This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/41f2866b-47d0-3a08-a4e9-29e2c32c6d5b.roa
File:                     41f2866b-47d0-3a08-a4e9-29e2c32c6d5b.roa (raw, json)
Hash identifier:          vQGGxK7qSaNxjjJHKg9DGVpAS9cCkg401DWInfjsWK8=
Subject key identifier:   94:36:97:36:17:2C:F8:38:2A:E3:A1:5E:CA:93:A7:DD:AF:2C:D1:CE
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584AE4611BDE5FAB7716B0ACE200
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/41f2866b-47d0-3a08-a4e9-29e2c32c6d5b.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     46450
IP address blocks:        142.214.132.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:1b:de:5f:ab:77:16:b0:ac:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=b7c23615-97de-43a7-b58b-f0b5c907f551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:52:7a:99:54:c9:4b:43:ce:b7:3f:0d:b3:54:
                    ce:36:a4:0b:95:78:8b:1f:ed:bd:b5:80:a5:df:00:
                    23:69:7d:cd:e4:62:20:fd:03:43:3e:45:22:b9:5f:
                    15:6e:2c:b6:5b:d3:c6:34:92:28:e0:6f:2e:71:1b:
                    69:fb:90:22:18:6e:8b:0b:01:d4:f7:02:c8:45:a8:
                    1a:29:a0:85:d1:84:d9:d2:ce:50:2a:b0:09:cf:56:
                    d2:0a:c5:67:3b:3c:51:51:72:83:27:58:1d:5f:c4:
                    3d:47:10:03:64:38:e7:01:2d:8b:e4:29:79:f9:e3:
                    2f:21:25:87:c9:ae:76:71:26:5c:51:89:30:aa:bd:
                    0a:01:5f:64:cf:57:51:41:cb:fa:f9:fc:9c:fb:4f:
                    68:2e:3f:28:10:59:da:fc:de:16:91:00:b4:90:aa:
                    03:51:ce:41:77:3a:04:c6:ba:65:bd:7a:f6:2a:e9:
                    85:aa:50:8a:c0:91:e2:c5:a2:6c:81:b2:02:f4:64:
                    fe:e5:2f:e4:7b:c2:fa:18:91:8b:3b:be:33:72:b6:
                    c9:65:37:68:c1:f2:65:4a:ed:80:75:e9:44:b5:11:
                    6f:de:ec:43:4c:4b:dc:38:6b:ab:ea:13:ec:6a:ed:
                    23:71:9c:28:49:1a:80:0b:7e:96:72:64:5c:9b:7a:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:36:97:36:17:2C:F8:38:2A:E3:A1:5E:CA:93:A7:DD:AF:2C:D1:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/41f2866b-47d0-3a08-a4e9-29e2c32c6d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:31:76:81:1b:a1:5e:59:80:c1:8a:d7:c6:c4:fe:8d:27:6c:
         73:58:4c:a1:10:6b:e6:58:dc:e0:a1:b2:06:f5:66:ed:0e:80:
         7f:7a:c2:82:d4:ad:4a:4b:bf:99:bf:ad:67:1e:db:fe:2c:67:
         76:b6:1a:93:ab:19:bc:03:85:3e:3b:b9:6f:39:a8:2a:eb:df:
         95:39:58:af:29:e0:c7:18:bb:72:2f:c0:13:89:1c:0f:c8:18:
         6e:f0:3b:e7:90:1a:90:f0:e8:00:ba:6d:37:24:30:32:75:a4:
         15:ce:78:47:61:8b:8b:de:ee:7e:cf:e4:8a:e3:89:87:cd:cd:
         5b:30:68:4e:58:3d:d9:2d:1a:0f:45:79:17:1e:1e:56:f2:95:
         4c:94:91:41:e6:32:5a:e0:11:a7:af:a4:90:ac:41:e5:19:57:
         c3:33:7b:aa:17:e6:bf:37:56:67:0c:8f:5f:5d:24:02:04:19:
         eb:ca:8a:dd:50:df:82:c7:a1:94:19:f1:83:1f:3d:05:70:df:
         95:03:e4:c3:ec:f0:25:54:21:68:61:8f:e9:9d:8f:62:2a:ae:
         6b:56:35:d7:b1:26:49:83:7e:1a:98:75:64:3f:21:72:98:ce:
         e2:6e:23:27:5b:c9:bb:d9:e8:85:66:7a:a3:cf:b9:b8:4f:15:
         0c:7a:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----