This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa8e24dd-0e5c-34eb-8aa5-6a99719262d2.roa
File:                     aa8e24dd-0e5c-34eb-8aa5-6a99719262d2.roa (raw, json)
Hash identifier:          weWkT4CdP+y92CfHp/lhZ/+ghxjSOATuUsPFOfEMhTw=
Subject key identifier:   5C:3F:31:10:91:50:16:1D:7A:12:82:E0:6A:7A:77:0D:8E:85:CE:DA
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849CA6A1243444BE83A1E6C0B80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa8e24dd-0e5c-34eb-8aa5-6a99719262d2.roa
Signing time:             Fri 09 May 2025 01:00:47 +0000
ROA not before:           Fri 09 May 2025 01:00:47 +0000
ROA not after:            Thu 07 Aug 2025 01:00:47 +0000
asID:                     53356
IP address blocks:        172.94.26.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:6a:12:43:44:4b:e8:3a:1e:6c:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May  9 01:00:47 2025 GMT
            Not After : Aug  7 01:00:47 2025 GMT
        Subject: CN=48210548-7154-4f76-b46a-559756decb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:43:fc:79:bf:ac:49:60:af:c5:37:1e:e7:2f:
                    d6:30:f7:89:69:ee:65:93:48:96:2b:c9:7c:8e:9b:
                    c3:20:c5:ba:9d:a6:ec:7d:8e:1b:8b:a4:89:d6:08:
                    2c:c1:5d:2f:47:5f:69:78:ac:3c:4a:ae:ca:f7:bd:
                    42:2b:3d:03:3b:1c:aa:ea:89:6f:e3:4e:0b:7b:c1:
                    ae:40:22:ab:a4:3e:64:cc:1c:81:d6:cc:37:5e:09:
                    d5:6d:03:5e:d8:51:af:37:c5:82:68:97:b7:6d:9c:
                    69:dc:f5:e2:61:22:8b:a3:43:a7:7b:0c:62:7a:58:
                    24:ff:d2:43:c1:77:8c:8e:25:9f:82:2a:52:64:25:
                    2a:88:11:54:50:77:47:76:6c:bc:43:a0:9d:20:6a:
                    56:00:0a:7d:15:80:26:98:b1:c2:d8:59:c2:c8:1a:
                    a8:33:61:a4:66:19:dd:96:a7:39:c8:c4:ea:b8:63:
                    c8:1f:99:21:ee:29:0f:03:2e:cf:55:50:c6:0c:52:
                    28:ca:d8:fd:e4:45:8b:5c:41:cf:d0:80:17:bb:7c:
                    99:d3:e2:99:4f:91:48:47:d2:28:a4:d5:64:72:6f:
                    45:a6:33:c5:fa:33:ae:bf:37:87:99:04:7e:00:53:
                    bc:21:20:59:40:1e:7d:10:fc:0f:36:88:47:ab:14:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3F:31:10:91:50:16:1D:7A:12:82:E0:6A:7A:77:0D:8E:85:CE:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa8e24dd-0e5c-34eb-8aa5-6a99719262d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:d3:6c:f9:bf:33:4a:26:55:2b:fb:6e:f1:82:ae:fc:c7:
         b0:59:b6:e8:26:79:1a:c6:6c:e4:31:3a:f3:09:04:f8:08:e9:
         c2:11:2c:d7:72:6d:11:30:34:0e:ec:6f:61:77:d0:63:9c:ca:
         87:d0:1d:7b:35:6b:fb:fc:54:a9:9e:f6:25:fc:5f:7b:85:c6:
         0c:97:9b:d3:02:b4:91:68:d1:88:58:6a:f7:b3:f9:ae:e1:76:
         9c:2b:ba:44:06:ed:d2:69:76:e2:7e:9f:5a:b7:62:85:a9:f3:
         86:3d:d2:52:6a:51:0e:75:d2:f4:9e:3f:cf:51:a6:85:56:0f:
         1f:6c:6b:08:ff:a0:04:c1:2a:9e:52:f8:fa:85:2d:fa:8c:4e:
         76:07:71:61:43:31:49:2f:b8:3a:0f:57:8e:f0:68:c9:1d:60:
         6b:76:45:1a:3d:d4:4e:79:7e:a8:03:eb:cd:5a:dc:b7:aa:b5:
         7a:00:bc:24:fe:26:ca:2a:74:82:1f:47:33:45:dd:94:8e:6b:
         16:0b:e1:66:a7:10:dc:80:7d:91:01:f6:01:39:7e:0e:91:16:
         3d:25:f1:1f:da:20:96:6b:27:3d:8f:47:5c:de:98:60:49:a5:
         96:e8:d4:88:b6:01:a7:61:40:11:73:cb:0c:ec:3b:2d:c1:85:
         31:8c:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:46:05 2025 by rpki-client