This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a666b3-e3e3-30be-9961-e4095859fa19.roa
File:                     a0a666b3-e3e3-30be-9961-e4095859fa19.roa (raw, json)
Hash identifier:          lja3+gJ3heGiqWZTlUX03JGAcdAnEQIY0cOVlVl+fEM=
Subject key identifier:   41:36:62:FA:B1:8A:75:2F:71:6D:99:20:08:74:83:D9:D7:28:10:47
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A00684ED5D918664CBE900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a666b3-e3e3-30be-9961-e4095859fa19.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        34.171.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:06:84:ed:5d:91:86:64:cb:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0debfa97-6b72-48c5-994b-d497cc7377e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8c:35:71:ac:fb:60:54:b3:51:d3:79:2d:41:
                    e8:36:a5:83:13:f7:4f:98:3f:37:66:ac:d8:48:26:
                    93:a5:8a:34:ee:dc:54:84:b6:64:15:78:81:44:39:
                    07:39:96:bb:9c:10:69:60:62:8a:5b:8f:45:af:7a:
                    cd:52:3b:da:bd:34:86:aa:b6:b1:3c:52:16:89:61:
                    b3:ad:2f:e0:17:60:80:0a:7a:31:60:59:58:84:b7:
                    68:d4:12:9b:5e:cb:e4:90:9c:db:5f:f3:13:04:84:
                    af:bd:32:5c:6f:71:2e:a3:58:ba:b1:d9:2e:12:af:
                    96:44:80:14:55:01:e2:98:85:11:1f:4c:30:e6:08:
                    aa:a4:20:bf:66:29:ed:a5:e1:6d:2e:fa:24:5a:a5:
                    26:9d:c7:b7:81:ea:6c:58:5e:a7:34:89:5b:f8:97:
                    15:7b:a5:3c:e2:90:4a:11:d4:ec:68:6d:b3:57:cd:
                    b9:a6:f8:71:fa:d6:67:f2:e3:b5:d9:e4:db:8c:d3:
                    06:4a:b3:b9:f4:2b:6a:05:9f:36:41:7d:e0:69:35:
                    09:08:7b:be:d0:e7:d7:a4:a2:3a:75:8b:e4:9d:2b:
                    02:1f:4f:00:ea:f5:63:3f:28:46:9d:e2:5a:a7:13:
                    8a:4f:97:0a:68:3f:20:f1:9e:56:55:53:1b:b5:d7:
                    d9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:36:62:FA:B1:8A:75:2F:71:6D:99:20:08:74:83:D9:D7:28:10:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a666b3-e3e3-30be-9961-e4095859fa19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.171.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:fb:d6:e4:ea:6f:c1:4d:13:32:91:39:00:80:e0:f9:91:5e:
         53:df:47:db:00:33:b0:3c:e5:73:ce:37:d5:0a:26:99:0d:dc:
         43:04:dc:85:fd:b8:89:60:6e:ce:ef:ec:5e:20:56:ff:d3:5b:
         e8:10:a8:1e:64:5c:db:9f:47:c4:ca:f3:30:f5:0c:8d:1a:45:
         a1:9e:25:b7:ca:23:49:a8:3d:bb:c9:c4:9d:1f:fb:f0:fb:e1:
         ae:c3:ed:f3:85:02:0c:d3:43:77:b6:f6:09:a8:e4:35:93:01:
         01:87:f9:89:72:c6:ef:04:21:bf:6a:54:c1:4b:85:18:c0:c7:
         3a:ff:c4:9c:55:05:2f:38:89:89:63:aa:22:fc:90:23:bc:c3:
         e7:81:20:68:c4:3c:f1:69:85:ac:84:31:e7:67:52:c7:74:3e:
         d5:9c:b4:bf:fd:5e:5c:58:6c:45:3c:ef:ff:88:9d:5b:89:47:
         b9:f1:cb:19:c0:4b:c3:f5:81:4b:e2:ad:f0:da:f1:94:0c:5f:
         93:5d:68:7e:97:10:0a:0a:61:29:04:26:bf:77:95:49:4a:0e:
         29:e8:97:1f:be:78:87:c6:5f:2a:46:35:b0:98:d3:90:49:d0:
         8e:b2:09:f1:a2:88:43:13:c4:0e:22:2a:11:4d:1a:65:fb:38:
         11:38:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:59:15 2025 by rpki-client