This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa
File:                     a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa (raw, json)
Hash identifier:          Mc/+q78E0u8oTVSczjoZfyR3kA/hYLrcvCtaZutXPG8=
Subject key identifier:   6E:93:6C:17:F0:A6:CF:9D:C9:66:C9:71:BE:C5:11:01:47:6B:F5:CF
Certificate issuer:       /CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
Certificate serial:       010D0C9F4328584BFC0B480A9C37DC8E574ECD40
Authority key identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa
Signing time:             Wed 26 Nov 2025 05:14:08 +0000
ROA not before:           Wed 26 Nov 2025 05:14:08 +0000
ROA not after:            Tue 24 Feb 2026 05:14:08 +0000
asID:                     55280
IP address blocks:        104.250.121.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 26 Nov 2025 13:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fc:0b:48:0a:9c:37:dc:8e:57:4e:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
        Validity
            Not Before: Nov 26 05:14:08 2025 GMT
            Not After : Feb 24 05:14:08 2026 GMT
        Subject: CN=a57fa6c2-d193-480c-a6a4-06d62e7ef639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:f0:2d:61:67:62:28:17:97:1d:94:ac:b4:
                    dd:cb:c4:3b:e2:16:82:c4:f8:d0:4d:05:04:04:ae:
                    2c:a0:e8:a3:61:43:3e:9f:9e:08:5e:c1:95:98:bf:
                    a8:ea:fc:17:33:7c:7c:de:45:69:8d:30:44:7f:62:
                    4d:a8:60:fb:a2:24:a5:02:0a:94:ad:2d:da:79:a6:
                    cc:f9:b4:d8:74:7c:5a:ca:a2:9d:80:d8:34:b2:49:
                    d4:26:59:de:e3:00:63:ca:c7:8f:da:30:01:76:31:
                    3b:de:7d:3c:75:86:5d:5c:30:dc:b6:4e:15:bb:7b:
                    e8:15:52:5a:de:32:32:5d:53:ff:28:21:ab:68:5a:
                    bf:30:ac:3d:d9:4b:4d:22:b0:e3:ce:2a:21:4d:d1:
                    b6:d7:66:48:5c:b6:ac:f4:70:a6:39:4d:be:41:88:
                    d7:5b:60:66:34:34:c8:b4:56:1e:27:91:cf:a3:22:
                    85:cd:d1:be:ee:8e:d6:cc:1e:5b:db:ec:ab:67:d1:
                    85:d5:f9:42:b7:2c:64:ea:8f:01:fe:10:51:ae:37:
                    30:44:4a:0e:ba:c7:75:3f:5b:98:4d:92:5c:f3:64:
                    84:2e:9b:cb:f3:83:54:7e:77:e8:36:a8:d1:bd:4a:
                    d5:d7:76:a3:3e:09:33:b0:c1:2d:a7:4c:46:c6:f7:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:93:6C:17:F0:A6:CF:9D:C9:66:C9:71:BE:C5:11:01:47:6B:F5:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl

            X509v3 Authority Key Identifier:
                keyid:59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2d:e3:5f:db:cc:57:e5:57:43:b0:da:59:0c:65:d2:61:e7:
