This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa
File:                     037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa (raw, json)
Hash identifier:          rWn7IDj78+G9BEM9dH8txxGUvr6ZM4fzeIbToVMXwjU=
Subject key identifier:   4E:FD:56:EE:E6:80:CA:15:67:E4:17:D1:DA:A6:43:17:83:8B:89:7F
Certificate issuer:       /CN=eb327032-4e1e-4c38-9cae-206da2d15d25
Certificate serial:       010D0C9F4328584A7E7B5F187CBFDC2E92221B80
Authority key identifier: CF:71:0A:CB:39:5D:5D:43:6A:A6:C2:CB:D3:CC:CB:CD:28:B5:44:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     8075
IP address blocks:        157.207.28.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5f:18:7c:bf:dc:2e:92:22:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb327032-4e1e-4c38-9cae-206da2d15d25
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=c59c3f35-c2ab-4ccb-b431-d591ab1808d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:c1:54:cc:13:44:d7:36:99:ce:7e:2f:f3:
                    b1:45:2c:b2:84:42:99:39:45:81:16:fc:6a:c4:31:
                    f7:d8:2d:2d:d3:cd:89:3e:f1:54:82:f8:5c:3a:61:
                    db:0a:43:07:c5:45:ea:c8:31:c2:b4:5b:9c:33:87:
                    67:9f:1d:10:63:c8:df:40:09:81:fa:55:ab:bd:c0:
                    a6:6a:1f:24:36:f6:ef:8e:d0:d6:87:18:e3:0b:8e:
                    e5:3d:bb:cb:06:f5:6c:f5:8b:08:2b:bd:83:78:7f:
                    6c:e5:8e:03:da:0d:f8:05:25:06:bd:ca:83:0e:42:
                    48:5c:e7:70:b9:ce:b6:b1:45:7a:54:16:b2:9d:89:
                    30:3e:2c:aa:de:64:81:36:6c:42:e6:95:3f:e7:7b:
                    27:a2:6f:b7:6b:70:05:9e:d2:b9:fd:5a:99:a3:95:
                    b9:fd:31:1c:ab:a6:06:d8:79:0b:2f:d9:a6:60:46:
                    c5:7a:3b:9a:2d:51:73:f0:eb:15:b3:70:fb:88:42:
                    c4:b9:f3:90:8b:58:1a:2e:9a:67:78:cc:bc:20:74:
                    8e:35:54:7b:40:be:0d:22:36:56:77:dc:79:58:cc:
                    e3:9b:10:76:a8:7a:ff:4e:47:af:65:ba:49:cf:86:
                    23:30:27:a8:5c:c2:a9:75:a6:67:dc:f9:3d:f7:7e:
                    d7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FD:56:EE:E6:80:CA:15:67:E4:17:D1:DA:A6:43:17:83:8B:89:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/037f5d75-4e9a-3267-8a03-a34034aa0bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.crl

            X509v3 Authority Key Identifier:
                keyid:CF:71:0A:CB:39:5D:5D:43:6A:A6:C2:CB:D3:CC:CB:CD:28:B5:44:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.207.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6e:7a:c2:7a:17:ab:4d:e5:bc:1e:ec:4e:be:8a:f8:b0:43:
         0c:99:ae:f9:45:68:ef:ff:29:9e:95:cc:c2:79:e4:a1:ad:e1:
         cf:ba:6b:6a:5a:2a:13:31:c9:cd:56:ee:e5:a3:e0:be:17:f5:
         0c:06:a8:98:f0:a0:14:71:4c:e9:f6:e1:2a:66:93:e0:2e:fb:
         2e:05:63:70:66:bf:e6:45:80:2e:4e:15:b4:c1:0a:10:49:5d:
         c2:11:84:53:fa:ef:00:58:88:60:ab:23:a2:11:f0:6e:49:53:
         2a:e7:d5:2b:d1:ab:dd:23:df:2b:57:00:c9:95:2f:14:17:22:
         0f:cf:8e:82:8d:df:fc:84:4b:ab:77:ca:34:de:ca:af:ec:c2:
         c5:54:ec:5f:0d:95:3c:8d:bd:18:d0:d2:6b:ab:10:c7:be:c8:
         48:56:45:04:16:39:90:6c:84:29:5a:90:a3:b3:c4:e5:3d:63:
         21:5c:dd:08:c5:3b:df:bb:1e:38:c2:17:7f:d1:91:82:62:9a:
         0e:39:d1:b6:74:d5:4a:f6:60:0f:da:39:70:bf:40:f3:22:45:
         03:8c:a9:3b:8b:91:5f:3b:66:7b:3b:f8:09:ae:38:62:15:f9:
         82:76:e6:73:1d:15:d0:ba:92:5e:06:d6:b7:d3:04:81:a6:da:
         98:f8:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----