This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b6984514-57d4-366f-a435-fe9f58c8e89b.roa
File:                     b6984514-57d4-366f-a435-fe9f58c8e89b.roa (raw, json)
Hash identifier:          MBQcO+ecm21BLSaSvpnWlHe3Yjv+hHM+TKrCBMOZnJ0=
Subject key identifier:   DD:6F:58:2B:AF:13:37:EC:40:B6:0A:C6:91:BB:B7:41:99:8D:A2:14
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584B0B76AA50A9A0CF34ED550540
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b6984514-57d4-366f-a435-fe9f58c8e89b.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     62240
IP address blocks:        72.9.229.0/24 maxlen: 24
                          72.9.233.0/24 maxlen: 24
                          72.9.255.0/24 maxlen: 24
                          75.127.103.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:aa:50:a9:a0:cf:34:ed:55:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=bdfa9796-72ac-450c-a859-dd618fcc326c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:92:a9:d8:78:31:12:18:61:99:a9:2c:fe:
                    f5:c1:7f:6e:8b:86:a7:7d:d9:65:65:03:bf:63:39:
                    1b:ef:35:13:42:3c:67:8c:8c:e2:ba:a4:e8:4d:60:
                    6d:2f:e4:f6:b1:0a:d7:b4:15:3c:a9:e4:87:22:19:
                    63:ae:8f:a3:24:84:94:e9:32:49:bc:7c:9b:a5:c5:
                    bc:47:c4:ae:bf:91:70:70:58:e4:1a:18:46:cf:70:
                    b7:fa:b4:2e:73:31:59:d5:a2:8e:6c:79:91:32:af:
                    0f:a4:c9:a9:a5:20:13:9a:39:e9:59:29:30:c0:94:
                    f3:d9:a9:ea:dd:ac:5d:f5:aa:9e:2d:09:17:fb:77:
                    93:f4:b1:7b:02:95:7b:3d:22:f0:fa:c8:c1:cc:9b:
                    3f:c3:55:b3:60:f0:f2:13:53:15:cd:8b:a5:a6:14:
                    bd:7d:54:3c:2b:a7:ba:32:c1:57:38:f4:18:85:f8:
                    ee:d2:46:1d:72:18:d9:a6:33:bc:09:6c:92:ae:7b:
                    64:8e:bf:0d:56:5e:19:ec:dc:91:b1:cf:12:63:28:
                    fc:08:82:9a:77:bb:8a:e0:ce:31:ec:e0:bf:d6:75:
                    d4:ad:c7:90:4b:fe:28:14:36:d2:8a:5e:fe:9a:e3:
                    3c:ad:bd:8b:8e:f5:d8:22:e5:61:54:cc:ae:9d:3c:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6F:58:2B:AF:13:37:EC:40:B6:0A:C6:91:BB:B7:41:99:8D:A2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b6984514-57d4-366f-a435-fe9f58c8e89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.229.0/24
                  72.9.233.0/24
                  72.9.255.0/24
                  75.127.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:8f:61:c0:da:5b:29:ed:1a:52:e6:ab:dc:c8:e4:98:07:
         de:37:9c:0e:e6:e0:cb:99:97:b1:a4:91:22:49:13:84:61:63:
         df:04:2c:77:06:b2:b9:d7:d7:71:2b:3a:78:01:89:3d:a1:ec:
         76:c0:65:9b:4b:bb:73:a4:30:75:9d:91:f9:b2:53:46:4a:52:
         a3:07:11:19:4e:22:7b:2c:c5:eb:93:c9:32:1c:d4:a3:64:af:
         39:fe:79:92:f4:5c:f2:04:3d:5a:b3:d3:4d:b8:fb:45:ef:a9:
         5e:e8:a8:ca:18:d1:fe:ac:f3:bc:f2:19:65:1d:d9:e0:db:41:
         ae:d2:1b:ed:55:72:00:9f:b4:f4:f2:90:c5:5b:fc:54:99:69:
         b0:96:93:23:51:34:49:07:ad:20:ed:b0:24:c8:52:8f:3c:e5:
         86:19:99:ee:c2:e3:65:f6:c2:8a:e7:7e:21:0d:1d:57:a6:62:
         f1:90:6b:fb:ab:92:7f:a6:4a:c9:7c:32:42:82:ad:34:60:a8:
         3c:e5:8d:f7:4d:72:d9:da:18:d4:bc:c1:a1:66:15:6d:82:d5:
         15:9b:f5:2b:94:72:61:c7:76:94:2f:6e:8d:e7:dc:41:5e:6f:
         8a:76:13:e4:8e:38:54:52:57:87:7b:4d:a5:75:2d:ff:95:c6:
         e8:d6:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:20:42 2025 by rpki-client