This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa
File:                     e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa (raw, json)
Hash identifier:          cLYd8LNJjfiD/Tt4xeN99+q7H1pxFdv120XT/10uhUU=
Subject key identifier:   B0:05:9E:85:04:9D:EF:E1:9A:F7:36:CB:8A:49:4E:BB:32:F0:BD:43
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584B25FC38765174AEF40EDC4260
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        172.102.212.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:38:76:51:74:ae:f4:0e:dc:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=3023bc7d-e6cb-4f42-bc63-398f6fb9943b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:14:97:1b:e2:37:7d:3b:64:98:b1:00:3f:
                    dc:3a:db:75:3e:3b:4b:1b:e2:37:f4:d3:cf:df:c8:
                    a4:0d:ed:3f:c4:a8:c1:69:9f:ee:33:74:0d:a8:94:
                    8e:24:ac:5c:64:6c:17:38:df:eb:a9:6f:e5:a8:e1:
                    bf:4f:e3:8e:dc:41:f3:09:f4:2e:c0:e5:a5:2a:ef:
                    0c:75:00:cf:30:8a:79:2a:cb:97:df:71:d1:92:c1:
                    a1:11:63:64:f1:35:c6:bc:73:65:86:15:68:0f:ce:
                    79:c0:d8:d6:88:9f:4b:d7:73:45:b2:60:68:b9:be:
                    46:25:b1:62:04:4c:fa:5d:92:e5:fe:48:41:e8:ac:
                    9a:be:87:8b:f2:f2:b1:e6:ec:23:b4:aa:2b:40:d8:
                    64:49:8d:51:c2:7c:a4:44:b6:4e:8f:ff:45:f6:d6:
                    52:fc:5c:7e:90:2e:ce:a7:97:84:28:6b:f5:07:3a:
                    e4:72:1b:28:42:38:96:6b:ae:5b:fb:43:b0:4f:fc:
                    ab:db:de:38:3e:18:b7:1e:6e:00:44:dc:6e:03:25:
                    74:0b:48:5f:12:86:f8:ae:4c:50:49:8d:c1:30:bb:
                    c4:3a:4c:ee:c7:52:10:5a:83:49:30:75:0b:c0:8f:
                    08:cc:6a:09:6c:ca:1f:7f:56:d0:0a:3a:e8:27:24:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:05:9E:85:04:9D:EF:E1:9A:F7:36:CB:8A:49:4E:BB:32:F0:BD:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:33:e2:2c:62:05:fa:f3:4a:cd:13:8d:16:b0:4c:73:1b:c7:
         8a:7c:16:16:1c:f7:f4:b1:b5:03:30:11:89:77:8b:a4:88:18:
         5b:e0:6b:fd:b3:0d:96:e2:68:0c:de:5c:fb:e4:a8:10:d9:c0:
         90:4c:79:97:b7:59:d5:f7:72:22:c6:22:e8:65:8b:dd:40:1d:
         15:d6:0a:9b:c3:64:4f:b8:d5:8a:f2:c4:6d:9d:23:b9:3f:73:
         52:cd:98:fe:11:4e:28:51:d1:f6:88:fc:34:e3:88:28:0c:cf:
         18:cc:a7:61:40:06:d0:af:4c:5f:48:76:a2:1a:5f:04:ba:ab:
         a0:06:8b:b2:9e:63:87:96:69:42:49:8c:93:cf:64:f4:9d:57:
         3c:d3:17:de:41:bb:f6:92:84:23:31:04:76:9b:e8:1a:bd:41:
         a4:dd:54:ac:34:d7:1b:51:26:8c:fb:c4:82:f8:94:55:9a:44:
         b6:d9:b8:6b:fe:f7:c7:ee:a9:75:52:9c:2b:31:bb:d2:cf:7f:
         d8:ee:83:17:c7:fe:d9:39:be:1f:ee:94:3d:ee:a2:9a:9f:bb:
         fc:6a:e9:c1:18:b0:3e:da:81:ea:3e:9a:77:4d:b7:c2:ce:12:
         e5:d7:c2:40:7b:b0:9c:4f:6f:f8:72:b1:88:c4:8e:85:be:ac:
         ac:ff:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:32:47 2025 by rpki-client