This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/323630323a663966613a3a2f33362d3438203d3e203236353631.roa
File:                     323630323a663966613a3a2f33362d3438203d3e203236353631.roa (raw, json)
Hash identifier:          GIcsVx3rzbUpvBT3vhhg1f6S1Fq0tZR8QYrOBH05uE8=
Subject key identifier:   E8:12:04:49:12:C7:CE:16:CE:B1:70:68:52:46:AB:5A:F7:6F:D9:B2
Certificate issuer:       /CN=d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a
Certificate serial:       78D9C552BBCFE7F86D3405439958D0FFE6DC1B28
Authority key identifier: 7A:DE:54:5B:76:40:0B:D7:E0:6B:C0:29:F5:B5:92:56:71:90:A9:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/323630323a663966613a3a2f33362d3438203d3e203236353631.roa
Signing time:             Mon 24 Nov 2025 17:25:03 +0000
ROA not before:           Mon 24 Nov 2025 17:20:03 +0000
ROA not after:            Mon 23 Nov 2026 17:25:03 +0000
asID:                     26561
IP address blocks:        2602:f9fa::/36 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d9:c5:52:bb:cf:e7:f8:6d:34:05:43:99:58:d0:ff:e6:dc:1b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a
        Validity
            Not Before: Nov 24 17:20:03 2025 GMT
            Not After : Nov 23 17:25:03 2026 GMT
        Subject: CN=E812044912C7CE16CEB170685246AB5AF76FD9B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:5c:b1:32:27:3b:c5:15:ca:2d:41:63:58:
                    cb:a0:02:43:e9:2d:84:85:26:22:6c:3d:e9:f1:8c:
                    e1:15:e5:78:67:43:b0:51:92:77:b7:62:cd:95:ec:
                    db:5f:6a:c5:15:cd:de:ee:47:3a:02:f3:a4:82:42:
                    41:ff:e1:22:e7:5f:3c:2f:3d:5a:72:92:ed:33:57:
                    92:01:9b:b1:ba:e8:30:4d:75:86:e8:9f:66:41:c6:
                    cb:d6:76:d7:18:1d:6d:cb:1b:04:f7:d5:03:dd:05:
                    66:7c:62:82:91:cf:2d:29:39:a8:06:dc:07:3a:06:
                    4f:91:06:74:19:7f:a5:2a:74:06:03:ed:f3:a2:0a:
                    9e:be:41:4a:98:2e:ee:70:5f:8c:6a:7c:47:19:25:
                    6a:c9:d7:92:98:24:d6:ea:93:32:69:6b:f2:af:c6:
                    4e:24:01:29:eb:dd:a6:8b:b8:35:1e:34:54:18:70:
                    2d:dc:d6:f3:df:eb:42:c8:05:69:24:b0:a2:aa:d0:
                    6d:4a:9b:c5:89:02:b4:74:77:cc:04:13:71:45:8c:
                    40:01:ea:84:9c:96:54:2c:61:46:85:b3:40:54:f4:
                    ea:f3:73:10:7f:52:ee:b4:65:bc:47:af:fc:58:43:
                    1b:88:c5:08:b7:68:1b:0c:d8:c8:ba:a7:93:8d:23:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:12:04:49:12:C7:CE:16:CE:B1:70:68:52:46:AB:5A:F7:6F:D9:B2
            X509v3 Authority Key Identifier:
                keyid:7A:DE:54:5B:76:40:0B:D7:E0:6B:C0:29:F5:B5:92:56:71:90:A9:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/7ADE545B76400BD7E06BC029F5B592567190A90C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/323630323a663966613a3a2f33362d3438203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9fa::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:f3:8b:b1:22:d1:db:e0:45:e9:2f:d9:17:8f:fa:c5:57:64:
