This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0704fa5a-8012-38b5-9b59-8800d1991027.roa
File:                     0704fa5a-8012-38b5-9b59-8800d1991027.roa (raw, json)
Hash identifier:          +MTwkVLsctOR5d6lPCqEo36gd2MbLjxZzVoe5dYdlI8=
Subject key identifier:   CC:BC:BD:20:BD:37:31:E0:A5:48:61:10:91:C9:10:D0:9C:D1:90:6F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB221778DEA6B5073B213F980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0704fa5a-8012-38b5-9b59-8800d1991027.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.252.209.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:77:8d:ea:6b:50:73:b2:13:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=c4528b11-6675-4f4e-96a8-653a45d9cef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:f3:a8:1d:33:31:11:20:e6:fb:72:31:3c:
                    5b:86:31:0c:9a:24:2e:9f:c5:c0:de:fc:bc:7c:9a:
                    3c:03:b2:74:d1:ee:06:38:46:0c:da:7c:40:a0:72:
                    94:c8:90:02:b6:2f:4a:d1:63:18:e8:82:7a:6c:bb:
                    8a:ee:f0:26:82:19:cf:02:d8:2a:75:21:f5:ec:9a:
                    80:ed:cc:66:0d:b5:d3:1f:34:eb:a3:e3:1e:ea:09:
                    ca:68:27:a6:73:85:28:2b:24:a9:c0:a3:37:65:c3:
                    0f:05:73:c7:ce:ae:53:be:9c:0e:01:ce:de:fd:8f:
                    29:38:d3:14:10:78:66:70:ba:84:f0:81:48:4d:90:
                    65:bf:bf:02:cb:62:a1:7e:84:2b:fd:fc:b1:f2:f5:
                    c3:fd:2f:ae:da:1f:26:5f:87:ef:fd:f1:1d:32:d3:
                    c7:8c:2e:1a:78:a3:5a:86:4c:88:0c:3d:2b:27:9d:
                    42:12:e3:70:0d:92:a9:df:82:3b:d5:d4:b3:1e:45:
                    da:ac:28:05:99:3b:78:d9:6c:92:d3:12:96:38:9a:
                    b0:11:d9:1e:af:56:0f:13:24:23:94:85:e7:9e:6c:
                    1a:8c:e1:55:ad:67:a3:99:05:bd:44:0c:e3:be:ef:
                    eb:59:1a:81:60:79:1c:f4:dc:f0:fa:d8:a8:dd:bb:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BC:BD:20:BD:37:31:E0:A5:48:61:10:91:C9:10:D0:9C:D1:90:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0704fa5a-8012-38b5-9b59-8800d1991027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:25:c9:8f:89:78:a6:3b:23:62:fc:9d:fc:a8:ba:b8:2c:78:
         5d:b9:a8:5b:2a:72:71:c9:23:70:af:aa:ae:0b:34:2d:8e:72:
         c9:07:cf:4d:74:b6:74:ec:03:0d:3d:af:f0:dc:ef:6a:97:52:
         4e:0b:68:48:5d:03:f7:cd:74:d7:e5:16:84:93:a8:71:bb:61:
         22:67:0d:ad:0a:c7:eb:a2:19:a3:20:0f:9c:ba:bb:5e:9b:80:
         6d:71:6d:99:d5:e4:86:41:b4:94:b9:08:44:28:57:73:ee:28:
         5f:e6:b1:f0:84:80:b9:48:90:0d:da:15:2b:9d:07:b8:0c:01:
         45:55:e5:2f:ca:29:5e:47:4b:db:1c:66:19:e9:51:8d:0f:d0:
         b9:2a:db:1f:b5:a4:1c:9e:26:f5:8a:48:d2:af:15:2e:ce:97:
         1a:bd:df:ab:c9:0c:55:05:42:96:82:3e:b6:0d:99:10:f2:7d:
         1a:f0:5c:4e:62:63:bb:1b:08:49:7e:b2:d6:99:84:a8:de:f6:
         f1:24:8c:09:ea:78:66:37:99:da:e7:0e:98:9c:e5:4d:3f:71:
         df:fd:78:bd:d8:52:af:40:f6:5b:9c:0e:d9:63:ae:40:b1:4f:
         7d:ed:14:7f:15:d2:51:37:1b:b7:9f:99:11:51:54:75:de:ca:
         fc:4e:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----