This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d25ed246-1ad4-3084-aefe-6c514211ecad.roa
File:                     d25ed246-1ad4-3084-aefe-6c514211ecad.roa (raw, json)
Hash identifier:          mXOScm5ADL99nBN6mG3KVUIP+cWgNw5Ork3fN5HReQM=
Subject key identifier:   CF:C4:77:90:77:82:7A:D6:5A:07:41:63:03:CE:81:F9:24:8C:CB:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AE4612069BAE21DD227EBD700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d25ed246-1ad4-3084-aefe-6c514211ecad.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     2914
IP address blocks:        172.120.151.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:20:69:ba:e2:1d:d2:27:eb:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=2f567dad-dfcb-4ef2-bc37-03dd8757f7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:b2:9b:1f:82:a0:f8:75:a9:8b:6c:d9:9b:
                    44:dd:a7:bb:fe:e3:6b:d2:3b:e7:de:19:76:5e:d6:
                    3a:b3:5f:d9:0e:96:af:35:3a:91:8e:77:30:95:79:
                    13:fe:a8:7b:1c:64:e6:40:d3:47:3e:8b:b4:5a:db:
                    3b:14:d0:a3:58:30:a4:49:4c:a6:f1:8e:08:9e:01:
                    71:c6:35:99:a1:09:60:58:10:23:d1:d1:1c:e8:a3:
                    44:12:19:bc:1f:8a:3f:44:31:96:19:4f:00:93:22:
                    c3:b9:2a:63:91:62:78:66:df:89:0b:4f:9a:54:80:
                    d8:b1:a1:e8:62:e4:30:29:36:b4:95:78:b9:86:06:
                    db:06:a6:8b:40:67:17:bc:dc:ba:02:da:a0:a8:b3:
                    51:42:3d:1c:e8:50:0b:43:f7:d8:cb:cc:68:88:be:
                    c7:f9:fb:6b:77:26:18:30:5d:fb:3c:89:b7:a2:b1:
                    85:d0:3b:ce:21:22:cb:29:31:7a:e1:54:81:e1:2d:
                    41:b6:7d:64:00:95:1a:22:2e:61:73:e1:c4:fb:f0:
                    a1:36:a7:7d:cc:67:c8:a9:3b:51:94:83:b0:2e:aa:
                    d8:5f:b6:9b:81:76:58:77:27:90:f1:14:d5:fa:67:
                    41:96:51:65:f1:e5:77:86:10:d2:2a:9f:ab:6f:f0:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C4:77:90:77:82:7A:D6:5A:07:41:63:03:CE:81:F9:24:8C:CB:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d25ed246-1ad4-3084-aefe-6c514211ecad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a5:18:63:a0:c8:f4:cd:68:19:4b:c9:cc:0f:2d:0f:26:44:
         2e:f7:8d:1e:a3:04:2a:18:60:b3:2a:7d:ac:5c:da:1f:0f:7b:
         25:d8:6c:86:b7:56:5e:2b:8c:9d:19:d9:b1:9c:89:d6:45:01:
         36:7c:d8:80:b6:49:5c:d1:75:72:9e:89:b2:df:ae:a2:8d:a3:
         c0:62:06:37:9d:e4:05:3a:db:b1:97:8c:92:2e:8e:ef:b1:24:
         d3:a4:3b:ec:f0:73:cb:65:03:f5:62:e3:5d:9f:35:0b:5b:65:
         1c:c8:e3:c9:96:1f:1b:a4:69:57:e4:b0:44:3f:5f:05:65:e1:
         e6:0d:7c:86:58:a3:4f:b1:53:8e:a4:89:55:ec:eb:e5:32:0d:
         80:a6:1f:3a:33:a7:c7:ab:a7:89:c7:00:ef:fd:2b:04:07:71:
         15:6b:b8:0f:20:dc:2f:d6:1f:62:cf:01:15:a2:f6:81:ec:fb:
         9e:3d:32:8e:be:34:c5:5f:77:10:e0:de:1d:33:62:5f:fa:93:
         e1:d0:37:49:1e:27:c7:74:59:6b:1e:3c:d4:86:07:b9:29:b7:
         c4:4f:13:ac:db:a6:0d:54:98:4e:10:84:87:2f:fd:31:25:1c:
         e0:c0:c4:e5:16:6d:38:ca:da:07:f1:b5:12:3f:6f:06:49:2f:
         13:2e:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----