         5f:6c:1f:6e:4e:3a:26:25:f3:24:c0:81:c1:52:4b:4b:3a:c6:
         ca:bf:7f:cb:a4:1c:41:47:25:5d:42:32:6f:11:2c:4d:18:47:
         a2:a6:74:fc:af:d4:70:27:91:6e:8a:7c:ed:12:8f:a3:85:1e:
         fd:b3:2b:cf:65:66:dc:e3:f7:75:09:d1:66:98:b8:75:ff:02:
         a4:a4:03:77:7c:73:83:14:a1:ab:a9:ed:c3:db:cf:41:67:f3:
         47:55:33:fd:ad:6c:1c:9e:02:02:82:67:36:05:f8:4d:7e:75:
         ab:67:43:fc:6b:27:eb:77:95:df:43:09:65:12:c9:f4:43:3a:
         5d:25:ed:d0:0e:18:30:9e:e9:8a:fc:05:9b:f8:6c:c2:85:76:
         24:24:8d:76:0b:f8:3c:e6:da:d5:07:04:10:d2:f1:de:ae:25:
         ef:c8:46:1f:0c:df:db:a3:92:07:b9:9f:74:3a:5b:5a:84:dc:
         1e:c9:e1:df:a5:a2:10:02:39:a6:21:63:f5:7b:3b:26:f0:f3:
         26:62:6e:71:13:b6:ba:b5:d9:fe:ed:a6:c8:dc:0e:41:0f:0b:
         55:77:08:23:6f:a6:f7:cc:a0:6d:6a:a6:a9:22:38:65:f3:d5:
         be:e4:01:78
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUeNnFUrvP5/htNAVDmVjQ/+bcGygwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTc1ODI3YzRmMTNiYWY4NmY4YjMzYjk3
MmU0MWUzOTM0ZDk3YmM4OWEwHhcNMjUxMTI0MTcyMDAzWhcNMjYxMTIzMTcyNTAz
WjAzMTEwLwYDVQQDEyhFODEyMDQ0OTEyQzdDRTE2Q0VCMTcwNjg1MjQ2QUI1QUY3
NkZEOUIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrNcsTInO8UV
yi1BY1jLoAJD6S2EhSYibD3p8YzhFeV4Z0OwUZJ3t2LNlezbX2rFFc3e7kc6AvOk
gkJB/+Ei5188Lz1acpLtM1eSAZuxuugwTXWG6J9mQcbL1nbXGB1tyxsE99UD3QVm
fGKCkc8tKTmoBtwHOgZPkQZ0GX+lKnQGA+3zogqevkFKmC7ucF+ManxHGSVqydeS
mCTW6pMyaWvyr8ZOJAEp692mi7g1HjRUGHAt3Nbz3+tCyAVpJLCiqtBtSpvFiQK0
dHfMBBNxRYxAAeqEnJZULGFGhbNAVPTq83MQf1LutGW8R6/8WEMbiMUIt2gbDNjI
uqeTjSNcWQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOgSBEkSx84WzrFwaFJGq1r3
b9myMB8GA1UdIwQYMBaAFHreVFt2QAvX4GvAKfW1klZxkKkMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzQ1NmY0YjI1ZDNkNjRhMjA4M2VhZjMzMmRjYWM0ZmFlLzAv
N0FERTU0NUI3NjQwMEJEN0UwNkJDMDI5RjVCNTkyNTY3MTkwQTkwQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzBlYzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0MzBlMi9kOTBk
OGFiYTJhNzU4MjdjNGYxM2JhZjg2ZjhiMzNiOTcyZTQxZTM5MzRkOTdiYzg5YS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS80NTZmNGIyNWQzZDY0YTIwODNlYWYz
MzJkY2FjNGZhZS8wLzMyMzYzMDMyM2E2NjM5NjY2MTNhM2EyZjMzMzYyZDM0Mzgy
MDNkM2UyMDMyMzYzNTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQmAvn6ADANBgkqhkiG9w0BAQsF
AAOCAQEAtPOLsSLR2+BF6S/ZF4/6xVdkX2wfbk46JiXzJMCBwVJLSzrGyr9/y6Qc
QUclXUIybxEsTRhHoqZ0/K/UcCeRbop87RKPo4Ue/bMrz2Vm3OP3dQnRZpi4df8C
pKQDd3xzgxShq6ntw9vPQWfzR1Uz/a1sHJ4CAoJnNgX4TX51q2dD/Gsn63eV30MJ
ZRLJ9EM6XSXt0A4YMJ7pivwFm/hswoV2JCSNdgv4POba1QcEENLx3q4l78hGHwzf
26OSB7mfdDpbWoTcHsnh36WiEAI5piFj9Xs7JvDzJmJucRO2urXZ/u2myNwOQQ8L
VXcII2+m98ygbWqmqSI4ZfPVvuQBeA==
-----END CERTIFICATE-----