This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/3eaf5ae3-7f09-3d31-9ecc-9c9d5ea507b3.roa
File:                     3eaf5ae3-7f09-3d31-9ecc-9c9d5ea507b3.roa (raw, json)
Hash identifier:          UlJCGqCLilxuxRuOZRXhvedXtL43m7IJjH7bsInEle8=
Subject key identifier:   B7:6F:4A:72:2A:15:6C:F5:D3:3C:7B:EE:66:F0:42:70:ED:06:14:F4
Certificate issuer:       /CN=77f46e12-3017-4d5d-8a8d-3f77476d79ce
Certificate serial:       010D0C9F432858490344B2830D9EE3BCF7F74B00
Authority key identifier: B9:19:BF:27:12:13:0E:2C:A6:5C:06:91:C1:8F:FC:AF:21:98:CA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/3eaf5ae3-7f09-3d31-9ecc-9c9d5ea507b3.roa
Signing time:             Wed 26 Feb 2025 16:59:40 +0000
ROA not before:           Wed 26 Feb 2025 16:59:40 +0000
ROA not after:            Tue 27 May 2025 15:59:40 +0000
asID:                     19173
IP address blocks:        2620:d2:a000::/48 maxlen: 64
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:03:44:b2:83:0d:9e:e3:bc:f7:f7:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f46e12-3017-4d5d-8a8d-3f77476d79ce
        Validity
            Not Before: Feb 26 16:59:40 2025 GMT
            Not After : May 27 15:59:40 2025 GMT
        Subject: CN=a05e8ee4-0615-48c6-869e-01d93a8298a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:d8:59:83:ac:47:d9:35:1a:f2:bd:32:61:
                    8c:d3:de:99:15:dd:f0:81:62:2f:ac:df:3d:35:95:
                    78:1b:0c:f2:6b:0a:6b:a0:9f:e3:cc:90:e5:ac:93:
                    2d:ca:49:67:d2:20:28:e6:f3:24:2c:07:55:36:19:
                    1c:dc:b5:e9:d2:ce:45:1f:e6:fb:43:24:8c:fc:0a:
                    08:e2:b5:23:d0:8a:f9:08:89:6f:fc:e0:4c:1c:84:
                    dd:e2:cb:b4:4d:be:a4:50:81:35:1b:5a:1c:6d:1b:
                    bf:a5:4e:81:cb:77:17:c2:cd:16:33:9c:a9:7c:c1:
                    9a:dc:7f:c7:30:4d:bc:c6:d4:40:e6:56:b8:5e:15:
                    2b:25:7f:83:1b:9e:52:e4:08:13:34:00:19:17:c6:
                    8d:30:64:6b:fd:a8:99:f2:cd:9f:96:ab:4f:01:d7:
                    e2:85:f0:45:2a:72:25:fa:5d:ea:80:fb:e6:4c:01:
                    8d:89:29:e5:24:82:90:9b:fd:95:3e:3b:6c:45:e3:
                    d7:dc:61:9e:6f:a5:94:50:85:9d:00:46:dd:0f:f8:
                    e5:45:cb:90:ee:27:fc:77:97:d6:4d:a3:83:d4:b7:
                    ec:ee:3d:6c:d8:b5:af:d9:73:fb:b4:a0:83:57:f3:
                    80:3d:e1:c3:8d:a8:0b:20:60:bf:b2:1c:a0:55:0c:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6F:4A:72:2A:15:6C:F5:D3:3C:7B:EE:66:F0:42:70:ED:06:14:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/3eaf5ae3-7f09-3d31-9ecc-9c9d5ea507b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/77f46e12-3017-4d5d-8a8d-3f77476d79ce.crl

            X509v3 Authority Key Identifier:
