This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/9f39af36-3ab1-390d-8312-0f8d3f9806e0.roa
File:                     9f39af36-3ab1-390d-8312-0f8d3f9806e0.roa (raw, json)
Hash identifier:          EJAZSKea9j3ShHNofSN94c+0p5QIJu04Bmty7IsJrQ0=
Subject key identifier:   38:52:85:10:96:96:0A:55:29:A7:CE:1A:CD:04:FF:C5:CC:70:43:88
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285849B24902A7D38E94E1057B8C80
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/9f39af36-3ab1-390d-8312-0f8d3f9806e0.roa
Signing time:             Wed 30 Apr 2025 09:34:49 +0000
ROA not before:           Wed 30 Apr 2025 09:34:49 +0000
ROA not after:            Tue 29 Jul 2025 09:34:49 +0000
asID:                     23470
IP address blocks:        140.235.65.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:49:02:a7:d3:8e:94:e1:05:7b:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Apr 30 09:34:49 2025 GMT
            Not After : Jul 29 09:34:49 2025 GMT
        Subject: CN=ee23a28e-e432-4e43-acd3-174a729d9250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:de:d4:da:af:f4:22:39:68:cd:17:f4:d1:de:
                    36:4a:dc:e6:e2:86:c2:2d:e8:cb:5b:c7:d9:cd:c0:
                    01:4c:ca:06:d4:b6:09:a4:d6:4a:36:31:1f:f3:0f:
                    f4:9a:0f:be:b3:44:b8:4f:3c:11:25:85:ab:38:73:
                    9a:91:d2:22:11:fd:9d:6e:b0:5d:75:c8:4c:60:53:
                    78:9a:1c:7c:78:29:33:df:00:90:38:39:91:76:3f:
                    ce:1e:35:2e:80:e5:78:11:a3:76:12:ea:03:d2:b9:
                    49:4b:9c:0b:80:fd:1a:d7:bd:eb:99:97:1f:c4:93:
                    01:97:7d:32:ab:d8:22:19:17:34:bb:4d:37:f3:07:
                    d7:ad:c4:ea:2c:20:98:63:84:0e:c5:bc:26:83:4f:
                    6d:07:c0:30:9e:a3:0c:e8:40:d1:99:3f:dc:c6:3f:
                    3a:14:7b:31:da:fa:a6:3e:4e:3e:2d:04:70:d9:08:
                    3f:97:6b:29:4a:55:7e:d8:a6:59:54:d9:51:41:9c:
                    bb:34:35:8c:aa:5c:16:2c:b3:28:ad:52:a1:d8:9c:
                    75:fd:7e:56:90:54:40:a2:40:27:04:51:52:46:a5:
                    c5:7d:2a:48:53:db:2d:48:2f:e4:5a:bc:a5:13:90:
                    c6:73:44:38:c1:cf:30:d6:46:bf:09:0e:2e:ef:16:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:52:85:10:96:96:0A:55:29:A7:CE:1A:CD:04:FF:C5:CC:70:43:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/9f39af36-3ab1-390d-8312-0f8d3f9806e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e7:60:0e:3c:00:5e:89:16:69:42:78:bc:89:07:1e:8e:68:
         74:a4:ce:6f:19:1a:1a:0d:33:a7:3c:40:de:4f:9f:b8:a3:b8:
         3f:04:45:ab:ef:1b:ea:f5:05:b6:77:e9:50:13:18:d5:8e:db:
         4b:60:94:ea:a6:30:81:da:d8:2a:dd:6e:94:56:75:ba:e4:6b:
         2b:0a:77:05:b5:bc:eb:8b:8d:59:bc:c5:3a:32:50:86:47:b3:
         55:43:53:08:79:91:ad:0d:d0:e4:9f:89:0e:8f:e8:ab:de:d8:
         77:00:4f:b6:df:cb:a8:c8:1e:ac:d1:72:73:d7:13:ac:80:13:
         d2:47:0e:8b:ce:53:44:57:d1:e8:dd:4e:52:cb:d7:dc:ec:f2:
         4d:65:fe:a3:5c:15:11:53:0e:34:45:0d:e8:23:28:06:64:f3:
         c6:fa:8e:be:21:2f:95:e1:d9:90:48:bc:9f:3e:70:45:df:79:
         19:7a:88:ac:5a:ce:06:1d:b1:b5:21:34:12:ae:33:78:3a:9a:
         d8:23:d9:c6:c1:0f:44:a5:72:56:fd:1a:68:4d:fc:85:d0:f9:
         6b:5e:10:55:bc:04:ff:68:3d:4c:55:c5:af:75:d3:f0:d0:a3:
         40:15:70:61:49:bd:70:08:95:c6:4d:47:40:69:8e:fe:f6:0a:
         cf:54:75:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmySQKn046U4QV7jIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjY5ZDI0ODEtOWI1Zi00MWYyLWEwOWMtOTI5OTRhM2Fl
MzM1MB4XDTI1MDQzMDA5MzQ0OVoXDTI1MDcyOTA5MzQ0OVowLzEtMCsGA1UEAxMk
ZWUyM2EyOGUtZTQzMi00ZTQzLWFjZDMtMTc0YTcyOWQ5MjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN7U2q/0IjlozRf00d42Stzm4obCLejLW8fZ
zcABTMoG1LYJpNZKNjEf8w/0mg++s0S4TzwRJYWrOHOakdIiEf2dbrBddchMYFN4
mhx8eCkz3wCQODmRdj/OHjUugOV4EaN2EuoD0rlJS5wLgP0a173rmZcfxJMBl30y
q9giGRc0u0038wfXrcTqLCCYY4QOxbwmg09tB8AwnqMM6EDRmT/cxj86FHsx2vqm
Pk4+LQRw2Qg/l2spSlV+2KZZVNlRQZy7NDWMqlwWLLMorVKh2Jx1/X5WkFRAokAn
BFFSRqXFfSpIU9stSC/kWrylE5DGc0Q4wc8w1ka/CQ4u7xZVQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhShRCWlgpVKafOGs0E/8XMcEOIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlk
MjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5NGEzYWUzMzUvOWYzOWFmMzYtM2FiMS0z
OTBkLTgzMTItMGY4ZDNmOTgwNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjY5ZDI0ODEtOWI1Zi00MWYyLWEw
OWMtOTI5OTRhM2FlMzM1LzI2OWQyNDgxLTliNWYtNDFmMi1hMDljLTkyOTk0YTNh
ZTMzNS5jcmwwHwYDVR0jBBgwFoAUb9iBPHMZnPatpduCmqBTFv8j7VQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlkMjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5
NGEzYWUzMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOtBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHnYA48AF6JFmlCeLyJBx6OaHSkzm8ZGhoNM6c8QN5Pn7ijuD8ERavv
G+r1BbZ36VATGNWO20tglOqmMIHa2CrdbpRWdbrkaysKdwW1vOuLjVm8xToyUIZH
s1VDUwh5ka0N0OSfiQ6P6Kve2HcAT7bfy6jIHqzRcnPXE6yAE9JHDovOU0RX0ejd
TlLL19zs8k1l/qNcFRFTDjRFDegjKAZk88b6jr4hL5Xh2ZBIvJ8+cEXfeRl6iKxa
zgYdsbUhNBKuM3g6mtgj2cbBD0Slclb9GmhN/IXQ+WteEFW8BP9oPUxVxa910/DQ
o0AVcGFJvXAIlcZNR0Bpjv72Cs9UdWg=
-----END CERTIFICATE-----