This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/323630323a663532383a313a3a2f34382d3438203d3e20343032303733.roa
File:                     323630323a663532383a313a3a2f34382d3438203d3e20343032303733.roa (raw, json)
Hash identifier:          ANSeTh0v1Au1NSdUr/FjJo31LPvixEm7cPGU0YN5+UU=
Subject key identifier:   3D:57:BA:BF:C7:B2:FC:37:22:DC:C6:9D:86:52:61:23:BE:5A:F8:EA
Certificate issuer:       /CN=afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f
Certificate serial:       0DDF4D1042932C00C37C816B5AD1A90C0178CDFE
Authority key identifier: 67:B3:7B:A6:0D:C4:FD:4A:99:B6:E6:45:F2:94:CB:9C:D8:3C:11:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/323630323a663532383a313a3a2f34382d3438203d3e20343032303733.roa
Signing time:             Mon 03 Nov 2025 18:28:50 +0000
ROA not before:           Mon 03 Nov 2025 18:23:50 +0000
ROA not after:            Mon 02 Nov 2026 18:28:50 +0000
asID:                     402073
IP address blocks:        2602:f528:1::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:df:4d:10:42:93:2c:00:c3:7c:81:6b:5a:d1:a9:0c:01:78:cd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f
        Validity
            Not Before: Nov  3 18:23:50 2025 GMT
            Not After : Nov  2 18:28:50 2026 GMT
        Subject: CN=3D57BABFC7B2FC3722DCC69D86526123BE5AF8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:f7:74:c5:95:7f:88:44:08:0b:66:a9:95:
                    0c:c7:ef:9c:4a:3f:eb:a5:a9:9b:89:6c:fa:e9:8f:
                    b9:ac:df:97:83:eb:7d:06:9a:a5:e0:a2:71:bb:3f:
                    f4:cb:71:bc:08:8c:83:b2:5a:af:52:e1:13:b9:08:
                    22:61:d0:55:d0:c5:c2:8b:77:35:69:b4:36:f3:76:
                    47:04:81:a9:3e:32:43:9e:62:a1:cf:90:74:d6:3d:
                    70:be:b5:ef:bc:1a:f6:82:09:2f:c9:cc:3d:5c:a9:
                    15:3e:82:ca:cb:12:33:f3:0b:c3:ea:e9:d6:ae:5c:
                    93:52:24:4a:fd:a3:2e:7e:cb:b6:d1:a0:38:b1:0e:
                    88:3a:c7:a7:29:23:c7:90:23:ac:25:2f:56:06:66:
                    26:49:86:4c:2b:1f:b7:f9:4f:6b:00:74:ef:1f:4c:
                    ae:25:57:ce:8b:bb:c8:d2:8f:8f:76:8a:77:cd:48:
                    5d:8e:5d:4c:5f:80:2e:f7:94:c5:93:ba:68:2e:a8:
                    03:2b:3e:4a:62:85:04:71:45:29:ba:e8:21:da:01:
                    42:ef:d7:cb:97:da:44:37:42:cd:7a:b8:e0:f6:de:
                    9d:c3:26:20:a8:06:98:f8:57:75:3f:47:15:57:72:
                    b4:c7:37:c0:15:69:e9:8e:91:7b:cb:68:47:14:ca:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:57:BA:BF:C7:B2:FC:37:22:DC:C6:9D:86:52:61:23:BE:5A:F8:EA
            X509v3 Authority Key Identifier:
                keyid:67:B3:7B:A6:0D:C4:FD:4A:99:B6:E6:45:F2:94:CB:9C:D8:3C:11:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/323630323a663532383a313a3a2f34382d3438203d3e20343032303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f528:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:d7:de:bb:34:19:a5:32:d4:ec:fe:01:69:e9:45:5e:01:ee:
         51:dd:db:f4:ed:4c:76:13:78:bc:67:99:4d:aa:61:5f:38:0b:
         94:14:ea:c7:40:6f:7a:96:1e:14:dd:6d:81:21:33:3c:3c:34:
         9a:24:51:fb:98:1a:d1:c0:1b:27:05:2c:f8:93:90:51:dd:f7:
         db:e3:27:61:16:e1:4b:46:d5:6d:bf:5e:c7:7d:e6:c5:ba:d8:
         84:8d:71:4d:84:4e:ca:c2:54:11:1d:8a:60:af:f6:9e:3b:0d:
         b5:4c:00:5b:61:7d:5b:16:e9:43:aa:9e:0f:e5:48:3e:34:e0:
         ff:dd:9c:c4:21:6b:f2:05:75:ec:ef:03:fa:c6:dc:aa:e0:70:
         9c:2e:ce:5f:56:c3:a3:af:a7:5d:3c:2a:c5:a8:52:7d:2c:e0:
         0e:b8:87:1d:ba:c6:98:e6:53:70:61:65:5e:2b:b8:aa:28:7e:
         7a:c2:e0:31:18:17:4e:a0:7a:21:2c:60:1e:06:39:90:ff:30:
         f4:3c:8b:da:5b:ab:03:8a:12:ae:b1:53:98:33:c6:8d:7f:0b:
         d5:7c:ff:98:89:59:21:0f:fc:76:6e:86:4d:4e:8c:fd:86:85:
         2c:a6:87:99:fe:1e:5e:08:d4:93:5b:ee:79:59:65:0c:eb:a6:
         46:0b:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----