                keyid:B9:19:BF:27:12:13:0E:2C:A6:5C:06:91:C1:8F:FC:AF:21:98:CA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d2:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:46:b9:67:e1:9b:42:01:07:8b:0f:92:dc:35:33:a7:b1:8f:
         09:2d:89:3c:25:12:49:9e:8b:52:fc:ee:f2:a1:ea:45:30:12:
         7c:c2:9b:b8:13:b7:80:e8:35:8e:22:0f:d8:38:78:da:34:ba:
         c7:04:9d:9a:ad:23:9f:48:96:0b:c9:3a:38:d2:80:dc:76:d2:
         3d:b1:a2:22:ff:09:86:eb:f6:d6:b4:4b:f0:66:ea:03:87:d0:
         13:9e:46:f8:8a:5d:95:a1:cd:af:13:f7:5e:aa:d2:35:ee:fb:
         a0:5b:67:94:7c:18:84:b0:43:6d:d3:2b:85:9d:9d:b1:7b:34:
         fa:fa:49:91:f7:37:9e:13:66:aa:2b:84:fd:97:01:52:10:58:
         25:9a:a5:9e:4a:30:a7:c8:ac:a8:0d:42:21:4b:e9:ca:9d:e9:
         15:e4:3a:e8:21:3d:b2:3f:be:54:4a:29:cd:f6:16:d2:2d:49:
         d5:10:08:e8:c5:84:ba:6d:1d:26:0e:03:64:d3:2e:dc:5f:2a:
         99:ed:c3:c7:10:f5:c3:95:22:e0:b4:ec:b5:a5:a7:36:49:fc:
         ad:2c:22:61:11:0f:28:5a:b2:7d:d7:3b:f7:d3:20:86:1a:de:
         1c:0d:96:37:6f:fe:52:f7:23:f1:84:ba:5e:6f:e2:3b:55:20:
         bd:df:3e:4a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkDRLKDDZ7jvPf3SwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzdmNDZlMTItMzAxNy00ZDVkLThhOGQtM2Y3NzQ3NmQ3
OWNlMB4XDTI1MDIyNjE2NTk0MFoXDTI1MDUyNzE1NTk0MFowLzEtMCsGA1UEAxMk
YTA1ZThlZTQtMDYxNS00OGM2LTg2OWUtMDFkOTNhODI5OGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiELYWYOsR9k1GvK9MmGM096ZFd3wgWIvrN89
NZV4GwzyawproJ/jzJDlrJMtykln0iAo5vMkLAdVNhkc3LXp0s5FH+b7QySM/AoI
4rUj0Ir5CIlv/OBMHITd4su0Tb6kUIE1G1ocbRu/pU6By3cXws0WM5ypfMGa3H/H
ME28xtRA5la4XhUrJX+DG55S5AgTNAAZF8aNMGRr/aiZ8s2flqtPAdfihfBFKnIl
+l3qgPvmTAGNiSnlJIKQm/2VPjtsRePX3GGeb6WUUIWdAEbdD/jlRcuQ7if8d5fW
TaOD1Lfs7j1s2LWv2XP7tKCDV/OAPeHDjagLIGC/shygVQx60QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLdvSnIqFWz10zx77mbwQnDtBhT0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83N2Y0
NmUxMi0zMDE3LTRkNWQtOGE4ZC0zZjc3NDc2ZDc5Y2UvM2VhZjVhZTMtN2YwOS0z
ZDMxLTllY2MtOWM5ZDVlYTUwN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzdmNDZlMTItMzAxNy00ZDVkLThh
OGQtM2Y3NzQ3NmQ3OWNlLzc3ZjQ2ZTEyLTMwMTctNGQ1ZC04YThkLTNmNzc0NzZk
NzljZS5jcmwwHwYDVR0jBBgwFoAUuRm/JxITDiymXAaRwY/8ryGYyvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83N2Y0NmUxMi0zMDE3LTRkNWQtOGE4ZC0zZjc3
NDc2ZDc5Y2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA0qAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACVGuWfhm0IBB4sPktw1M6exjwktiTwlEkmei1L87vKh6kUwEnzC
m7gTt4DoNY4iD9g4eNo0uscEnZqtI59IlgvJOjjSgNx20j2xoiL/CYbr9ta0S/Bm
6gOH0BOeRviKXZWhza8T916q0jXu+6BbZ5R8GISwQ23TK4WdnbF7NPr6SZH3N54T
ZqorhP2XAVIQWCWapZ5KMKfIrKgNQiFL6cqd6RXkOughPbI/vlRKKc32FtItSdUQ
COjFhLptHSYOA2TTLtxfKpntw8cQ9cOVIuC07LWlpzZJ/K0sImERDyhasn3XO/fT
IIYa3hwNljdv/lL3I/GEul5v4jtVIL3fPko=
-----END CERTIFICATE-----
Generated at Fri Dec 19 06:19:49 2025 by rpki-client