This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2d18098-ac4d-3464-b2cb-bed1369b824f.roa
File:                     f2d18098-ac4d-3464-b2cb-bed1369b824f.roa (raw, json)
Hash identifier:          M+rmwbxfHFlTyPepvtmZSBa0DVYkLfzxTN0nJvJVjNE=
Subject key identifier:   BD:E5:A8:4C:24:42:6F:D6:F7:3B:D7:43:97:33:BB:50:13:91:90:4B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849C4D4CDFE3E6DFFA4534B4380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2d18098-ac4d-3464-b2cb-bed1369b824f.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     401152
IP address blocks:        50.114.7.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cd:fe:3e:6d:ff:a4:53:4b:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=5229fa37-047a-438c-81bb-2700a55d64d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:f0:6b:6d:4e:71:59:d4:2a:da:9c:cf:ca:
                    25:78:5b:09:a2:91:1e:d2:73:f1:ca:2e:e6:45:43:
                    97:31:89:4a:ab:15:9d:19:9a:d7:98:61:7c:99:0b:
                    6b:26:0b:26:8d:37:cf:04:09:e8:e5:cd:de:8d:82:
                    88:88:84:7f:51:3c:ce:7d:36:e9:91:62:e7:42:c8:
                    c6:83:e0:51:2c:22:fe:a8:8a:3c:07:4c:47:eb:df:
                    bf:43:d7:49:c4:18:78:01:7b:23:54:a2:dc:6f:d1:
                    75:30:88:b9:48:5f:9b:93:76:cb:71:08:0c:d5:18:
                    fa:7d:62:c4:0f:1e:3d:24:35:32:6a:d1:bc:06:cf:
                    79:c6:0a:dc:c3:a9:05:78:fe:ba:87:a2:c2:9d:bb:
                    ad:88:8f:2e:d3:aa:46:ec:90:ec:03:ae:3a:e7:8a:
                    fb:24:43:a0:31:e7:bb:8d:96:68:e2:20:65:7d:86:
                    2b:fe:ba:50:b1:df:86:53:c6:8f:91:5c:2a:e9:32:
                    d5:4a:8a:2b:e8:97:a0:8c:f9:07:78:f9:c5:0b:2f:
                    74:1d:16:5b:1f:fe:1b:68:28:54:38:62:8c:b7:f1:
                    ab:06:13:00:82:54:7d:37:06:41:38:d0:39:86:6a:
                    d8:69:2a:5e:29:f6:47:92:44:e2:0c:0c:f2:d8:29:
                    fb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E5:A8:4C:24:42:6F:D6:F7:3B:D7:43:97:33:BB:50:13:91:90:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2d18098-ac4d-3464-b2cb-bed1369b824f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:05:0e:b9:38:1e:7f:5f:04:85:9f:76:d5:aa:6c:09:8e:43:
         fd:d4:0b:59:ae:ec:6c:5b:af:73:09:d1:2e:ae:80:3c:97:68:
         1d:ad:e7:d5:c4:1d:75:44:3f:1d:87:ab:e8:80:47:cb:b1:27:
         cc:40:42:2d:11:8b:a2:11:c7:f7:06:fe:f5:35:ed:cb:bf:e5:
         6a:05:8b:e8:ff:a9:e5:d8:d9:cc:f0:53:80:85:2b:ad:22:48:
         d6:ef:9a:31:b9:44:a9:a6:f7:58:f2:f2:ed:91:10:7a:4c:56:
         0f:24:0c:28:a4:8b:65:0f:50:fe:c4:4b:25:c4:74:5f:4b:d0:
         2f:9d:56:90:9f:19:a2:4a:97:03:df:3d:2d:35:0b:dc:e2:a8:
         02:12:a7:19:ce:6c:6b:f6:f0:41:a4:ae:e0:cb:a5:3a:4c:0a:
         f4:6e:cf:28:c5:58:27:b6:55:cf:22:71:7e:ab:83:c1:cc:c4:
         0e:3d:2c:3c:eb:f6:df:5f:ec:af:f0:82:90:d5:1b:05:69:90:
         cb:ff:2c:db:b3:30:d3:8d:5d:18:6f:89:91:8f:14:ca:72:0f:
         36:4f:e4:90:d8:7b:a7:b7:bc:07:b6:d8:b1:e4:7e:3f:fc:e6:
         57:53:cc:f2:42:1c:6d:b6:f7:8c:15:f2:f5:69:f4:25:3b:18:
         7c:86:3c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----