This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b0a0e2a7-9d9e-32aa-a6a6-9d7a6d7e70d2.roa
File:                     b0a0e2a7-9d9e-32aa-a6a6-9d7a6d7e70d2.roa (raw, json)
Hash identifier:          mw3LOgRo6WjevBmNPIRMZAULl1BdtRIYi/9kdiMPxzA=
Subject key identifier:   75:67:40:42:04:DF:4F:43:22:9B:87:84:D4:35:98:66:F7:AD:0D:72
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584B715CA8B1ECFAF5E3F0529A60
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b0a0e2a7-9d9e-32aa-a6a6-9d7a6d7e70d2.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     30383
IP address blocks:        130.170.163.0/24 maxlen: 24
                          130.170.167.0/24 maxlen: 24
                          130.172.127.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 14 Oct 2025 11:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a8:b1:ec:fa:f5:e3:f0:52:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=b5ca7d34-3672-4cc8-9fd7-e02ed10d5709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d3:a2:2b:cc:eb:13:bd:81:cc:47:bc:cf:ff:
                    38:c8:88:c0:99:46:3d:72:c9:b0:0d:84:0e:a3:f9:
                    53:81:03:15:b1:1f:6d:87:d1:ee:34:e0:47:34:c5:
                    32:80:55:97:9a:a0:96:ab:83:12:0e:d0:2e:cc:2f:
                    f9:05:4a:e4:c6:91:89:25:ae:82:11:11:b1:a1:f1:
                    da:71:c7:e9:ef:36:4b:8b:23:bd:68:4d:fc:65:09:
                    f1:82:be:e4:d1:6b:28:db:5a:10:7d:7d:85:3d:ab:
                    88:5a:53:ab:28:43:7e:e0:9c:e6:f2:27:7b:f8:b8:
                    61:3a:ec:10:c7:d9:0a:c2:e7:61:d7:0a:ac:a4:9f:
                    97:af:0e:eb:63:7e:98:9e:c7:46:c0:66:7d:fe:e3:
                    b6:85:ba:7e:8f:72:64:2d:36:aa:fe:91:b0:ae:b9:
                    1d:93:16:eb:9b:07:c8:10:70:b1:17:f4:0a:e1:52:
                    01:a4:12:60:a2:a3:b7:45:e3:1a:f0:cc:24:f9:8e:
                    b3:a1:d7:ac:66:7c:d6:54:6c:9d:d9:01:6a:7b:ef:
                    59:0f:b4:d2:db:d4:11:53:22:d7:7d:f2:3a:8f:7b:
                    12:6e:d9:50:a2:9d:5c:60:f5:ff:a6:b0:4d:68:45:
                    48:6a:23:1e:40:60:1e:0c:aa:fc:4c:f3:97:83:c7:
                    3d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:67:40:42:04:DF:4F:43:22:9B:87:84:D4:35:98:66:F7:AD:0D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b0a0e2a7-9d9e-32aa-a6a6-9d7a6d7e70d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.170.163.0/24
                  130.170.167.0/24
                  130.172.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c2:5c:1f:df:fb:09:a0:72:e7:8a:f8:da:06:21:36:b2:d1:
         79:bb:06:ee:2c:29:27:c3:06:5c:6c:20:68:7a:39:0a:ae:3f:
         56:0a:4b:a8:f9:df:c5:77:4c:5b:18:7f:c0:dd:f1:b3:d9:ba:
         aa:7f:0c:77:5e:cc:96:c2:8a:e7:7c:b7:3d:eb:d1:67:16:0a:
         51:3b:9a:47:a0:5a:10:f1:95:da:30:19:43:36:e2:a3:da:bf:
         67:95:97:4e:eb:c1:e9:a9:a9:ff:b1:fc:0b:22:1e:05:5e:8b:
         ff:a1:5f:31:86:ae:22:5f:c1:8a:14:2e:0d:e3:05:4d:e4:61:
         15:1e:b6:81:56:8a:b7:7c:57:cd:43:10:63:83:32:5a:21:1b:
         d2:04:8d:65:a6:55:89:ee:e5:40:7f:78:eb:9c:9d:57:9b:28:
         9f:2f:0b:5b:a5:d6:45:66:4a:05:d7:ba:f4:e2:a8:28:44:ed:
         87:e1:bb:77:e7:be:f3:07:14:40:b8:f7:10:e4:28:d1:c8:26:
         a0:de:75:25:d6:1b:42:4a:97:7f:6f:97:5a:08:d9:bf:02:61:
         f7:59:e8:4b:dd:57:ed:cc:53:fe:69:2d:f9:86:5c:26:39:6a:
         ed:49:8c:c9:2f:67:f6:94:d7:9f:d2:28:ea:74:a2:01:89:0b:
         07:5e:f5:ea
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtxXKix7Pr14/BSmmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl
M2U0MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
YjVjYTdkMzQtMzY3Mi00Y2M4LTlmZDctZTAyZWQxMGQ1NzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtOiK8zrE72BzEe8z/84yIjAmUY9csmwDYQO
o/lTgQMVsR9th9HuNOBHNMUygFWXmqCWq4MSDtAuzC/5BUrkxpGJJa6CERGxofHa
ccfp7zZLiyO9aE38ZQnxgr7k0Wso21oQfX2FPauIWlOrKEN+4Jzm8id7+LhhOuwQ
x9kKwudh1wqspJ+Xrw7rY36YnsdGwGZ9/uO2hbp+j3JkLTaq/pGwrrkdkxbrmwfI
EHCxF/QK4VIBpBJgoqO3ReMa8Mwk+Y6zodesZnzWVGyd2QFqe+9ZD7TS29QRUyLX
ffI6j3sSbtlQop1cYPX/prBNaEVIaiMeQGAeDKr8TPOXg8c97QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFHVnQEIE309DIpuHhNQ1mGb3rQ1yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2
N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvYjBhMGUyYTctOWQ5ZS0z
MmFhLWE2YTYtOWQ3YTZkN2U3MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm
YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0
ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj
NDk1NGUzZTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAgqqjAwQA
gqqnAwQAgqx/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACHCXB/f+wmgcueK+NoGITay0Xm7Bu4sKSfDBlxs
IGh6OQquP1YKS6j538V3TFsYf8Dd8bPZuqp/DHdezJbCiud8tz3r0WcWClE7mkeg
WhDxldowGUM24qPav2eVl07rwempqf+x/AsiHgVei/+hXzGGriJfwYoULg3jBU3k
YRUetoFWird8V81DEGODMlohG9IEjWWmVYnu5UB/eOucnVebKJ8vC1ul1kVmSgXX
uvTiqChE7Yfhu3fnvvMHFEC49xDkKNHIJqDedSXWG0JKl39vl1oI2b8CYfdZ6Evd
V+3MU/5pLfmGXCY5au1JjMkvZ/aU15/SKOp0ogGJCwde9eo=
-----END CERTIFICATE-----
Generated at Wed Dec 17 15:15:55 2025 by rpki-client