This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/469bf5c7-1361-3055-acf1-b1a0f6b63853.roa
File:                     469bf5c7-1361-3055-acf1-b1a0f6b63853.roa (raw, json)
Hash identifier:          N8JeVSWSOBGSTSMuUxIFuVEc0r6BIPevrAQHhgzizqU=
Subject key identifier:   24:98:32:8B:3B:EF:A4:03:AD:4C:99:EC:FC:4B:48:9E:1D:F9:8C:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE0E5D3B72C2024355100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/469bf5c7-1361-3055-acf1-b1a0f6b63853.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     15353
IP address blocks:        2001:470:1b4::/47 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e0:e5:d3:b7:2c:20:24:35:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=20a76647-6c8a-41eb-aa61-1a38b26abd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:39:9b:47:ec:dc:32:0c:1c:09:4b:37:7c:0a:
                    0e:78:19:3f:20:01:e0:09:f6:62:18:86:80:9f:75:
                    cd:f3:a2:7e:66:86:a8:d0:b5:88:84:d4:27:27:e2:
                    71:fe:46:cd:ee:40:a5:a8:1a:fd:6a:b1:09:bd:3c:
                    6e:70:f4:8e:88:a1:58:b7:2f:74:a6:40:64:b5:53:
                    ce:72:84:9f:ec:b2:e2:67:c9:dd:b9:f2:d2:58:6d:
                    d1:00:19:be:82:92:cd:b4:5b:b5:d7:ac:73:8e:e6:
                    6d:d7:d1:21:58:cd:ac:91:de:bb:76:dc:da:e6:df:
                    ff:d7:bf:47:53:ea:29:96:95:6d:02:10:7e:05:33:
                    5e:e1:80:83:35:d2:c1:69:a3:2b:f8:72:d9:6c:4c:
                    14:da:1c:d8:03:f9:76:16:3e:68:6e:ce:f3:2e:49:
                    c0:bf:d5:91:2f:97:73:ae:1e:dc:d9:2f:23:5d:4d:
                    c6:c4:63:5c:a0:b4:d2:f7:4d:de:6f:a4:7c:e7:01:
                    89:b7:90:67:cb:b2:40:1e:79:94:73:b7:72:ef:91:
                    9b:36:5f:82:84:55:96:4c:a6:20:ad:e5:2a:a7:9b:
                    6a:1b:ec:60:61:e0:3d:c1:47:8d:e8:c2:99:7c:40:
                    32:be:52:05:40:5d:20:76:b7:97:b1:60:b8:6c:da:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:98:32:8B:3B:EF:A4:03:AD:4C:99:EC:FC:4B:48:9E:1D:F9:8C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/469bf5c7-1361-3055-acf1-b1a0f6b63853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1b4::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:65:0f:3c:ef:00:b0:57:30:78:20:0e:be:c4:4a:cd:70:f3:
         7d:80:3d:8f:69:90:46:8a:fe:65:69:98:5d:06:d4:6b:92:7b:
         84:d1:db:57:cd:dd:ed:f5:4f:ba:b1:c6:7d:7a:d9:f0:8c:2e:
         13:a5:da:a3:cd:e1:15:cd:17:b5:21:0e:87:5c:0e:eb:a8:47:
         0b:37:96:7d:15:84:2c:05:3b:27:43:c5:b1:e3:20:81:d9:12:
         d0:ba:0f:e7:a1:af:39:f5:39:d3:23:fd:a7:c3:68:ed:3a:51:
         38:ba:e0:08:7c:b4:67:e3:52:48:db:18:ab:35:a6:f7:d9:74:
         7e:98:a9:c4:ea:68:53:dd:39:48:d3:ab:1d:68:e2:d5:0c:50:
         4e:d8:a7:cc:60:76:89:68:17:de:9f:d6:9f:0c:77:05:75:d2:
         fe:9c:16:a8:f4:f9:dd:ef:b2:82:7d:c1:18:22:fb:46:8b:fc:
         d5:ff:ca:6a:2f:76:2f:d1:5c:42:c5:43:8a:da:51:7d:5e:23:
         cf:4d:fc:79:62:b7:a9:b1:7a:82:ce:a7:c0:d7:34:df:b0:65:
         d2:c3:f1:ce:f2:38:4c:df:2f:f9:e2:5f:57:92:d3:92:6a:7a:
         51:3f:65:83:60:74:69:5a:ab:7f:60:0b:10:b6:32:3d:f3:d5:
         d3:a3:7a:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+Dl07csICQ1UQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
MjBhNzY2NDctNmM4YS00MWViLWFhNjEtMWEzOGIyNmFiZDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TmbR+zcMgwcCUs3fAoOeBk/IAHgCfZiGIaA
n3XN86J+Zoao0LWIhNQnJ+Jx/kbN7kClqBr9arEJvTxucPSOiKFYty90pkBktVPO
coSf7LLiZ8ndufLSWG3RABm+gpLNtFu116xzjuZt19EhWM2skd67dtza5t//179H
U+oplpVtAhB+BTNe4YCDNdLBaaMr+HLZbEwU2hzYA/l2Fj5obs7zLknAv9WRL5dz
rh7c2S8jXU3GxGNcoLTS903eb6R85wGJt5Bny7JAHnmUc7dy75GbNl+ChFWWTKYg
reUqp5tqG+xgYeA9wUeN6MKZfEAyvlIFQF0gdreXsWC4bNoAsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCSYMos776QDrUyZ7PxLSJ4d+YzoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDY5YmY1YzctMTM2MS0z
MDU1LWFjZjEtYjFhMGY2YjYzODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcAG0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADFlDzzvALBXMHggDr7ESs1w832APY9pkEaK/mVpmF0G1GuSe4TR
21fN3e31T7qxxn162fCMLhOl2qPN4RXNF7UhDodcDuuoRws3ln0VhCwFOydDxbHj
IIHZEtC6D+ehrzn1OdMj/afDaO06UTi64Ah8tGfjUkjbGKs1pvfZdH6YqcTqaFPd
OUjTqx1o4tUMUE7Yp8xgdoloF96f1p8MdwV10v6cFqj0+d3vsoJ9wRgi+0aL/NX/
ymovdi/RXELFQ4raUX1eI89N/Hlit6mxeoLOp8DXNN+wZdLD8c7yOEzfL/niX1eS
05JqelE/ZYNgdGlaq39gCxC2Mj3z1dOjes8=
-----END CERTIFICATE-----