         6b:39:39:1d:ba:8b:a9:8e:1e:8b:d0:e5:e3:47:4a:6a:31:16:
         fc:90:bf:3c:39:fe:ad:56:78:76:8a:03:a6:27:16:68:83:a7:
         ce:aa:ed:3c:4d:64:21:eb:f6:61:6e:a1:c1:42:60:a7:e0:54:
         c2:5e:97:76:ca:49:04:cf:8f:a4:60:bc:65:a7:49:7b:3a:2a:
         ef:d7:e3:b2:5d:a1:77:19:11:21:2c:31:f5:7f:71:1b:87:5c:
         11:0e:6a:fb:ec:a1:e3:3a:04:3c:77:9a:2d:ca:6e:08:d8:18:
         a9:55:85:24:b2:9f:4e:83:e9:28:80:dc:37:22:dc:61:c1:b2:
         c9:ef:d1:e4:d8:8e:51:7f:31:bd:82:e8:0a:26:b7:b3:88:6c:
         dc:f9:e2:26:77:e0:ca:de:01:37:76:5b:fe:82:94:1a:43:f1:
         0e:39:dc:f8:eb:a6:35:4a:0c:2c:a5:81:d0:9e:c5:0e:93:f0:
         53:4f:31:6b:49:ee:19:c7:27:9f:af:6d:f6:ec:8f:0d:81:14:
         fd:0b:71:0a:70:1c:b6:8e:9f:8e:46:33:b3:e7:bd:86:84:16:
         02:38:8c:6a:6f:2f:06:31:9b:ef:c6:81:cb:c0:a1:f7:3d:9a:
         bd:ef:e1:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv8C0gKnDfcjldOzUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRlNmQzMWQtMzhmMS00YTlmLTkwYTUtNzhhZDMzZjJm
Yzg3MB4XDTI1MTEyNjA1MTQwOFoXDTI2MDIyNDA1MTQwOFowLzEtMCsGA1UEAxMk
YTU3ZmE2YzItZDE5My00ODBjLWE2YTQtMDZkNjJlN2VmNjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBPwLWFnYigXlx2UrLTdy8Q74haCxPjQTQUE
BK4soOijYUM+n54IXsGVmL+o6vwXM3x83kVpjTBEf2JNqGD7oiSlAgqUrS3aeabM
+bTYdHxayqKdgNg0sknUJlne4wBjyseP2jABdjE73n08dYZdXDDctk4Vu3voFVJa
3jIyXVP/KCGraFq/MKw92UtNIrDjziohTdG212ZIXLas9HCmOU2+QYjXW2BmNDTI
tFYeJ5HPoyKFzdG+7o7WzB5b2+yrZ9GF1flCtyxk6o8B/hBRrjcwREoOusd1P1uY
TZJc82SELpvL84NUfnfoNqjRvUrV13ajPgkzsMEtp0xGxvcp9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6TbBfwps+dyWbJcb7FEQFHa/XPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNGU2
ZDMxZC0zOGYxLTRhOWYtOTBhNS03OGFkMzNmMmZjODcvYTFjZmY0NzYtNzUwOS0z
NGJjLWIwYjMtNWJhMWQwZDJhZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTRlNmQzMWQtMzhmMS00YTlmLTkw
YTUtNzhhZDMzZjJmYzg3L2U0ZTZkMzFkLTM4ZjEtNGE5Zi05MGE1LTc4YWQzM2Yy
ZmM4Ny5jcmwwHwYDVR0jBBgwFoAUWfW09a4gnXfDfny/pflNJLbTeCowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNGU2ZDMxZC0zOGYxLTRhOWYtOTBhNS03OGFk
MzNmMmZjODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPp5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFct41/bzFflV0Ow2lkMZdJh52s5OR26i6mOHovQ5eNHSmoxFvyQvzw5
/q1WeHaKA6YnFmiDp86q7TxNZCHr9mFuocFCYKfgVMJel3bKSQTPj6RgvGWnSXs6
Ku/X47JdoXcZESEsMfV/cRuHXBEOavvsoeM6BDx3mi3KbgjYGKlVhSSyn06D6SiA
3Dci3GHBssnv0eTYjlF/Mb2C6Aomt7OIbNz54iZ34MreATd2W/6ClBpD8Q453Pjr
pjVKDCylgdCexQ6T8FNPMWtJ7hnHJ5+vbfbsjw2BFP0LcQpwHLaOn45GM7PnvYaE
FgI4jGpvLwYxm+/GgcvAofc9mr3v4TA=
-----END CERTIFICATE-----
Generated at Fri Nov 28 08:25:48 2025 by rpki-client