This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15113e0d-d753-3509-b18d-234e786da46d.roa
File:                     15113e0d-d753-3509-b18d-234e786da46d.roa (raw, json)
Hash identifier:          ZdYhoU9+MGp9ZAFZWhQnFo7RYVLh32nZn4Uqb8/phXk=
Subject key identifier:   7B:03:3B:A2:A4:78:E8:89:D7:11:38:BA:99:63:92:28:C8:F1:96:C6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DE396921FB314D1CCAC500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15113e0d-d753-3509-b18d-234e786da46d.roa
Signing time:             Thu 01 May 2025 16:22:53 +0000
ROA not before:           Thu 01 May 2025 16:22:53 +0000
ROA not after:            Wed 30 Jul 2025 16:22:53 +0000
asID:                     22773
IP address blocks:        68.231.19.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:de:39:69:21:fb:31:4d:1c:ca:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:22:53 2025 GMT
            Not After : Jul 30 16:22:53 2025 GMT
        Subject: CN=2738b3d5-a381-4653-aa58-e2035efe2e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:1e:6f:c9:c6:f9:be:47:57:c2:c2:15:42:
                    52:a0:5f:8a:b9:b4:80:7b:18:02:f1:20:ea:3f:85:
                    9e:98:2c:bb:46:76:de:a0:58:52:9d:41:54:70:f0:
                    6e:55:0a:5d:cb:04:1a:2c:07:30:ef:33:60:d1:39:
                    c6:dc:de:b7:99:91:82:c9:25:d2:3f:ee:2d:a9:43:
                    b3:89:c7:39:5d:4c:53:75:bf:92:c9:20:35:f0:ab:
                    3d:8e:d4:00:c9:4a:5c:1a:fd:83:11:78:d6:43:e4:
                    9f:1b:9e:47:4f:95:4a:89:a1:a2:0e:95:4e:8f:b6:
                    4f:d7:2d:d0:c9:ce:c5:87:d8:b9:d9:86:c8:a2:17:
                    db:f6:01:f2:6a:6b:56:8c:6c:37:b9:00:c8:54:bc:
                    b6:73:0a:9c:6a:5c:18:34:f5:e3:84:75:15:57:e8:
                    ab:52:9a:14:5b:77:4c:e2:54:9b:a4:3d:67:c4:0a:
                    78:23:e0:03:ce:e0:ad:fe:1b:b6:1d:b9:cb:e0:17:
                    8f:9f:ec:8b:f8:4d:87:b7:85:a7:68:34:0b:5c:a6:
                    19:1d:62:ef:da:62:61:46:42:35:f3:8a:c9:30:a9:
                    5c:d1:4c:03:16:b4:bb:b4:25:cd:d1:0a:ee:bc:31:
                    f3:4f:b0:c4:d9:8f:8d:eb:fc:a5:93:a5:56:77:bc:
                    f9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:03:3B:A2:A4:78:E8:89:D7:11:38:BA:99:63:92:28:C8:F1:96:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15113e0d-d753-3509-b18d-234e786da46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a2:73:2e:c3:f6:3e:30:68:ea:c0:b3:06:e7:6f:99:5c:8c:
         11:3c:74:a1:bb:d3:c4:a8:53:b8:0e:14:d3:90:11:a0:05:7c:
         e1:32:fd:e2:de:f9:ec:a2:ed:68:aa:c7:21:92:b8:e5:06:36:
         60:6b:aa:f5:69:44:9e:36:22:54:d7:80:c3:a2:cc:f1:42:2d:
         4b:69:51:cd:e5:de:7a:31:6c:c5:23:5e:8d:f6:1a:69:5f:58:
         5b:24:12:ab:69:d5:c1:bf:b4:c9:1f:49:ad:84:fb:e1:c8:93:
         bb:04:e6:33:55:e1:b4:de:0b:6a:7c:b9:1b:42:43:1e:a5:69:
         b9:c3:aa:55:29:c4:2d:6d:60:a8:fe:3e:02:72:11:b0:3f:31:
         1e:dc:ba:fc:a2:f8:94:1f:c4:4f:28:7f:bc:3f:26:e3:04:55:
         79:22:77:2d:c6:80:81:aa:60:ef:c0:f9:24:8e:ea:ea:3c:31:
         3c:cd:47:e6:fb:93:3e:7f:91:fb:c9:ef:ac:75:1a:bf:13:e4:
         97:39:e9:3b:35:10:87:d3:48:3c:18:8f:ae:a2:7a:a7:e3:19:
         94:c7:e0:d9:db:d1:58:6b:13:0b:3d:e8:a9:67:bc:a9:3c:36:
         0e:7a:8f:01:e1:f0:24:5a:07:ab:9a:bc:4e:a8:e9:75:8b:0f:
         bb:86:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:15:27 2025 by rpki-client