This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2da3a2e9-2d0e-3b93-a7e7-1597ec3188a9.roa
File:                     2da3a2e9-2d0e-3b93-a7e7-1597ec3188a9.roa (raw, json)
Hash identifier:          q9+eeMo9ugjG58rCCh84BiUbrwnmzX1n/PsUTgF7v48=
Subject key identifier:   35:87:64:55:4E:31:6D:9C:7C:05:07:A5:50:AB:F7:B4:DC:98:5C:92
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E3DBD2B7E73F76C898F280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2da3a2e9-2d0e-3b93-a7e7-1597ec3188a9.roa
Signing time:             Thu 01 May 2025 16:34:15 +0000
ROA not before:           Thu 01 May 2025 16:34:15 +0000
ROA not after:            Wed 30 Jul 2025 16:34:15 +0000
asID:                     22773
IP address blocks:        2600:8800:b6fa::/47 maxlen: 47
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e3:db:d2:b7:e7:3f:76:c8:98:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:34:15 2025 GMT
            Not After : Jul 30 16:34:15 2025 GMT
        Subject: CN=7df357b5-d00d-4345-b530-076866b533de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:e1:02:2b:e7:ad:cf:b5:fd:be:9d:66:23:
                    4b:de:00:f2:d4:14:85:d6:76:97:b8:d7:2b:69:8b:
                    70:aa:26:80:cc:56:e5:fd:03:a2:14:ea:fd:61:ed:
                    23:7b:e7:fb:69:0f:39:40:4c:c1:6a:d8:2d:f7:9f:
                    61:aa:e2:e9:50:5b:09:83:18:6c:7b:1b:9b:af:c5:
                    25:e4:60:a5:fb:19:be:7e:9f:08:ce:74:b8:ee:e7:
                    d3:a3:d8:ec:43:ac:75:20:22:da:26:9c:0b:df:23:
                    3f:9e:4f:3a:4f:7e:50:3b:a8:45:2d:f9:c4:1f:3d:
                    7b:be:12:f0:cc:46:79:1b:c9:c4:74:b3:a6:27:9f:
                    dc:00:46:50:ce:b4:0c:cf:ec:eb:e8:09:41:35:f3:
                    4e:bc:35:ac:be:78:b9:46:7d:45:43:15:02:2b:a1:
                    4d:f1:54:8e:df:4b:d1:4b:8e:5c:bb:65:0b:b3:c7:
                    d2:f0:09:c5:53:63:6b:90:d5:b8:b0:f9:96:90:ef:
                    11:b5:d5:18:c9:5f:d8:4e:3b:41:20:90:1b:90:26:
                    67:3d:04:ee:06:ef:ae:c5:2a:72:70:a3:31:20:b4:
                    69:e4:c0:81:96:5c:ad:7f:67:bc:bf:51:3b:db:47:
                    2c:27:e3:b4:7d:13:1e:f4:2e:a7:8c:1f:91:71:a6:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:87:64:55:4E:31:6D:9C:7C:05:07:A5:50:AB:F7:B4:DC:98:5C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2da3a2e9-2d0e-3b93-a7e7-1597ec3188a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:b6fa::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f0:2a:18:50:86:f0:a3:9e:02:5d:88:19:06:93:fc:4f:b2:
         5f:38:e7:92:b5:30:2d:32:6c:65:5e:fc:53:a1:71:71:bc:cd:
         47:af:18:36:e1:5c:0f:1f:cf:5c:5a:77:82:b9:05:4f:2f:81:
         31:25:46:66:e8:75:05:49:95:c6:24:1d:85:05:69:96:ce:1c:
         d9:0e:66:e7:2d:36:3d:79:34:d9:d3:12:85:ed:31:e7:ab:e3:
         00:43:3d:ac:d7:9a:9b:59:b0:06:a3:96:3f:ed:d5:2f:b7:74:
         46:c5:67:1a:c6:4f:6f:19:e7:5f:0a:b1:71:51:59:f0:5c:de:
         ed:54:fa:8c:0f:f4:b2:74:0c:24:4a:65:dc:e5:76:5d:2f:7d:
         9f:da:17:c3:cc:bc:3c:81:95:10:bc:f9:c0:fe:dc:16:f1:63:
         e4:80:62:f4:00:61:eb:46:d1:d8:95:68:79:ad:fb:5b:78:d1:
         80:a9:86:20:f9:80:a2:38:56:3c:7b:8d:8c:b7:65:2f:54:0e:
         dc:9b:30:c5:ba:81:09:36:1f:51:93:cf:37:02:fd:cb:d1:74:
         50:66:93:94:91:1d:0d:6c:12:8b:69:38:0d:c4:15:fc:68:25:
         a4:c2:c2:e7:80:08:b3:f7:63:76:a4:a8:17:72:f9:52:d5:c0:
         ac:0c:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----