This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/95c02102-9be8-3d15-a9a7-7894b2777bc3.roa
File:                     95c02102-9be8-3d15-a9a7-7894b2777bc3.roa (raw, json)
Hash identifier:          Nl2aTFMbgOL4P85Ku5WzCPPmxP67rdrypxPKZnPsUe4=
Subject key identifier:   6D:F3:A6:0E:6D:7E:0D:D7:BF:56:41:E5:56:45:23:AD:4B:34:13:57
Certificate issuer:       /CN=09b7e2d8-e99c-42a5-a05e-c0e57237f003
Certificate serial:       010D0C9F4328584A043E0B1C5E01B36144CA1300
Authority key identifier: C6:38:45:53:FD:8E:2D:1E:41:66:FB:11:B4:7A:E1:A6:40:59:4B:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/95c02102-9be8-3d15-a9a7-7894b2777bc3.roa
Signing time:             Thu 29 May 2025 18:09:00 +0000
ROA not before:           Thu 29 May 2025 18:09:00 +0000
ROA not after:            Wed 27 Aug 2025 18:09:00 +0000
asID:                     19227
IP address blocks:        64.254.34.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:04:3e:0b:1c:5e:01:b3:61:44:ca:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b7e2d8-e99c-42a5-a05e-c0e57237f003
        Validity
            Not Before: May 29 18:09:00 2025 GMT
            Not After : Aug 27 18:09:00 2025 GMT
        Subject: CN=03e290e3-0c19-4caf-8973-faf7326cdd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b2:54:c6:2f:63:82:2d:fb:c6:98:b1:b2:17:
                    b1:46:cc:45:11:34:05:f8:fb:4a:6f:60:b2:7f:4e:
                    13:ee:fb:5f:3a:e0:3f:ca:de:13:18:d5:c7:91:bb:
                    dd:e2:56:46:44:6c:9f:eb:54:a4:74:8a:45:92:85:
                    60:90:ae:02:43:23:af:43:70:24:a8:2d:31:7d:f7:
                    38:8a:99:12:0b:1e:84:a0:26:fb:6b:da:b0:38:b2:
                    2a:a6:e5:af:4c:43:91:f5:27:fb:e5:64:5e:a5:34:
                    57:57:0f:7b:75:2e:be:88:31:ab:96:64:2e:88:97:
                    50:7b:aa:54:e4:2d:0a:c4:c0:08:4b:f5:af:1b:61:
                    34:4d:73:63:c3:50:87:b4:33:c5:ed:b9:47:fe:ef:
                    20:b4:31:10:88:a2:57:81:5b:65:97:b1:5e:b7:30:
                    43:b2:17:85:23:78:22:e5:dc:e0:1f:3a:59:50:1b:
                    02:b6:2e:fe:18:92:c7:27:7a:3d:e1:b5:03:86:d5:
                    41:83:9c:a0:26:3d:ca:1d:32:48:6d:a5:39:23:9c:
                    ab:c9:c7:a2:bf:1d:90:33:ae:20:b9:c2:39:99:ff:
                    85:0a:c3:6e:c3:c0:23:a3:04:f6:a7:81:8b:f7:e2:
                    09:3a:0f:74:a9:86:a2:e4:5d:62:0d:46:ec:f1:3f:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F3:A6:0E:6D:7E:0D:D7:BF:56:41:E5:56:45:23:AD:4B:34:13:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/95c02102-9be8-3d15-a9a7-7894b2777bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.crl

            X509v3 Authority Key Identifier:
                keyid:C6:38:45:53:FD:8E:2D:1E:41:66:FB:11:B4:7A:E1:A6:40:59:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.254.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:33:ed:fd:e5:d6:08:52:02:20:ca:56:0e:10:8a:2f:7d:64:
         c2:31:cf:fa:12:b3:68:b1:1b:75:8d:77:5c:5a:bf:dd:99:0e:
         aa:df:96:7e:12:3e:af:29:c0:c7:c3:a8:0b:3c:d8:2f:7c:b4:
         77:0d:7e:d2:2e:f3:0f:64:88:be:34:cc:7b:29:cd:90:4b:05:
         f6:6a:da:6f:f7:aa:4a:78:1c:5e:ef:0b:67:3b:ed:dc:36:bd:
         94:35:ff:d2:cd:f4:c8:5e:8b:32:1a:d5:21:71:e4:3d:6c:0f:
         0a:1a:1e:71:7b:56:d8:5d:76:f0:a0:d8:e9:73:80:bb:74:f9:
         47:93:c5:42:bc:03:bf:a5:52:96:2d:94:54:d7:55:06:6c:13:
         a6:50:24:62:07:8e:4a:ea:ac:ac:02:62:2a:14:b8:b7:42:d8:
         1c:8b:ab:16:cf:db:6f:a2:8e:16:32:66:00:15:08:5f:85:e3:
         b8:36:02:48:9a:72:eb:fc:cc:50:f3:42:6d:f6:ea:36:2c:a9:
         b8:1e:15:ec:fb:e1:bf:bb:07:30:2a:72:98:2a:6f:f5:1b:24:
         ce:fa:fe:02:95:6e:e9:6a:ca:ba:3d:79:4c:76:5b:1b:31:54:
         81:e9:e7:1f:19:7d:30:3d:63:1e:09:9c:bf:37:a4:a7:fb:ee:
         6d:f5:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----