This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8b5570-b635-3c7f-9cc4-4b49b5e0f6c6.roa
File:                     bf8b5570-b635-3c7f-9cc4-4b49b5e0f6c6.roa (raw, json)
Hash identifier:          HpZ3PAt2fQUtThkxMkRuaCLT6tBYogxOd2AJP7t1wRA=
Subject key identifier:   AF:59:FA:81:29:A8:E1:C3:D2:6C:36:7E:8D:73:83:13:47:33:9E:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB89293F8C919951ADEBE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8b5570-b635-3c7f-9cc4-4b49b5e0f6c6.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     394063
IP address blocks:        50.233.214.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:92:93:f8:c9:19:95:1a:de:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=1dccca1c-8b27-4b6f-b7b4-db7b57e61534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fb:d0:1f:3c:3a:82:3b:83:4e:34:7e:89:25:
                    ad:e8:d1:51:f9:93:77:5b:a7:74:b5:e3:ec:f2:1f:
                    34:44:1b:5f:b0:ae:74:9e:6c:25:e4:8e:03:e1:7f:
                    7e:04:41:88:d3:81:50:ef:d8:74:0d:40:80:b8:96:
                    b5:d3:12:d4:ef:6b:13:b5:24:05:52:c4:da:04:17:
                    6f:fa:b5:34:72:9a:79:43:31:15:62:2d:72:be:48:
                    b2:54:90:0e:04:9d:71:50:89:c4:36:f9:a2:28:1c:
                    0f:75:0a:e2:a2:1d:e4:28:57:f0:17:c6:83:c6:66:
                    d3:7c:49:03:b6:df:4e:e1:c3:c6:8c:dc:b7:9e:33:
                    61:32:68:ff:1a:68:1f:39:a6:2d:3b:0d:63:09:27:
                    7e:8e:22:db:44:40:f8:12:2c:4c:7b:6e:a1:88:09:
                    7d:a7:81:64:05:13:53:41:ad:f5:9e:54:ef:29:74:
                    e7:0e:75:78:af:a3:49:5b:4a:b0:4b:cf:5d:5d:83:
                    38:a2:47:07:2d:76:f8:d2:54:c0:5c:91:c5:d7:af:
                    f7:20:c9:ba:3b:53:51:39:b4:4d:ac:82:e3:12:18:
                    54:34:70:2c:0e:92:19:56:e8:64:ea:33:f4:f5:f6:
                    72:c7:99:ad:48:ec:ed:39:57:ec:a4:47:a9:16:a3:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:59:FA:81:29:A8:E1:C3:D2:6C:36:7E:8D:73:83:13:47:33:9E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8b5570-b635-3c7f-9cc4-4b49b5e0f6c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.233.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8e:7e:02:0d:d4:50:08:ab:2c:af:db:55:5c:b6:de:38:6a:
         c7:1d:5d:88:66:83:a0:c9:80:11:51:00:b4:5d:05:df:27:e2:
         60:e2:7c:96:d2:1d:2a:06:f3:eb:58:fb:e4:84:ec:f2:31:bf:
         e8:b3:3d:9a:33:92:29:dd:2e:ce:df:8b:6f:b0:16:13:fb:0f:
         1c:e4:68:d9:e9:63:45:63:a1:c1:56:52:88:2f:46:c0:f8:63:
         29:ff:e8:68:0a:67:46:9b:09:03:a0:0d:67:9b:a5:13:d5:da:
         c4:2e:e3:8c:84:9c:5a:ab:0f:fa:3f:bd:3f:fc:d9:4b:45:c8:
         ee:43:35:24:c2:9f:b7:68:13:ab:2a:7c:d3:f4:ea:46:7d:c5:
         a4:94:4d:69:ac:4b:71:b7:77:c9:bf:0f:f1:ae:e6:1b:1f:c3:
         7c:1e:01:3f:0b:7c:b1:bf:fe:01:43:91:c5:39:e8:93:be:2c:
         97:fc:42:aa:8c:62:e2:a6:93:e7:23:d3:4c:5a:7d:81:82:b0:
         bf:36:53:db:73:37:78:28:92:eb:15:11:5b:a1:7b:dc:66:5f:
         d6:fe:47:19:5c:bc:ee:92:6e:83:6e:ca:a1:8e:2f:34:ff:3c:
         97:9f:36:70:f0:2c:e4:eb:3c:b6:a7:82:8d:4b:74:82:72:fa:
         aa:37:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:12:19 2025 by rpki-client