This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ae3daa0-3e96-3ddc-a908-2d776d5dd875.roa
File:                     8ae3daa0-3e96-3ddc-a908-2d776d5dd875.roa (raw, json)
Hash identifier:          KBx7qlMoh8XFftby0w2GN25j0SgQaUXCtdDE6XUvURk=
Subject key identifier:   D0:A2:4B:76:FE:CD:BE:BA:97:ED:FD:20:10:C0:FD:97:17:27:4A:ED
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DB6FE03462DD828BDEB724
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ae3daa0-3e96-3ddc-a908-2d776d5dd875.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:d200::/41 maxlen: 41
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:6f:e0:34:62:dd:82:8b:de:b7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=a8e13e96-019c-4995-9259-2ca5bd1e80c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:e9:db:56:20:1b:eb:66:10:fb:92:e7:88:
                    14:ad:0b:be:53:9d:56:75:b0:b7:1b:ff:ad:50:bb:
                    25:0f:0d:7b:2b:f9:61:46:4d:8c:e4:78:ff:18:61:
                    18:f9:3e:6a:6e:1d:b8:53:08:b4:70:2e:73:ed:4b:
                    2f:86:fd:7f:ac:a2:5a:85:03:71:27:55:7e:de:0a:
                    0c:5a:d1:b0:09:b9:83:06:8c:15:18:a4:c6:f7:5c:
                    6e:6d:c5:ed:be:6d:40:da:f0:a2:29:dc:02:5e:4f:
                    23:08:f9:ec:ea:23:c9:d6:22:c0:ed:64:0f:f7:cd:
                    20:a9:e0:a4:78:11:46:95:8c:88:76:b6:46:e9:f6:
                    9e:b7:76:e4:ba:4a:55:69:68:5f:1c:48:77:7b:c5:
                    3f:ca:ba:ab:37:46:d0:a4:03:92:73:b0:56:8d:c4:
                    b8:4a:a0:10:27:c4:95:66:8b:9a:68:33:23:b6:53:
                    f0:9b:1b:9d:78:f0:ec:be:50:d5:2d:9e:57:84:91:
                    f4:43:5a:ff:61:5d:11:ba:32:1e:37:c0:ce:f4:31:
                    2a:ef:e5:fd:b3:9d:3e:41:5c:2c:38:46:2b:17:d8:
                    1d:71:81:bd:ac:9c:06:14:86:4f:1c:75:48:bd:8b:
                    e6:74:51:43:dd:c8:cf:38:db:3e:c3:cc:a2:97:ef:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:4B:76:FE:CD:BE:BA:97:ED:FD:20:10:C0:FD:97:17:27:4A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ae3daa0-3e96-3ddc-a908-2d776d5dd875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0f:eb:db:98:ef:c1:a8:36:23:d5:ae:d9:96:5d:ae:32:fc:
         6d:fe:92:f0:dc:7a:47:5c:e7:3d:1e:75:09:7b:c2:c4:51:7e:
         df:ba:c3:83:03:62:b7:40:26:e0:a0:85:c7:70:e9:e9:cf:13:
         2a:fb:0d:cb:79:9e:0b:68:1e:d9:22:1f:fa:9f:b6:fc:a6:b1:
         7d:4b:80:60:23:6e:cf:fe:6e:71:c4:3b:dd:05:ab:5d:17:30:
         b9:f5:dd:83:1a:b1:45:52:36:57:b9:a4:e4:51:a7:39:cb:04:
         eb:c8:c5:4b:7e:af:50:e7:73:94:6a:56:a6:26:4b:ea:cd:58:
         3d:1e:9e:a3:f1:51:97:2f:8e:84:9b:04:cc:0c:5a:0d:6a:76:
         d1:c5:e7:06:b0:1e:3a:f8:4a:3b:65:01:5e:2d:96:84:dc:0c:
         de:04:21:f0:6f:40:94:93:a3:cd:06:de:de:30:2f:28:ec:96:
         93:df:90:d5:61:7d:b2:27:20:de:d4:cd:1d:7e:13:37:66:44:
         46:d4:c6:fc:c7:d1:6b:d7:28:a0:05:57:bc:52:f4:03:1b:6e:
         bf:10:0a:90:a5:29:ce:60:57:20:e0:2f:d4:ba:9a:7f:50:ba:
         ee:1e:14:cc:95:06:9a:68:cc:b9:d2:fd:fd:19:8b:be:f4:4e:
         6d:52:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----