This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/0fd1d1ec-1611-38ad-8097-3c68c0e2de44.roa
File:                     0fd1d1ec-1611-38ad-8097-3c68c0e2de44.roa (raw, json)
Hash identifier:          eZFU1eyx9Z5ncfmFtlaKFvgbnTw1HwA/Wi3SryqZFt4=
Subject key identifier:   2C:F4:1B:19:BB:34:E6:2B:FC:61:F9:E0:90:0B:5C:F1:0D:0E:43:17
Certificate issuer:       /CN=525bd43e-79fc-4d46-b0a3-ea097485469b
Certificate serial:       010D0C9F43285848DC46331CB3230D73FAB66380
Authority key identifier: 74:B5:6B:AA:C5:D8:74:AD:2D:72:C5:EB:DF:A8:B6:83:82:0E:5F:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/0fd1d1ec-1611-38ad-8097-3c68c0e2de44.roa
Signing time:             Wed 12 Feb 2025 17:46:10 +0000
ROA not before:           Wed 12 Feb 2025 17:46:10 +0000
ROA not after:            Tue 13 May 2025 16:46:10 +0000
asID:                     11796
IP address blocks:        208.67.28.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dc:46:33:1c:b3:23:0d:73:fa:b6:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525bd43e-79fc-4d46-b0a3-ea097485469b
        Validity
            Not Before: Feb 12 17:46:10 2025 GMT
            Not After : May 13 16:46:10 2025 GMT
        Subject: CN=6bf5a7a3-735a-46a7-81d5-bff7c0e4eab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:05:3d:30:b8:04:d1:ad:b3:9c:74:75:84:
                    1e:7c:24:ec:51:6d:d8:3e:a0:39:71:d7:90:6c:86:
                    ef:ab:55:9e:46:b2:65:96:39:9c:ca:25:70:13:f8:
                    bb:00:ce:ee:86:16:3e:2a:e5:a6:2e:c8:bf:3a:67:
                    81:dd:67:fa:af:1c:3f:07:7b:ab:31:7a:04:e3:78:
                    5d:ea:21:36:c4:c1:75:b0:47:8e:95:8b:cc:e1:ae:
                    1a:10:2f:87:7a:d7:7d:b6:d1:29:da:b5:82:77:3b:
                    cf:be:3d:6f:c5:59:a0:1c:6b:c3:d2:93:c8:45:16:
                    90:c9:7b:cc:3a:25:46:f8:cb:39:e1:34:ce:40:56:
                    c0:4f:5e:3c:b5:7a:62:e9:31:23:fc:b2:ce:63:a0:
                    0b:db:44:6f:62:6c:7e:67:83:92:1c:f4:88:7c:59:
                    5a:76:ad:93:b1:a0:c6:ec:08:d5:97:d6:09:0e:89:
                    8e:e3:e9:0a:2c:55:5b:53:24:d0:43:8b:98:5b:e4:
                    28:dd:ae:7b:c2:31:f0:d3:2c:5a:07:dd:40:c5:45:
                    34:98:68:9d:a3:0b:3e:c8:51:cf:3c:41:b3:bf:a6:
                    59:aa:ab:7d:b5:90:a0:83:21:d4:9b:27:d1:3d:e2:
                    53:ea:1e:92:2b:54:4b:be:56:10:5f:17:e7:4d:ab:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F4:1B:19:BB:34:E6:2B:FC:61:F9:E0:90:0B:5C:F1:0D:0E:43:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/0fd1d1ec-1611-38ad-8097-3c68c0e2de44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.crl

            X509v3 Authority Key Identifier:
                keyid:74:B5:6B:AA:C5:D8:74:AD:2D:72:C5:EB:DF:A8:B6:83:82:0E:5F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:14:d2:c1:db:13:e0:7d:d5:7e:7d:9b:b6:8e:b9:df:8e:3a:
         56:0b:30:01:cd:35:57:4c:44:fd:d4:4e:ff:15:52:96:a3:72:
         15:71:c1:71:61:e1:4e:4d:7c:dd:2d:ca:a4:fe:1b:92:e4:2f:
         75:da:ed:23:f4:a7:66:d5:86:34:af:f2:39:c8:c1:fd:4a:3e:
         e5:8b:57:44:57:dd:b9:b4:55:b0:26:d0:54:98:6c:fb:1c:4b:
         24:0a:70:75:36:a6:13:8a:f4:a5:8c:4f:36:be:f3:f0:85:99:
         48:18:62:7b:c6:c3:77:94:69:8b:fd:89:0b:ea:61:8f:ca:15:
         65:ca:39:b6:36:64:cd:63:77:61:82:4f:71:9a:99:8d:c1:91:
         35:7e:71:8c:f0:71:92:ae:4e:c3:a7:19:f6:e8:28:84:e2:5e:
         e1:2f:0a:aa:5b:b3:9e:8f:b3:b3:b9:8c:0a:05:4f:08:ad:d0:
         02:29:e4:75:d6:13:c0:be:8a:cd:f8:5c:86:53:5d:1c:a3:72:
         47:ad:e8:a6:27:5e:4b:07:89:56:0a:ac:48:00:e7:38:8f:0b:
         a1:6c:0c:1e:dd:60:29:a7:c2:28:34:f0:5d:dd:b5:c4:23:c5:
         fe:85:c7:80:20:82:f7:f6:42:d7:4d:ae:33:70:cb:63:4d:df:
         31:6d:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:21:02 2025 by rpki-client