This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52f2c378-a21f-304a-9de3-292bd443202d.roa
File:                     52f2c378-a21f-304a-9de3-292bd443202d.roa (raw, json)
Hash identifier:          L3JImhNgAS9Y/FeGgEhXvIx83KvbiU0EO6N+KglQvw4=
Subject key identifier:   D8:84:2C:6F:6A:99:99:DC:90:86:44:D4:1D:61:34:C8:15:F2:9D:9D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9636873433004C2AAA919680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52f2c378-a21f-304a-9de3-292bd443202d.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     401152
IP address blocks:        23.26.8.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:87:34:33:00:4c:2a:aa:91:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=9ad88aa9-cdc0-41a3-8a06-a2b2d8776f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b1:66:56:cd:2e:8e:9a:a1:7d:3a:18:f2:c7:
                    ca:62:c0:93:ca:44:55:c0:ae:7e:8c:09:ec:ee:ea:
                    0a:1a:56:0a:26:f0:fe:ad:b6:32:5e:a8:e1:82:c1:
                    f9:ea:32:6f:b0:23:26:1e:f1:cf:3f:dd:0c:54:0a:
                    2a:e0:af:2c:4a:ab:95:83:74:bc:37:af:28:4e:6f:
                    de:e9:02:03:7c:2a:3b:90:1a:a3:82:31:71:c5:87:
                    16:05:b8:44:4c:c6:04:28:08:16:c1:79:06:32:e0:
                    4e:b1:aa:b6:dd:2e:49:a6:93:f9:d9:53:ab:1e:a5:
                    71:5c:fc:c8:40:e7:a3:ef:a1:25:26:7a:c8:77:03:
                    47:ac:f1:02:dc:60:37:dc:fb:1e:5e:35:d3:14:02:
                    33:a7:d2:b6:42:82:43:3c:81:37:20:91:30:06:6a:
                    4e:93:44:72:a2:98:0a:ff:44:8f:ba:2b:c2:f5:29:
                    4e:71:41:b5:f5:40:06:cb:80:cc:41:e6:bb:7f:85:
                    ba:c2:21:65:d2:bd:47:80:59:cf:10:0b:c4:dc:ab:
                    9c:2e:fc:12:e6:bd:2b:d1:24:9d:38:b4:1e:ca:a2:
                    ba:5d:95:4f:30:cb:21:d1:5b:e8:7f:32:03:08:7b:
                    c9:99:64:f1:b3:9e:e3:b7:d1:78:90:85:57:8c:02:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:84:2C:6F:6A:99:99:DC:90:86:44:D4:1D:61:34:C8:15:F2:9D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52f2c378-a21f-304a-9de3-292bd443202d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:23:c2:8c:46:98:d4:66:fa:ff:40:bb:f0:0e:61:a5:32:36:
         6b:17:51:47:98:bb:2e:5f:b2:c2:93:9a:b8:3b:1c:31:eb:ef:
         ea:b7:6e:39:30:2d:9c:26:ae:bd:97:c1:07:e9:33:23:d2:10:
         fc:55:0f:01:cf:47:cf:58:ba:64:4e:5c:1e:b0:d9:c8:98:92:
         05:fd:1b:5a:b9:c0:fe:01:26:cd:f6:61:1e:74:f9:a6:47:5b:
         84:c5:47:b7:10:12:b6:07:9e:d6:7f:54:99:12:0c:47:04:0b:
         85:4d:ec:d4:5b:a6:6f:94:1b:8a:42:9b:fe:8d:19:70:d1:ce:
         8c:d5:f5:8b:9b:e1:07:65:fb:0e:6e:7b:70:f4:fa:54:9d:ac:
         39:82:92:2d:a3:5c:ef:85:c6:f5:b9:c9:d4:38:dc:d7:b7:8a:
         3c:92:e0:a2:41:88:5a:a8:23:6e:10:90:97:95:c1:7e:de:1a:
         1f:6f:c9:2d:de:04:56:8c:79:2b:63:97:5b:df:d3:a4:c5:a5:
         d3:52:3d:5a:71:a8:7f:f1:33:70:dc:2d:cd:12:84:79:d9:c8:
         9b:d0:b4:83:a1:94:d0:37:d1:b1:c1:82:ed:12:f2:f0:2c:d0:
         ac:92:f3:8b:c6:33:0a:3a:f9:2d:07:9d:f0:14:cb:50:b9:e7:
         e3:1c:5c:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNoc0MwBMKqqRloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
OWFkODhhYTktY2RjMC00MWEzLThhMDYtYTJiMmQ4Nzc2ZjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77FmVs0ujpqhfToY8sfKYsCTykRVwK5+jAns
7uoKGlYKJvD+rbYyXqjhgsH56jJvsCMmHvHPP90MVAoq4K8sSquVg3S8N68oTm/e
6QIDfCo7kBqjgjFxxYcWBbhETMYEKAgWwXkGMuBOsaq23S5JppP52VOrHqVxXPzI
QOej76ElJnrIdwNHrPEC3GA33PseXjXTFAIzp9K2QoJDPIE3IJEwBmpOk0RyopgK
/0SPuivC9SlOcUG19UAGy4DMQea7f4W6wiFl0r1HgFnPEAvE3KucLvwS5r0r0SSd
OLQeyqK6XZVPMMsh0VvofzIDCHvJmWTxs57jt9F4kIVXjAKTtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNiELG9qmZnckIZE1B1hNMgV8p2dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTJmMmMzNzgtYTIxZi0z
MDRhLTlkZTMtMjkyYmQ0NDMyMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxoIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUjwoxGmNRm+v9Au/AOYaUyNmsXUUeYuy5fssKTmrg7HDHr7+q3bjkw
LZwmrr2XwQfpMyPSEPxVDwHPR89YumROXB6w2ciYkgX9G1q5wP4BJs32YR50+aZH
W4TFR7cQErYHntZ/VJkSDEcEC4VN7NRbpm+UG4pCm/6NGXDRzozV9Yub4Qdl+w5u
e3D0+lSdrDmCki2jXO+FxvW5ydQ43Ne3ijyS4KJBiFqoI24QkJeVwX7eGh9vyS3e
BFaMeStjl1vf06TFpdNSPVpxqH/xM3DcLc0ShHnZyJvQtIOhlNA30bHBgu0S8vAs
0KyS84vGMwo6+S0HnfAUy1C55+McXPA=
-----END CERTIFICATE-----