This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78d684f4-32b1-3068-9164-1f5f3587329e.roa
File:                     78d684f4-32b1-3068-9164-1f5f3587329e.roa (raw, json)
Hash identifier:          JgCzbG1ke5HYd5n15cqjjbdBTkg9eBvgdvK8JCYLDqk=
Subject key identifier:   4F:BA:DE:05:A9:A5:33:63:7D:FE:F7:8B:DB:6C:64:F9:0C:9F:FD:94
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C388035FA0BEF43FAB520
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78d684f4-32b1-3068-9164-1f5f3587329e.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     44477
IP address blocks:        104.252.116.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:38:80:35:fa:0b:ef:43:fa:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=3594f978-f514-4406-8347-a1f0c4d26cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:9c:e7:03:bc:9b:63:5b:79:eb:fd:48:53:
                    2a:87:65:84:12:2b:dd:b7:5b:7a:a5:51:3b:a0:15:
                    9d:5e:a0:8f:08:21:02:c2:e6:11:a2:e3:31:84:31:
                    be:ae:aa:ae:74:c5:e3:b6:d3:da:b0:b6:15:15:7c:
                    ca:da:aa:ff:bc:ac:34:85:93:1f:2e:02:d5:5f:2a:
                    59:0f:d7:af:0f:14:ba:41:fd:e5:7d:a4:f4:94:5a:
                    ed:b9:79:f2:8e:17:1e:46:7d:4e:a6:0b:44:75:ce:
                    f9:95:13:96:92:6f:7f:a6:16:81:10:f3:9c:6e:41:
                    b8:6a:f2:6f:0b:0a:02:11:02:6f:d4:59:ce:17:4b:
                    54:79:f5:d1:1c:71:54:9b:5c:1c:0c:3e:03:01:a0:
                    86:df:b4:97:93:ea:de:c9:a8:b4:6c:22:aa:4d:c6:
                    23:5b:d6:19:36:3e:54:6c:11:53:03:4a:e7:ae:30:
                    2c:3d:76:99:f8:db:b7:63:a2:b0:5d:54:e9:bf:41:
                    e4:f8:e6:f6:a4:6c:62:be:ec:e6:74:33:57:11:b3:
                    bd:8b:6c:8d:ac:65:14:39:e1:d2:75:3f:30:38:00:
                    d0:6d:de:de:30:73:92:65:7d:bb:f1:05:0c:e6:43:
                    28:1e:ff:61:fc:53:32:94:ff:bc:ff:1b:f6:20:f8:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BA:DE:05:A9:A5:33:63:7D:FE:F7:8B:DB:6C:64:F9:0C:9F:FD:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78d684f4-32b1-3068-9164-1f5f3587329e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:55:4e:8f:30:8d:73:4e:83:52:88:cc:31:da:36:66:49:ce:
         4f:15:1e:9e:fa:44:b0:1b:c8:db:7f:d4:71:db:0f:89:55:72:
         96:64:33:99:80:64:a9:3c:86:b2:84:59:61:9f:ac:88:03:bd:
         0a:0c:21:d6:d2:2b:a2:d4:63:ea:b0:2c:97:23:ac:b1:ec:71:
         e7:2a:98:d2:d3:39:d9:67:5f:f6:ed:a2:0a:bd:05:78:30:84:
         33:8a:03:74:1c:54:ba:cc:8e:51:a7:8c:0c:c2:a5:94:57:dc:
         4c:c1:29:17:9a:12:35:4f:92:cf:1d:a9:97:10:0d:58:13:62:
         01:20:a2:01:9f:32:6b:24:fd:c2:69:b4:4e:64:1e:16:80:15:
         40:51:a2:2d:96:85:c4:81:e9:7a:51:d0:98:a7:2e:85:ad:d5:
         a0:77:28:bc:38:87:75:cf:fc:eb:f4:99:71:ff:74:49:78:3d:
         22:a3:d2:5c:1d:00:f9:87:ba:82:ac:70:7e:81:98:64:f7:2e:
         06:01:c3:eb:63:29:3f:3c:22:58:98:f8:77:35:a5:b3:72:4d:
         16:37:fa:41:bd:64:e6:b6:58:48:75:dd:91:8d:e5:d4:7f:2c:
         1f:aa:df:34:a0:36:83:d4:f2:1c:5d:b5:9c:57:3c:91:02:7d:
         7d:74:ef:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----