This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef01a4f8-e839-35a2-9dec-696458b098fd.roa
File:                     ef01a4f8-e839-35a2-9dec-696458b098fd.roa (raw, json)
Hash identifier:          3p2AVjRHd2+BdxvcNKxIRo2U898chZ/a1TF9MwNa6ZE=
Subject key identifier:   03:4E:F0:BA:EE:35:6F:83:A1:48:FE:00:91:38:42:AF:18:B8:3D:D0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584AD23C059FB9F0FFECA0A14C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef01a4f8-e839-35a2-9dec-696458b098fd.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     27344
IP address blocks:        66.16.69.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:05:9f:b9:f0:ff:ec:a0:a1:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=58cbea8d-6b92-422b-8700-1d2b515baab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:96:d6:15:b9:7d:42:d8:d4:0a:c9:e3:e2:
                    47:ec:9e:55:0d:df:af:dc:ea:fd:b3:12:3c:35:c4:
                    53:87:8b:71:95:a5:f6:ef:ae:bf:01:87:b6:f2:18:
                    fa:c5:5b:da:20:34:ef:70:34:af:59:39:0d:dd:b1:
                    dd:79:23:cd:b0:31:df:87:24:10:46:3d:d4:cb:5a:
                    34:a8:8e:ea:30:6b:9a:7e:17:43:0e:e5:c0:b1:4a:
                    5f:bd:79:44:87:65:49:e4:a1:0f:16:a7:eb:34:44:
                    b1:aa:ca:f7:fc:c9:4f:18:9a:4c:7c:61:f8:2c:08:
                    a3:08:57:62:0b:67:e9:af:e4:8a:d6:e7:43:da:02:
                    99:88:a7:07:c5:1d:4b:a7:2c:14:82:c2:9a:62:e7:
                    45:cc:53:45:fc:86:b3:27:c5:0b:9f:7f:42:63:6e:
                    c2:a8:54:f8:ee:be:07:e0:fb:17:1d:ab:d1:f7:a8:
                    f1:fb:07:3b:86:ec:95:54:c0:15:4d:b3:5c:3e:7a:
                    26:5c:36:25:e1:84:30:bd:26:f7:39:fa:28:d7:8c:
                    b3:4d:ba:df:5a:ab:ee:68:7c:ca:89:0e:54:aa:4f:
                    f4:73:bd:38:31:fc:e6:00:4c:ea:3b:3a:59:fa:48:
                    15:a6:36:8b:42:9f:dd:b6:79:90:ed:23:60:8f:ad:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4E:F0:BA:EE:35:6F:83:A1:48:FE:00:91:38:42:AF:18:B8:3D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef01a4f8-e839-35a2-9dec-696458b098fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.16.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b8:ec:e2:e2:6b:8b:4e:79:8f:40:ec:fe:62:66:b9:32:87:
         49:9b:81:78:05:6b:18:db:45:86:94:af:42:99:d3:21:56:fc:
         e5:96:42:e5:aa:4c:eb:0f:44:c6:85:e0:5d:f8:08:2f:b1:6b:
         f9:a7:5c:bf:38:7c:a7:f9:e0:ee:a5:1d:02:86:5d:12:4d:51:
         f3:21:85:68:3f:ff:f0:6e:dc:06:b8:2d:4c:30:b6:5b:a3:21:
         58:1c:ec:d2:24:29:ce:3c:d4:29:e1:99:10:54:74:2e:8d:11:
         d7:67:e2:6e:e8:c5:90:b4:31:9c:90:1e:2b:c1:6e:ee:5b:4c:
         ae:e9:a3:4a:fe:5f:7b:b2:5a:02:03:15:f7:e7:18:67:9a:b3:
         46:ef:55:f4:84:32:84:fc:36:c4:3c:01:55:3f:02:9a:7b:09:
         4b:f7:44:64:a1:ec:9b:4d:db:9d:e4:bf:6e:21:58:90:10:29:
         ab:dc:03:50:d9:35:dd:43:5e:9e:a2:a9:04:2c:a3:f3:e5:0c:
         be:9c:c0:df:b4:64:ed:15:a3:6d:8a:10:29:24:17:d5:93:c6:
         94:46:77:a7:64:3a:be:ea:01:db:84:68:bb:cb:14:1b:6a:50:
         73:76:4a:bc:8b:0b:93:d3:9f:7e:e3:01:d5:ce:02:ca:b0:2c:
         01:40:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 07:06:38 2025 by rpki-client