:1a:50:3a:e8:0b:
         73:8c:9d:ab:ca:79:7b:c1:2e:20:c7:f8:28:0f:e5:d2:ce:13:
         e2:79:c7:c2:49:e3:4b:e8:ab:63:64:b3:b8:22:f9:d3:be:d0:
         56:42:0e:ac:4b:14:ef:96:9c:58:82:f4:ca:bc:69:5f:18:65:
         24:38:5a:ae:4a:bb:98:89:84:a9:09:80:ca:00:60:69:76:27:
         92:b1:63:e5:00:f8:52:05:0b:1f:c8:67:f4:2c:94:42:8e:c3:
         5e:91:3f:55:53:50:ae:22:f0:7f:16:55:ff:a7:a7:67:c9:df:
         93:cc:0a:32:54:50:a5:d3:ad:05:1f:11:24:d6:74:5e:8f:3b:
         f2:ff:60:a4:53:f7:0a:cf:6e:8e:97:64:96:be:25:6d:79:a9:
         98:68:90:e3:ea:0b:7a:0f:e5:96:76:4d:96:41:81:ee:01:86:
         da:ad:a7:a7:17:4b:a4:7f:1d:c0:14:0c:a3:16:3b:29:91:b6:
         19:4a:09:75:97:c2:fb:99:53:9b:f0:e1:77:27:bd:fc:ca:55:
         af:ee:9d:49:60:ba:01:0f:c8:16:10:55:11:61:35:48:ab:fd:
         f6:95:50:25:4e:04:e1:19:f8:21:54:8c:e1:38:53:a7:c8:8a:
         4b:00:d2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 15:57:38 2025 by rpki-client