This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9be3711-5517-32a8-b853-8eecbd988907.roa
File:                     c9be3711-5517-32a8-b853-8eecbd988907.roa (raw, json)
Hash identifier:          6/MMRyrelzjLqCd463UIBVRS/SSil8tr5oiR+W3czOo=
Subject key identifier:   F0:39:EE:60:A9:CE:79:19:F6:1D:58:E0:64:50:D1:89:C6:59:60:0C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A8410B272E08426039CD1B580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9be3711-5517-32a8-b853-8eecbd988907.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     4128
IP address blocks:        2001:470:44a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:b2:72:e0:84:26:03:9c:d1:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=221dff43-b5d8-4770-9213-7f140b616879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:a2:e9:49:15:7b:e2:e1:f5:48:64:10:0c:
                    57:63:25:45:0e:d1:64:b3:b0:d2:2c:49:7c:0a:e8:
                    35:72:b1:3f:f9:5d:a8:59:54:3e:f8:54:09:b5:6a:
                    a3:b5:e4:1e:ba:7b:38:c5:14:86:03:65:cb:17:4c:
                    df:05:b5:1b:cb:3a:bf:38:96:ca:ca:0d:4f:d5:e5:
                    0f:f1:ac:13:84:fe:cf:f8:0c:87:3d:b3:09:34:4d:
                    b6:67:fe:b2:fd:51:e6:e5:cc:fc:ba:29:07:bb:5a:
                    21:8b:ac:a3:d5:e7:3b:5a:6d:04:a9:86:50:f6:87:
                    11:27:d6:ba:4f:b6:1b:9a:bb:c8:b7:cc:9d:c4:cf:
                    a8:9a:eb:93:d0:0f:4a:7c:ec:9a:4b:9d:dd:6f:f8:
                    52:fa:3b:fb:21:73:7c:49:a3:6f:8d:8e:96:e2:d5:
                    22:55:d4:fc:45:8a:c2:78:b6:82:80:5e:b7:1c:c8:
                    1d:cd:72:3a:7e:fb:5d:ec:6e:55:c0:2f:2e:55:ba:
                    f6:2c:81:d0:9b:e8:f8:7e:c8:eb:49:71:a5:a5:af:
                    2d:33:d2:a6:fe:d6:aa:c3:2b:a3:b9:31:81:d6:88:
                    bb:d2:53:82:69:f7:14:fd:9f:a5:ee:77:eb:65:56:
                    28:4d:1d:5a:a5:c2:94:c2:e4:f4:a6:b4:99:5f:07:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:EE:60:A9:CE:79:19:F6:1D:58:E0:64:50:D1:89:C6:59:60:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9be3711-5517-32a8-b853-8eecbd988907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6e:7c:f8:f1:0c:bf:0d:6b:18:9e:4e:31:9f:b8:fc:76:88:
         35:cf:b5:28:28:84:a7:c6:b4:85:b7:d9:ab:3e:ce:64:57:7b:
         bf:3b:c6:c6:2c:39:a0:2a:01:d3:95:c6:0e:45:43:00:2c:19:
         a9:c6:a9:8f:19:88:31:18:5f:97:08:81:4e:67:5b:52:bb:bc:
         50:74:74:5f:6d:3b:49:c2:c8:2b:3c:48:7d:82:d0:6a:99:48:
         2e:c6:72:a3:e4:94:5c:81:c6:16:44:0d:8f:bc:00:b7:6f:8e:
         f8:ee:aa:dc:47:48:ff:3b:f1:5e:bc:d6:56:ca:49:2f:54:04:
         4d:47:55:f6:74:00:0a:09:64:63:c0:c5:69:1a:fe:de:6f:d0:
         49:eb:b4:55:8b:e6:1e:2a:80:f4:cb:06:5e:97:12:d6:37:d4:
         4f:b7:2b:79:7a:3c:dd:69:69:43:65:e0:98:97:0c:8f:3b:fa:
         cd:27:d9:5c:0a:b5:c1:f6:a2:ec:61:f2:6f:71:51:c8:3f:a3:
         92:54:17:13:0c:8b:2b:35:49:27:62:69:99:a4:37:35:43:d1:
         d3:65:33:2d:de:d5:45:7e:10:a6:9d:6f:d1:c6:72:c4:54:c4:
         9e:d8:cd:96:48:24:9b:7d:de:40:30:e6:02:43:f0:7c:36:a6:
         a6:ad:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:32:28 2025 by rpki-client