This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/d6027cce-683d-3279-ad17-efa9c3bd6345.roa
File:                     d6027cce-683d-3279-ad17-efa9c3bd6345.roa (raw, json)
Hash identifier:          b4O1/ne6fxobMxEfAUxQ4c4bII3YaAFA7NtEPJf6x0A=
Subject key identifier:   6C:6D:BA:94:91:84:93:58:E1:88:CC:85:00:97:DC:AE:31:01:3A:59
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F4328584BA0D266DA7728EA86C4102790
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/d6027cce-683d-3279-ad17-efa9c3bd6345.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     10995
IP address blocks:        161.150.7.0/24 maxlen: 24
                          161.150.16.0/24 maxlen: 24
                          161.150.53.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 03 Nov 2025 03:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:66:da:77:28:ea:86:c4:10:27:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=1fe86aab-8ce7-4359-8e56-4db4cf9f4f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:84:74:73:7a:9f:4f:23:d8:3a:e4:0e:6a:45:
                    c8:2a:08:c8:39:ec:73:27:f6:03:10:5e:7f:e3:c1:
                    23:08:e7:66:2d:ba:a2:5b:dd:6f:03:2d:c9:33:48:
                    6b:fb:5f:5b:15:b8:25:5a:57:ee:72:d5:74:1a:d6:
                    dd:51:65:9c:df:69:64:3e:c3:46:8d:2e:d9:c4:d6:
                    22:ff:b6:1e:19:44:38:4a:8d:c9:a7:9d:dd:95:bc:
                    a2:f8:13:c3:18:73:52:aa:ab:39:da:7e:a4:d2:7a:
                    d8:45:a3:b0:1c:61:6b:07:5d:f5:22:58:32:2e:d4:
                    51:0f:0d:cb:c5:fa:76:3a:63:97:d1:04:6c:04:1b:
                    90:8b:d0:02:1c:9c:5f:7c:fe:80:d3:ff:60:ef:8c:
                    58:45:db:a9:26:96:97:1c:f4:c8:0a:79:9c:4b:44:
                    c4:1c:7d:f0:81:67:82:09:04:ae:f7:d2:bf:95:06:
                    4c:c8:a3:ef:66:55:73:a8:ff:3e:17:24:ac:e7:01:
                    b8:ee:92:df:c3:3f:c6:f3:9b:9e:13:69:f3:bb:11:
                    ec:97:fb:34:a2:4c:da:ff:35:36:94:63:f9:c3:92:
                    8b:73:40:e5:d3:dd:ed:5b:d2:ec:b3:79:04:b5:5e:
                    d6:01:9f:ae:cc:62:9f:b1:9a:2a:8b:03:ca:37:92:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6D:BA:94:91:84:93:58:E1:88:CC:85:00:97:DC:AE:31:01:3A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/d6027cce-683d-3279-ad17-efa9c3bd6345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.7.0/24
                  161.150.16.0/24
                  161.150.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:ef:62:12:ff:fe:91:59:d0:fa:d6:e1:34:90:30:f6:f5:
         41:15:c6:37:be:5a:67:ff:06:91:4a:11:ba:90:ae:1b:f0:ab:
         a2:aa:76:eb:52:83:7c:f8:ee:42:e1:39:bc:c2:16:0d:96:b8:
         4b:d8:cd:34:bf:2d:02:ab:50:d8:9b:00:23:5e:f0:f5:cb:f5:
         f9:e6:80:27:ad:ab:8d:92:53:08:4d:42:7f:ad:3e:ca:53:ca:
         27:42:39:fe:71:a3:e1:e6:57:23:d9:55:6c:e9:bf:d7:3e:58:
         36:ac:a7:4f:f7:dc:fb:3f:d3:eb:10:30:f4:4f:69:c0:64:c9:
         dd:99:07:de:82:e5:0c:2d:b0:df:34:cf:14:7b:34:bf:8c:49:
         98:22:f2:43:7d:27:95:2d:3f:00:b8:7e:fc:03:38:5d:72:99:
         05:d7:0d:10:bf:ac:da:6e:76:15:bb:6e:cf:11:e8:c0:38:07:
         35:ba:69:84:10:03:42:09:a5:94:b0:66:75:73:bd:76:a5:08:
         95:bf:55:e8:88:90:72:13:82:eb:eb:b3:b9:77:8f:6a:0c:c4:
         3a:a1:3a:c3:cd:2d:1b:98:1c:0e:2e:d1:5e:3d:33:6d:31:a2:
         4a:b3:37:7b:a6:a2:49:cc:94:c7:3e:4b:df:5b:df:8d:f3:0d:
         be:7e:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----