This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afe9c1f0-83af-385b-8e31-d81a7e7a4f65.roa
File:                     afe9c1f0-83af-385b-8e31-d81a7e7a4f65.roa (raw, json)
Hash identifier:          YZzmxZbvlt46MsUJArlrMGO0cjZG4w0u476zGJ3KkHQ=
Subject key identifier:   98:6F:98:46:2A:B4:B6:E7:71:17:A0:8D:BE:37:C2:81:04:4D:39:C5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583B0552A635E78D074967B65D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afe9c1f0-83af-385b-8e31-d81a7e7a4f65.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Sun 26 Nov 2023 05:00:00 +0000
asID:                     25369
IP address blocks:        166.0.150.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:05:52:a6:35:e7:8d:07:49:67:b6:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Nov 26 05:00:00 2023 GMT
        Subject: CN=bb502d8e-61a9-45b0-9320-78d1061bc44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:70:86:1c:15:78:d2:4b:0e:ef:9e:ef:aa:
                    74:71:93:03:94:75:c5:3e:28:e9:f2:20:d2:15:5e:
                    6a:9f:5e:26:70:04:73:86:b9:ad:77:ee:22:e0:a9:
                    e3:0d:e8:c9:29:64:66:59:a0:4e:76:c2:a6:9e:e5:
                    84:3c:c9:29:82:ed:90:95:1d:d2:83:41:ae:2a:35:
                    b1:62:95:53:41:c4:81:4d:32:c7:b8:ad:9e:5e:52:
                    69:2e:26:f8:68:93:80:c5:1b:e4:dc:62:58:6a:a6:
                    ab:6f:c8:1e:0a:95:41:8e:d4:4f:0a:a7:46:33:04:
                    39:7f:f7:1b:3d:0b:81:a1:52:fb:a5:fa:56:36:78:
                    7e:cd:a6:89:21:7c:13:a1:79:dc:3a:0b:e9:00:f3:
                    f5:0f:af:b1:67:b1:3e:2d:73:a4:f4:06:6c:26:47:
                    7e:69:80:9c:17:c0:0f:f4:32:bc:e9:51:01:47:92:
                    24:f4:2c:85:40:85:b9:99:7c:34:4d:6e:1f:ee:4d:
                    8e:ae:9a:33:97:19:7f:1e:d3:31:6e:0f:4a:66:e4:
                    5c:3e:4a:c0:5b:a1:ff:46:cc:8e:a1:90:af:1a:11:
                    dd:64:ea:55:9f:d7:50:e4:26:e6:7f:79:b6:3d:b0:
                    86:65:ad:ae:c4:f3:48:bd:9a:ac:c5:c6:f2:cd:ab:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6F:98:46:2A:B4:B6:E7:71:17:A0:8D:BE:37:C2:81:04:4D:39:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afe9c1f0-83af-385b-8e31-d81a7e7a4f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:f8:e4:1f:a0:d1:ec:63:bf:e0:da:c0:07:ea:21:44:00:
         08:a3:bf:d3:94:01:15:7d:0b:b7:47:47:be:6d:01:71:15:81:
         de:13:0f:f7:95:65:c6:2f:1c:7e:da:62:85:20:cd:a6:bc:b5:
         ff:60:9b:3d:b0:98:43:b7:df:e5:5d:a8:6e:f2:4a:5a:1c:69:
         4f:29:e1:31:52:6a:8e:88:99:a2:b8:24:d8:f1:2b:b3:7d:c7:
         b8:ec:3f:28:47:11:ce:52:3b:c4:a6:99:91:44:06:a0:e2:5b:
         79:19:11:e2:8b:ab:07:3f:11:a0:39:ea:17:55:6e:60:5d:65:
         f1:84:7c:cc:33:3b:c1:22:1c:1d:bf:d9:df:81:5f:40:3f:37:
         c8:b3:ba:49:16:bc:49:78:14:42:c9:47:4f:a2:cd:72:f4:ce:
         b2:7e:df:37:1f:b7:a1:30:0e:9d:b9:c6:09:46:bb:71:22:dd:
         aa:5e:87:58:60:53:7e:4c:2a:6e:c6:b0:01:c4:12:8b:d2:cd:
         46:c5:cf:36:24:99:e0:f0:0b:a4:e1:e1:67:6e:17:c2:82:0b:
         d4:15:f2:ce:8c:d9:67:87:6e:16:9e:64:8e:18:9c:33:4c:08:
         35:e6:d1:c7:ba:8e:4a:88:0d:3e:97:4b:cb:bc:b5:17:c9:d4:
         2d:39:94:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDsFUqY1540HSWe2XYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTA0MDAwMFoXDTIzMTEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
YmI1MDJkOGUtNjFhOS00NWIwLTkzMjAtNzhkMTA2MWJjNDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhpwhhwVeNJLDu+e76p0cZMDlHXFPijp8iDS
FV5qn14mcARzhrmtd+4i4KnjDejJKWRmWaBOdsKmnuWEPMkpgu2QlR3Sg0GuKjWx
YpVTQcSBTTLHuK2eXlJpLib4aJOAxRvk3GJYaqarb8geCpVBjtRPCqdGMwQ5f/cb
PQuBoVL7pfpWNnh+zaaJIXwToXncOgvpAPP1D6+xZ7E+LXOk9AZsJkd+aYCcF8AP
9DK86VEBR5Ik9CyFQIW5mXw0TW4f7k2Orpozlxl/HtMxbg9KZuRcPkrAW6H/RsyO
oZCvGhHdZOpVn9dQ5Cbmf3m2PbCGZa2uxPNIvZqsxcbyzas3DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhvmEYqtLbncRegjb43woEETTnFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWZlOWMxZjAtODNhZi0z
ODViLThlMzEtZDgxYTdlN2E0ZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+k+OQfoNHsY7/g2sAH6iFEAAijv9OUARV9C7dHR75tAXEVgd4TD/eV
ZcYvHH7aYoUgzaa8tf9gmz2wmEO33+VdqG7ySlocaU8p4TFSao6ImaK4JNjxK7N9
x7jsPyhHEc5SO8SmmZFEBqDiW3kZEeKLqwc/EaA56hdVbmBdZfGEfMwzO8EiHB2/
2d+BX0A/N8izukkWvEl4FELJR0+izXL0zrJ+3zcft6EwDp25xglGu3Ei3apeh1hg
U35MKm7GsAHEEovSzUbFzzYkmeDwC6Th4WduF8KCC9QV8s6M2WeHbhaeZI4YnDNM
CDXm0ce6jkqIDT6XS8u8tRfJ1C05lLI=
-----END CERTIFICATE-----