This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b0890896-121c-3a15-9770-868d23d5ce6f.roa
File:                     b0890896-121c-3a15-9770-868d23d5ce6f.roa (raw, json)
Hash identifier:          fwxp2iu3gBgV7AEjYmeMPhmwCIPEQ/M016tkkbtZudY=
Subject key identifier:   09:A0:8E:84:4B:CE:D2:54:16:A3:87:76:D8:9C:BD:99:BE:CF:CB:51
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584B0CDC1B765F3EC292F21EFC00
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b0890896-121c-3a15-9770-868d23d5ce6f.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     19151
IP address blocks:        66.249.140.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1b:76:5f:3e:c2:92:f2:1e:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=c09d63c8-d439-45a9-ac13-6f0426bc4658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:33:05:13:31:f6:19:06:0a:d8:c3:87:2b:
                    5d:6c:6f:18:58:77:9c:11:e9:f1:aa:03:03:2f:84:
                    82:9e:37:0a:47:4e:3a:80:7f:05:60:e8:c2:29:15:
                    d6:b5:85:15:74:df:c0:52:eb:f2:a6:42:92:95:f2:
                    08:b7:57:33:1c:4a:63:41:5f:f9:ee:2e:d5:31:dc:
                    c5:d9:47:53:6f:d5:e1:54:8e:dd:9f:f2:bc:e2:7c:
                    35:52:08:60:cf:0b:28:b7:67:56:a3:a3:cf:52:5e:
                    70:ff:eb:22:76:6f:fa:23:b3:50:51:6c:56:05:27:
                    03:1a:f5:9f:cb:52:af:b0:c9:bc:6a:30:c6:cd:82:
                    b3:98:4d:af:2f:55:d3:04:dd:0d:1e:2c:8f:70:82:
                    5e:d8:55:f5:c1:01:c7:8c:20:5c:24:86:2e:7a:38:
                    71:26:0b:ee:4f:1e:b8:f0:3a:e8:ab:ed:72:95:89:
                    8a:b6:fb:b1:97:f5:63:09:03:13:d3:d9:4e:c7:fa:
                    a5:33:2e:23:67:e8:f2:6f:57:a5:56:b5:8e:88:62:
                    7b:9a:87:58:b2:88:fd:b4:81:45:8f:ba:cf:78:11:
                    93:86:92:fb:0d:db:ff:a4:33:e1:1f:bd:ca:fe:0a:
                    55:25:a1:65:20:90:9e:ca:90:4d:79:dd:12:a5:ed:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A0:8E:84:4B:CE:D2:54:16:A3:87:76:D8:9C:BD:99:BE:CF:CB:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b0890896-121c-3a15-9770-868d23d5ce6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:be:5c:8a:e6:74:3a:4d:4c:5d:51:cb:79:b6:9d:48:92:0a:
         73:24:d6:cb:64:b0:31:5f:24:39:d2:bb:eb:5d:47:ce:c5:8e:
         96:c0:cd:7c:54:06:2e:e4:88:5b:c0:21:eb:d9:6c:b7:ed:10:
         eb:4f:e9:93:fd:ed:1b:44:32:ed:8a:ed:e0:f7:96:75:aa:41:
         1a:8f:41:ff:8f:39:91:ce:cc:fe:36:b0:7a:14:a7:60:b8:6e:
         f1:d7:20:b3:ad:5e:c2:5f:58:13:38:3d:27:58:76:a5:d4:b8:
         28:31:c0:2d:31:a7:25:52:e6:5b:d1:6e:0a:d5:34:37:28:3d:
         1c:4f:5d:26:6d:0b:93:dd:c9:13:1d:13:0c:87:c1:1f:9f:96:
         80:88:d1:03:b8:ca:25:01:c6:0e:1e:46:42:44:e6:f0:f2:7f:
         3f:86:70:10:6a:a3:03:1d:5b:54:1d:a4:cd:8f:54:ea:db:15:
         66:d4:d6:4b:3a:0f:b4:72:11:94:fa:ad:1e:fe:cf:67:7a:ff:
         dd:4f:e0:af:e9:e3:ce:91:93:e8:4b:fd:34:b1:a4:47:20:86:
         2b:b2:5f:41:63:29:63:30:5c:c6:43:8a:db:43:0e:36:46:d8:
         b3:a7:30:93:0b:33:8b:03:f4:05:8a:cd:48:22:a0:aa:b3:5b:
         88:75:10:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3Bt2Xz7CkvIe/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw
ZGU5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
YzA5ZDYzYzgtZDQzOS00NWE5LWFjMTMtNmYwNDI2YmM0NjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn58zBRMx9hkGCtjDhytdbG8YWHecEenxqgMD
L4SCnjcKR046gH8FYOjCKRXWtYUVdN/AUuvypkKSlfIIt1czHEpjQV/57i7VMdzF
2UdTb9XhVI7dn/K84nw1Ughgzwsot2dWo6PPUl5w/+sidm/6I7NQUWxWBScDGvWf
y1KvsMm8ajDGzYKzmE2vL1XTBN0NHiyPcIJe2FX1wQHHjCBcJIYuejhxJgvuTx64
8Droq+1ylYmKtvuxl/VjCQMT09lOx/qlMy4jZ+jyb1elVrWOiGJ7modYsoj9tIFF
j7rPeBGThpL7Ddv/pDPhH73K/gpVJaFlIJCeypBNed0Spe2Z3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmgjoRLztJUFqOHdticvZm+z8tRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk
YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvYjA4OTA4OTYtMTIxYy0z
YTE1LTk3NzAtODY4ZDIzZDVjZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw
MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw
MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0
ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQvmMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADe+XIrmdDpNTF1Ry3m2nUiSCnMk1stksDFfJDnSu+tdR87FjpbAzXxU
Bi7kiFvAIevZbLftEOtP6ZP97RtEMu2K7eD3lnWqQRqPQf+POZHOzP42sHoUp2C4
bvHXILOtXsJfWBM4PSdYdqXUuCgxwC0xpyVS5lvRbgrVNDcoPRxPXSZtC5PdyRMd
EwyHwR+floCI0QO4yiUBxg4eRkJE5vDyfz+GcBBqowMdW1QdpM2PVOrbFWbU1ks6
D7RyEZT6rR7+z2d6/91P4K/p486Rk+hL/TSxpEcghiuyX0FjKWMwXMZDittDDjZG
2LOnMJMLM4sD9AWKzUgioKqzW4h1EG4=
-----END CERTIFICATE-----
Generated at Mon Dec 15 15:29:09 2025 by rpki-client