This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/323630323a663532383a323a3a2f34382d3438203d3e203139383936.roa
File:                     323630323a663532383a323a3a2f34382d3438203d3e203139383936.roa (raw, json)
Hash identifier:          HLXZb99wA9wn3hCyATwxPCFev0YuT3JO+2NTHSbDSXM=
Subject key identifier:   C0:3A:44:A2:14:69:F6:B6:E4:C8:8E:03:4C:E1:E7:49:6C:FD:DE:D7
Certificate issuer:       /CN=afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f
Certificate serial:       2C13B8BC2CECEC44D151E2688C14519AF2A4EB7F
Authority key identifier: 67:B3:7B:A6:0D:C4:FD:4A:99:B6:E6:45:F2:94:CB:9C:D8:3C:11:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/323630323a663532383a323a3a2f34382d3438203d3e203139383936.roa
Signing time:             Mon 03 Nov 2025 18:28:47 +0000
ROA not before:           Mon 03 Nov 2025 18:23:47 +0000
ROA not after:            Mon 02 Nov 2026 18:28:47 +0000
asID:                     19896
IP address blocks:        2602:f528:2::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:13:b8:bc:2c:ec:ec:44:d1:51:e2:68:8c:14:51:9a:f2:a4:eb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f
        Validity
            Not Before: Nov  3 18:23:47 2025 GMT
            Not After : Nov  2 18:28:47 2026 GMT
        Subject: CN=C03A44A21469F6B6E4C88E034CE1E7496CFDDED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:f1:6f:f4:30:76:df:ad:8c:d1:80:e5:13:
                    42:48:b7:1e:af:69:17:b4:57:dc:e9:af:28:31:05:
                    cb:cb:b7:9e:21:5c:39:80:47:af:71:cc:2c:e0:fd:
                    84:2c:fb:80:0c:83:a2:57:4a:0f:67:de:37:7f:e9:
                    1a:56:c4:04:6a:44:97:b5:bd:b1:00:50:6b:ac:69:
                    9b:5f:7c:9e:21:b4:43:77:66:6b:f3:69:9b:f4:f8:
                    ab:d4:82:9f:dd:dc:cc:21:6b:9c:ac:c4:8c:af:76:
                    75:9c:e2:ff:9f:ff:8a:9c:13:59:19:1f:bb:60:91:
                    07:95:d7:9e:58:bc:fb:cc:01:77:19:e5:74:f0:de:
                    3e:f2:61:06:e8:a7:5f:dd:27:63:0d:5e:d8:76:9d:
                    92:0f:2c:b0:c5:af:6c:88:0c:96:56:02:b6:88:2b:
                    ad:b3:70:59:78:3a:96:e5:b3:6d:85:36:82:47:51:
                    32:9a:f8:eb:4b:35:40:59:1c:b1:ed:30:f8:78:7c:
                    ee:8e:25:4b:41:6b:88:42:06:28:4d:01:d1:87:3f:
                    00:4a:19:8f:c9:45:c3:a9:c3:c0:45:5d:00:2a:d0:
                    bd:04:4b:f4:c9:b3:33:fa:bb:69:d5:c7:91:f1:5d:
                    53:41:52:c3:c6:78:62:d7:da:d0:66:c2:25:f6:a5:
                    3e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3A:44:A2:14:69:F6:B6:E4:C8:8E:03:4C:E1:E7:49:6C:FD:DE:D7
            X509v3 Authority Key Identifier:
                keyid:67:B3:7B:A6:0D:C4:FD:4A:99:B6:E6:45:F2:94:CB:9C:D8:3C:11:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/323630323a663532383a323a3a2f34382d3438203d3e203139383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f528:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:1d:82:fd:13:87:02:49:5d:fc:a4:a3:1f:f7:97:a6:7e:54:
         14:ac:c9:23:d7:e8:a9:de:48:f4:0c:86:52:76:43:7e:0d:a4:
         87:a4:23:2e:71:69:71:39:03:e4:1c:66:1e:49:57:a5:c3:cf:
         bc:5a:0a:23:2d:c5:ec:7d:59:69:cb:1c:79:6b:9d:cb:33:00:
         b6:02:80:5e:f0:5f:cc:e4:63:d3:59:b4:3b:23:23:18:e4:1f:
         c9:ce:89:42:b2:3d:11:49:fc:f1:fe:a2:16:3d:c9:08:a6:fd:
         95:21:79:cd:b8:4b:9a:ed:7b:1f:c2:2a:3d:e5:ea:fa:18:ac:
         c3:92:8b:ff:13:02:db:f6:5c:20:99:f1:67:44:6c:7f:21:13:
         4c:69:7f:0b:98:39:e8:e7:6c:7f:a7:eb:7e:fe:31:74:c7:54:
         cf:e3:92:57:f0:b8:42:b8:99:6a:b7:86:ab:5e:78:3b:c6:f6:
         a3:c7:09:64:9e:77:36:25:f1:0b:95:4e:2b:24:84:be:19:ff:
         20:32:90:24:ce:29:75:75:25:32:ba:ed:aa:c7:01:00:e4:13:
         3f:7e:32:4b:6d:f1:09:5e:7e:90:e9:f7:81:d6:b0:31:6c:4b:
         87:23:6a:21:c3:a2:9a:b2:e2:96:b7:21:47:5b:05:04:8d:18:
         ee:04:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----