This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/3df5b18c-2ff0-30bd-a333-66c4ce85cdec.roa
File:                     3df5b18c-2ff0-30bd-a333-66c4ce85cdec.roa (raw, json)
Hash identifier:          /evRwsB3Y1YCW7JIxxXHHbLvG+vJtTwu60LF5HD5JBI=
Subject key identifier:   F6:87:C3:91:53:0F:15:7E:EA:5A:37:F0:35:46:DE:42:20:D9:6D:8B
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584B153C20B3A4EE482FE4160AA0
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/3df5b18c-2ff0-30bd-a333-66c4ce85cdec.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     32282
IP address blocks:        216.185.40.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:20:b3:a4:ee:48:2f:e4:16:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=a4f269fe-03f1-4521-ad8d-3b07c0df1844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:93:22:a3:4e:6d:b7:04:7a:e1:30:fa:d7:91:
                    a0:01:59:ae:54:22:16:cf:9d:8e:d9:dc:fd:4a:87:
                    bd:4f:21:41:25:54:de:06:02:d0:8d:4f:5d:dc:80:
                    a3:54:3e:1d:41:d2:47:7c:3c:d4:95:32:3d:1b:a0:
                    65:db:45:62:a1:c3:8e:90:52:c8:88:1d:6b:3e:05:
                    b7:ae:77:f6:a3:1c:04:d4:d6:a9:20:2c:ff:21:9e:
                    a6:6b:5a:bd:4e:1d:3a:18:81:de:78:7a:dd:73:ce:
                    3c:b6:6b:fe:e5:84:62:10:c0:ec:de:61:7e:00:91:
                    54:64:ac:34:e0:bf:a6:f3:b7:8b:34:2a:91:b2:bd:
                    90:59:83:a5:17:ee:59:d0:89:1e:bf:c7:04:4c:df:
                    df:a9:bd:40:54:bf:71:12:6d:91:b9:9c:aa:9a:e0:
                    9d:46:ef:31:8d:73:ae:6e:ce:93:7e:67:79:18:f2:
                    1e:3e:13:9e:4c:29:b4:34:eb:3c:66:29:f1:fb:c1:
                    69:f3:e7:79:29:c3:75:58:40:c0:5a:b5:96:f0:0a:
                    d4:e0:7b:00:3e:64:1a:93:24:16:5d:ea:16:75:b3:
                    14:70:18:8f:55:7b:55:d7:8f:06:d3:6e:f8:ab:b5:
                    33:f4:84:02:47:d4:c4:a3:90:90:ba:cc:26:5a:d4:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:87:C3:91:53:0F:15:7E:EA:5A:37:F0:35:46:DE:42:20:D9:6D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/3df5b18c-2ff0-30bd-a333-66c4ce85cdec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:6a:97:c8:a0:09:e3:95:2e:57:02:e9:5b:2c:62:d4:5f:
         af:8e:3f:da:e9:15:fb:b8:85:20:11:3e:cc:91:ea:ec:f2:d7:
         50:d4:51:f0:48:9c:1b:58:59:13:36:52:d1:99:bd:fc:ab:44:
         86:69:de:7e:7a:57:27:4e:cd:f7:3d:16:9e:e6:be:b6:2b:67:
         64:a5:d1:89:d8:49:89:1d:58:7b:85:40:61:50:7c:67:dc:24:
         76:99:bf:da:ac:78:54:f0:66:e7:a4:83:88:7b:26:d2:8f:33:
         bf:de:f8:4e:6d:35:24:0f:b2:cc:c3:d4:a9:d6:69:1a:82:53:
         95:eb:72:9d:7d:67:16:a9:d2:fa:a7:a8:c9:d0:62:14:6d:d1:
         41:0b:6b:58:21:c4:27:d8:ed:e9:13:2b:07:6d:32:eb:9e:6c:
         7d:6b:4c:0f:1d:61:37:08:39:78:4b:dc:4f:1e:38:26:03:41:
         73:79:a2:62:02:6f:70:96:a5:dc:21:b2:01:07:e6:93:a1:9e:
         80:78:ef:09:27:15:94:55:fc:a6:74:07:1d:69:bc:4d:e9:ad:
         19:2c:a8:6d:02:51:2d:90:a9:14:7d:e9:bf:b8:05:54:f1:97:
         ba:a3:26:12:54:99:22:9a:c7:be:fd:08:0b:f9:19:a6:83:d0:
         3a:48:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:24:57 2025 by rpki-client