This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/3230362e3235312e35362e302f32322d3234203d3e203236353631.roa
File:                     3230362e3235312e35362e302f32322d3234203d3e203236353631.roa (raw, json)
Hash identifier:          YGpbryyW6Fby/Id+a/vL8G/WEgGLzxjE9zFh8HOQWF4=
Subject key identifier:   8E:8E:21:62:41:BC:2F:10:AF:76:40:26:C6:42:2E:60:7F:D1:02:F1
Certificate issuer:       /CN=d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a
Certificate serial:       4570F0B19D27129794B731D7FEE26E162C6E2842
Authority key identifier: 7A:DE:54:5B:76:40:0B:D7:E0:6B:C0:29:F5:B5:92:56:71:90:A9:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/3230362e3235312e35362e302f32322d3234203d3e203236353631.roa
Signing time:             Mon 24 Nov 2025 17:24:42 +0000
ROA not before:           Mon 24 Nov 2025 17:19:42 +0000
ROA not after:            Mon 23 Nov 2026 17:24:42 +0000
asID:                     26561
IP address blocks:        206.251.56.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:70:f0:b1:9d:27:12:97:94:b7:31:d7:fe:e2:6e:16:2c:6e:28:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a
        Validity
            Not Before: Nov 24 17:19:42 2025 GMT
            Not After : Nov 23 17:24:42 2026 GMT
        Subject: CN=8E8E216241BC2F10AF764026C6422E607FD102F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:55:0d:85:b6:cf:fd:29:cb:e3:51:57:82:
                    a6:0d:23:fa:e2:6e:20:57:a0:8f:95:fc:ac:68:30:
                    70:5c:4e:82:8f:1f:7a:30:3e:2b:2b:f7:7c:53:14:
                    56:ff:ce:e4:fa:69:54:e6:3d:72:b3:da:74:97:96:
                    7b:02:9c:25:47:ea:cd:e4:bc:8b:c0:10:1c:fc:43:
                    50:22:af:0d:38:45:9c:0e:16:1d:1d:cb:e3:d7:7b:
                    31:b4:64:1b:ac:bb:01:05:93:cd:1c:ed:f5:2e:a8:
                    d0:32:af:5d:09:98:70:69:1f:98:b1:95:33:5d:a3:
                    5c:ae:30:68:b9:15:77:10:46:46:64:b9:cf:2f:38:
                    3f:45:75:77:49:c7:41:85:66:6d:f2:29:ba:91:65:
                    2f:fe:db:a1:30:cf:ac:30:af:d2:39:8b:c3:43:38:
                    fc:7c:25:db:4c:43:ff:24:d9:08:45:59:c0:6e:3e:
                    98:4c:7e:5c:2e:d3:5c:cb:80:59:5b:81:5c:36:ef:
                    ad:ea:a5:4a:95:56:ea:c1:1d:45:5b:1b:90:e7:d1:
                    10:ba:ea:8c:24:a8:bf:ae:d1:b9:6b:53:e4:39:bc:
                    8b:32:78:6a:ed:7c:c6:15:f0:97:f5:a9:62:12:b3:
                    12:f9:33:fa:b8:af:b2:de:ad:d1:6a:68:cf:f5:5d:
                    11:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:21:62:41:BC:2F:10:AF:76:40:26:C6:42:2E:60:7F:D1:02:F1
            X509v3 Authority Key Identifier:
                keyid:7A:DE:54:5B:76:40:0B:D7:E0:6B:C0:29:F5:B5:92:56:71:90:A9:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/7ADE545B76400BD7E06BC029F5B592567190A90C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/3230362e3235312e35362e302f32322d3234203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:6b:41:8f:cb:6b:05:d9:ba:37:6a:00:5b:6d:93:20:84:
         df:1f:1d:42:08:1a:48:aa:46:7a:e7:e2:cc:17:0b:1d:83:0a:
         a4:03:3e:1c:88:85:a3:2a:98:8a:15:a7:2d:c6:9c:d5:81:61:
         9c:6f:a2:83:8c:fe:e6:a3:e0:98:df:49:7f:51:3d:65:0f:e0:
         3b:eb:6b:52:a0:bb:bf:e7:8f:37:5f:c6:d5:09:44:c6:5c:16:
         ab:fb:66:c3:9f:9e:75:3e:f4:01:08:0d:60:81:d0:d4:00:25:
         dd:e7:7c:48:3e:de:b9:ef:5e:e4:69:52:21:c6:2e:e4:bf:22:
         af:1e:24:51:44:66:d8:46:3c:8a:41:76:8a:f4:37:bf:ec:94:
         f2:d6:1d:61:fd:f2:c3:12:7e:95:ea:be:6a:df:33:a9:2d:6c:
         0c:6c:52:d5:1f:1e:d1:8b:23:d7:fe:c5:08:da:74:9b:14:cf:
         fa:93:4a:3a:3c:4a:4e:94:c2:3c:3f:0f:bc:75:ba:76:69:ea:
         c5:b2:dc:e3:e6:95:76:02:a3:10:7c:d4:5a:be:e6:67:dc:55:
         b3:d0:cc:6c:c5:f6:3f:f7:8a:94:f0:a4:4f:5e:b8:c8:10:64:
         ae:72:74:06:b3:70:fc:c0:58:68:34:65:63:52:55:41:23:e4:
         f2:f3:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----