This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/323630323a663966613a3a2f33362d3438203d3e203534343937.roa
File:                     323630323a663966613a3a2f33362d3438203d3e203534343937.roa (raw, json)
Hash identifier:          0FhIHOh+1RfapWogp4OK4RIQoNiCJWoOZQEZiusJ1QI=
Subject key identifier:   D8:20:6B:45:B0:8A:48:6A:AF:CD:81:48:66:F8:38:EA:61:26:09:B0
Certificate issuer:       /CN=d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a
Certificate serial:       42F3DD01396691766C200CCD706EC329E43FC710
Authority key identifier: 7A:DE:54:5B:76:40:0B:D7:E0:6B:C0:29:F5:B5:92:56:71:90:A9:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/323630323a663966613a3a2f33362d3438203d3e203534343937.roa
Signing time:             Tue 25 Nov 2025 16:22:14 +0000
ROA not before:           Tue 25 Nov 2025 16:17:14 +0000
ROA not after:            Tue 24 Nov 2026 16:22:14 +0000
asID:                     54497
IP address blocks:        2602:f9fa::/36 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f3:dd:01:39:66:91:76:6c:20:0c:cd:70:6e:c3:29:e4:3f:c7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a
        Validity
            Not Before: Nov 25 16:17:14 2025 GMT
            Not After : Nov 24 16:22:14 2026 GMT
        Subject: CN=D8206B45B08A486AAFCD814866F838EA612609B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:81:fd:da:7e:78:cc:a2:96:f3:16:44:dd:
                    06:76:c6:6b:10:a7:7c:65:ab:a4:9d:8f:2d:12:35:
                    11:48:30:91:fe:a0:3e:e1:9d:d9:7b:9b:e7:b6:70:
                    29:1d:2e:13:65:6d:fc:37:61:62:9b:23:76:43:85:
                    bc:0d:da:25:86:8a:50:5f:33:7c:6d:9a:61:77:78:
                    23:ed:5b:98:38:27:7c:5b:e6:ef:6a:b0:f0:78:78:
                    2b:1c:a0:12:67:b7:d0:2c:7b:88:35:55:d9:72:57:
                    2a:19:98:0d:be:5a:2b:85:f5:15:92:28:82:6b:41:
                    c9:d2:f9:39:b8:79:c2:d8:51:2a:fc:7a:11:d1:4c:
                    64:8e:06:45:29:b5:20:96:d3:aa:97:07:dc:54:5f:
                    25:28:ae:c1:cc:bd:75:23:42:a3:6e:b0:c8:81:0e:
                    79:a4:cb:73:47:1e:4a:cc:f9:ad:72:4a:08:71:e0:
                    a8:90:37:d6:32:13:1b:d0:3a:20:cd:ce:24:22:cc:
                    f5:e5:04:7b:3e:fe:bd:d7:df:fb:42:5c:3a:de:a4:
                    30:89:ea:62:99:79:f2:b0:8b:81:e9:bf:13:fd:99:
                    ed:05:2c:32:8b:27:fa:32:61:68:d2:6f:4f:8c:9f:
                    d6:86:85:d1:a6:53:23:0a:b8:7c:dc:f5:a2:8f:69:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:20:6B:45:B0:8A:48:6A:AF:CD:81:48:66:F8:38:EA:61:26:09:B0
            X509v3 Authority Key Identifier:
                keyid:7A:DE:54:5B:76:40:0B:D7:E0:6B:C0:29:F5:B5:92:56:71:90:A9:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/7ADE545B76400BD7E06BC029F5B592567190A90C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/323630323a663966613a3a2f33362d3438203d3e203534343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9fa::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:cf:64:b8:d3:2a:5f:e3:25:01:71:51:ed:b1:4c:90:96:5a:
         bf:dd:48:a2:9a:a5:9a:18:20:6b:7f:72:1b:4c:7b:a6:dd:3e:
         38:14:d9:d9:d4:97:1b:9a:20:cb:84:47:d2:ad:bf:88:31:44:
         1c:24:bb:8e:3b:97:1a:67:a5:b4:8a:de:b2:4d:5c:12:f0:e5:
         20:f5:76:ca:a7:60:b9:3c:a2:c5:51:4d:df:a6:5b:fa:cd:7e:
         d8:b3:2a:ba:fd:73:d8:e5:32:33:7d:83:03:bf:27:7e:3e:77:
         86:2f:50:84:81:2a:02:78:e8:6a:ce:5d:48:85:cd:b4:f8:28:
         71:c1:f6:6a:67:84:fd:08:85:36:62:2b:a0:44:dd:f0:e3:43:
         ca:34:9b:f8:4c:63:f7:f1:72:8e:72:a7:08:8c:83:01:85:36:
         2e:55:0a:18:e8:82:c1:0c:5d:f8:74:34:91:cd:5f:0f:a1:9f:
         9d:d6:a7:f5:a6:1a:bb:02:0f:d0:22:48:3f:68:df:70:b3:95:
         7c:9b:e5:0b:16:12:fe:43:74:27:c0:3f:52:e4:b5:c0:2e:c1:
         93:cd:e0:4e:ae:ca:0f:e1:2a:17:4b:93:9f:51:97:66:1f:5c:
         25:33:13:fd:60:b2:8f:e5:53:5f:00:76:04:89:4d:d4:52:d3:
         93:ff:2a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----