This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0db2c57e-b168-3d70-8b94-e9ac5dd9d530.roa
File:                     0db2c57e-b168-3d70-8b94-e9ac5dd9d530.roa (raw, json)
Hash identifier:          Zj1wKqK0EbC/nWGGSeIfdwiyqpvX9O7ybCoLxbqZaBE=
Subject key identifier:   BD:7D:C4:43:B2:8B:B8:66:5D:F5:DE:6F:07:A3:EA:0E:12:71:F3:AD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A8B0B6D860B436A37F28DFE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0db2c57e-b168-3d70-8b94-e9ac5dd9d530.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     401152
IP address blocks:        142.111.17.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:6d:86:0b:43:6a:37:f2:8d:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=1f4d59d5-645e-45ad-b993-c2a9f5d53215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:07:64:d0:2d:a2:1f:49:d0:9b:91:85:19:
                    60:df:0a:97:70:fb:d3:37:47:8d:0b:76:57:c5:eb:
                    7c:16:ec:6c:c2:6d:08:23:b3:00:89:91:a8:71:31:
                    49:07:9d:a2:1f:8b:69:e5:77:f3:d2:81:af:88:52:
                    41:76:46:82:8e:0c:4e:11:15:4f:6f:48:5d:d7:22:
                    c9:30:84:f7:8e:ab:b6:62:db:37:63:30:dd:db:3d:
                    26:40:77:fe:8c:ea:6b:b0:f4:f6:38:52:a4:b1:b2:
                    6d:5f:84:a5:8c:1f:d8:f6:56:9a:bb:49:c4:a2:a0:
                    89:2d:07:74:a6:73:ce:60:28:bc:f4:fb:94:79:f7:
                    e9:e4:78:f9:8b:0c:db:13:0c:00:15:0d:21:d2:96:
                    7d:86:84:22:2d:91:e5:bc:ea:c6:31:05:af:fc:33:
                    88:ce:b6:1e:6c:f4:63:6b:62:0f:09:a9:a2:f1:f7:
                    b8:27:34:e8:d9:5e:57:99:bd:53:fd:e7:b6:f1:da:
                    f4:a8:3f:82:ab:d5:a5:0e:69:a8:88:cd:75:9d:5b:
                    40:0e:07:94:2a:80:53:be:7a:79:1b:44:0e:53:70:
                    0d:53:38:8d:30:64:1f:f4:b8:c6:2a:28:02:09:96:
                    fb:6a:bc:6a:0e:dd:f6:cd:74:c8:d9:88:5c:cd:c8:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7D:C4:43:B2:8B:B8:66:5D:F5:DE:6F:07:A3:EA:0E:12:71:F3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0db2c57e-b168-3d70-8b94-e9ac5dd9d530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:dc:c3:26:08:3d:e9:f0:17:d1:fa:5d:01:0a:45:5a:ba:
         03:56:60:92:63:20:dd:e6:66:77:f9:56:a4:23:5c:d2:14:45:
         17:6c:bd:ff:d6:44:5f:a3:f1:e4:63:73:80:ec:b4:ca:ea:b1:
         22:f8:0b:ae:8c:21:0a:8a:43:a5:74:1b:7d:2e:ca:0d:93:7d:
         75:bd:ec:9d:47:7f:ea:08:b5:0e:c2:64:ad:d1:df:31:88:5a:
         35:5e:2a:94:ae:37:71:ee:83:8e:84:c9:ca:58:a8:8b:48:ac:
         5a:98:a6:11:ef:47:19:0a:bf:98:74:40:2c:79:9e:95:11:83:
         53:1a:88:cd:61:69:0a:93:6c:d9:ef:c6:5e:2d:70:57:8c:e0:
         6b:aa:3b:55:8d:88:1d:8e:24:4b:9e:7d:66:03:c6:d5:32:35:
         ac:7d:38:13:65:ca:69:c8:e4:66:d4:ab:4a:d5:6a:58:c2:6e:
         44:a7:e2:2b:6f:88:cb:7b:1a:bb:5d:79:b1:ce:38:46:7c:53:
         9c:5e:4d:5b:9c:92:a8:d1:09:61:7e:48:74:ba:b4:03:73:af:
         7d:a1:ec:ed:58:43:f4:08:f8:23:af:ce:c0:12:50:40:1f:dd:
         28:10:81:6a:31:40:00:f5:d8:a9:bb:ff:8c:c6:87:31:18:f5:
         b3:cf:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:54:23 2025 by rpki-client