This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b1826f0a-f44f-3dcc-874c-db25703c5229.roa
File:                     b1826f0a-f44f-3dcc-874c-db25703c5229.roa (raw, json)
Hash identifier:          aRx6HGCnW0+lCg0Kbs/FEpQelb9OqcgP8d1WeQ5rU3U=
Subject key identifier:   E3:2A:D1:CC:76:87:A9:A7:C6:FD:9E:D0:5A:68:0B:17:2A:DD:86:FB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858453D8064CFA60661BB5F2E8D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b1826f0a-f44f-3dcc-874c-db25703c5229.roa
Signing time:             Sun 17 Mar 2024 18:29:05 +0000
ROA not before:           Sun 17 Mar 2024 18:29:05 +0000
ROA not after:            Sat 15 Jun 2024 18:29:05 +0000
asID:                     400618
IP address blocks:        108.165.222.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3d:80:64:cf:a6:06:61:bb:5f:2e:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 17 18:29:05 2024 GMT
            Not After : Jun 15 18:29:05 2024 GMT
        Subject: CN=845c3f60-2785-48ec-9843-47046a1470f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:ba:8b:5e:25:1b:ce:6b:52:a3:bd:b6:ed:
                    3a:c1:dc:28:c2:cc:df:4e:e2:7b:69:1f:30:b7:34:
                    95:99:7f:19:55:75:31:82:55:71:74:48:3e:f1:fa:
                    36:ef:8a:40:86:d0:af:10:16:c2:7e:26:c9:c3:8b:
                    6a:d2:15:81:fe:6e:24:ee:79:72:fb:6a:9e:d1:14:
                    06:5a:47:fe:22:3d:56:6b:d9:67:c3:52:75:c4:c4:
                    f8:b6:67:d7:30:c7:67:84:b3:db:aa:e8:a7:e4:67:
                    3d:b3:ef:65:2c:f7:b8:c1:a1:d4:f7:ee:14:80:7e:
                    bb:b7:fd:89:21:de:eb:2f:b6:99:f0:a0:d3:25:88:
                    03:ca:f2:be:19:66:f7:10:2f:af:0c:46:fa:01:50:
                    39:01:b1:0b:99:64:eb:e8:6b:45:9c:4a:7a:05:a7:
                    28:f6:06:53:3f:bf:f4:cd:43:50:12:c6:30:70:99:
                    43:74:63:28:32:da:54:0a:29:6d:cd:08:1c:de:4c:
                    5a:97:a5:d8:c5:9b:03:3a:df:df:3a:f4:ed:09:b6:
                    be:4b:c3:b8:2d:69:b2:4b:3f:d7:81:06:53:5b:2b:
                    70:c1:80:ec:8a:b5:01:6a:50:d2:c8:a5:a9:75:8e:
                    c7:3e:b1:ba:8b:a3:09:09:40:72:a9:c5:f2:1e:4a:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2A:D1:CC:76:87:A9:A7:C6:FD:9E:D0:5A:68:0B:17:2A:DD:86:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b1826f0a-f44f-3dcc-874c-db25703c5229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:f7:d4:c1:c1:74:94:e1:f3:eb:8f:29:9d:84:70:32:7e:
         dc:86:87:b5:d7:4a:f0:a5:e1:41:0a:d7:f1:6a:d7:6f:1e:d3:
         e6:db:2a:82:fb:5c:b0:c1:58:bc:e6:cc:c4:7b:57:b0:b9:e6:
         5e:42:cd:63:2f:3d:35:f3:b8:10:b3:23:76:bb:7a:19:ba:23:
         8e:5b:22:ca:14:95:26:aa:8d:5d:1c:bf:e3:5e:84:27:4d:a7:
         0c:92:7d:1f:81:e0:b9:3d:79:1f:47:87:d1:2f:e9:52:7f:38:
         d8:6f:f4:ad:d7:0f:92:de:f4:4d:18:0e:4f:20:3a:43:59:7b:
         30:64:a4:22:27:9e:ac:01:c8:ad:4c:47:1e:a7:96:5e:d5:47:
         2c:38:19:97:fd:c7:72:1c:06:f9:c7:11:7f:9b:8b:43:15:05:
         b6:98:e9:62:a4:e4:fb:4d:a9:9b:a8:50:97:f1:22:70:43:92:
         6f:fb:ae:0a:06:32:f1:6c:62:86:63:2b:0b:e5:02:82:b3:4e:
         6a:f2:af:a8:8f:6d:51:66:6a:6d:85:d9:ee:2f:94:80:98:4b:
         62:66:6a:f1:fc:0e:77:fc:e0:ea:35:03:02:c9:63:29:f8:69:
         34:62:13:36:e6:1b:26:9e:9f:e3:b1:17:c1:fc:e3:23:4b:67:
         9b:fe:63:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU9gGTPpgZhu18ujQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMxNzE4MjkwNVoXDTI0MDYxNTE4MjkwNVowLzEtMCsGA1UEAxMk
ODQ1YzNmNjAtMjc4NS00OGVjLTk4NDMtNDcwNDZhMTQ3MGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx+6i14lG85rUqO9tu06wdwowszfTuJ7aR8w
tzSVmX8ZVXUxglVxdEg+8fo274pAhtCvEBbCfibJw4tq0hWB/m4k7nly+2qe0RQG
Wkf+Ij1Wa9lnw1J1xMT4tmfXMMdnhLPbquin5Gc9s+9lLPe4waHU9+4UgH67t/2J
Id7rL7aZ8KDTJYgDyvK+GWb3EC+vDEb6AVA5AbELmWTr6GtFnEp6Baco9gZTP7/0
zUNQEsYwcJlDdGMoMtpUCiltzQgc3kxal6XYxZsDOt/fOvTtCba+S8O4LWmySz/X
gQZTWytwwYDsirUBalDSyKWpdY7HPrG6i6MJCUByqcXyHkrT0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMq0cx2h6mnxv2e0FpoCxcq3Yb7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjE4MjZmMGEtZjQ0Zi0z
ZGNjLTg3NGMtZGIyNTcwM2M1MjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKXeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPz99TBwXSU4fPrjymdhHAyftyGh7XXSvCl4UEK1/Fq128e0+bbKoL7
XLDBWLzmzMR7V7C55l5CzWMvPTXzuBCzI3a7ehm6I45bIsoUlSaqjV0cv+NehCdN
pwySfR+B4Lk9eR9Hh9Ev6VJ/ONhv9K3XD5Le9E0YDk8gOkNZezBkpCInnqwByK1M
Rx6nll7VRyw4GZf9x3IcBvnHEX+bi0MVBbaY6WKk5PtNqZuoUJfxInBDkm/7rgoG
MvFsYoZjKwvlAoKzTmryr6iPbVFmam2F2e4vlICYS2JmavH8Dnf84Oo1AwLJYyn4
aTRiEzbmGyaen+OxF8H84yNLZ5v+Y/o=
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:21:25 2025 by rpki-client