This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/94a369f3-92b4-303a-9bba-9ca428a75744.roa
File:                     94a369f3-92b4-303a-9bba-9ca428a75744.roa (raw, json)
Hash identifier:          9fw7/2itXyQpXbbSv0sQMwdBfoBFrvx4t594uSkaUqE=
Subject key identifier:   F8:A1:94:7E:5E:6A:25:F1:CE:80:F2:C2:C9:79:A9:5A:D1:61:F3:75
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F432858498CFF1460EBD540F248B52600
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/94a369f3-92b4-303a-9bba-9ca428a75744.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     19901
IP address blocks:        2607:6c40::/32 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:14:60:eb:d5:40:f2:48:b5:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=f1cba442-8193-4a0c-a123-9e6365f3f797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:b3:1a:bd:3c:b0:70:8e:3a:22:28:31:e2:
                    c9:41:a4:1b:96:0b:0f:e6:17:35:6a:05:3b:d8:fc:
                    52:a4:ea:21:9f:25:50:f4:d3:9f:9a:fc:c4:0e:b5:
                    02:eb:d8:a0:d8:d7:cf:f3:20:a2:ba:a1:c1:b4:4f:
                    37:68:3b:be:fa:77:9b:94:02:05:84:4f:48:12:9c:
                    ce:04:4d:00:5a:71:e3:74:05:a0:ca:ac:1c:87:cd:
                    7d:0a:7f:64:df:07:44:8a:cc:75:8c:5f:eb:d6:5a:
                    d7:66:f5:84:2d:bc:60:7b:0f:db:be:8d:d8:06:3e:
                    84:a2:99:92:1f:d2:06:27:c3:5e:83:3b:89:23:fd:
                    63:a2:5f:b9:70:7f:5d:28:9b:68:68:3c:5c:36:c6:
                    0e:4c:f5:46:8a:a5:e3:86:93:9a:bd:66:dc:64:cb:
                    f0:f3:43:03:47:9a:65:bc:fc:2d:17:5c:16:d5:af:
                    20:bd:67:31:f9:89:e0:44:dd:81:1f:1f:f7:a1:e6:
                    39:5f:5d:da:65:4c:18:ea:04:2c:a4:91:e5:93:a8:
                    48:df:32:4d:9d:60:85:06:7c:a3:6b:2c:41:2d:60:
                    bb:f1:c3:68:56:5d:f6:c7:7b:03:fd:89:c6:60:50:
                    34:d8:5e:4a:e4:45:83:e4:fc:42:97:ec:12:68:45:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A1:94:7E:5E:6A:25:F1:CE:80:F2:C2:C9:79:A9:5A:D1:61:F3:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/94a369f3-92b4-303a-9bba-9ca428a75744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f5:c4:ba:12:e3:50:20:4e:95:d9:7b:84:5e:81:04:1c:9b:
         91:eb:da:9c:9b:81:dc:4f:16:8e:5a:54:20:66:1d:59:d2:50:
         ee:c4:ff:71:9f:83:df:13:71:42:b8:90:fd:e0:37:e7:ad:49:
         08:ea:80:67:ef:d7:9b:5d:b0:f2:0f:ca:06:5a:ad:19:1e:c3:
         6c:ba:a8:2e:b7:7f:10:d5:48:36:05:f3:11:99:9c:ea:ef:ee:
         e2:36:7a:04:8f:69:fb:1b:3e:96:6a:47:82:0d:68:aa:da:30:
         d7:5a:27:d2:56:7b:7e:94:cf:e1:ba:fd:7a:29:c2:be:fe:ba:
         19:d6:c4:e9:69:77:f0:c2:f7:f8:e0:89:78:ba:33:24:38:bc:
         76:72:e0:39:b4:25:48:d3:c9:05:06:dc:3b:57:57:13:27:b7:
         19:d0:30:23:43:4d:35:81:a5:db:33:c9:0b:17:ff:e9:73:88:
         ca:a7:b0:5e:a2:3d:61:51:db:95:5b:12:75:3e:cd:68:3c:c7:
         d0:ad:ca:86:01:a8:48:bd:4f:f9:a4:1d:94:c0:81:36:85:6a:
         dc:79:d0:c8:4a:2c:0e:74:a0:8e:4d:d0:77:60:2e:9b:a4:1a:
         01:57:69:53:37:b9:dd:77:60:ee:b5:34:c0:59:a9:93:9d:79:
         c6:1b:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:37:38 2025 by rpki-client