Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/40fd236d-3bdc-3348-8667-257ffc06e7a5.roa
File: 40fd236d-3bdc-3348-8667-257ffc06e7a5.roa (raw, json)
Hash identifier: IQLHpTOsWMsXtUuZlsmvQYfqFkEVzg6izftO3ImzvtE=
Subject key identifier: 60:96:E7:72:02:B4:63:BC:9C:D3:2D:97:55:56:A4:14:BE:BA:A1:67
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D4665D5CA16660A79E9AC1600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/40fd236d-3bdc-3348-8667-257ffc06e7a5.roa
Signing time: Sun 04 Jan 2026 02:00:30 +0000
ROA not before: Sun 04 Jan 2026 02:00:30 +0000
ROA not after: Sat 04 Apr 2026 01:00:30 +0000
asID: 273039
IP address blocks: 149.100.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:46:65:d5:ca:16:66:0a:79:e9:ac:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 4 02:00:30 2026 GMT
Not After : Apr 4 01:00:30 2026 GMT
Subject: CN=5570736c-cadd-40de-9d44-fa3b499f5d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f8:89:53:9f:85:63:9b:02:07:2c:43:14:6b:
1d:29:d4:e9:e0:42:24:4a:50:a3:56:ce:68:2b:50:
b3:65:fa:37:27:f0:bd:de:51:2b:5e:9f:41:4d:27:
31:32:b0:f3:3b:42:5f:da:f4:68:b3:8a:f4:36:b6:
cd:ef:68:80:4c:bb:c7:53:3f:05:28:14:d8:e7:17:
29:e7:35:0b:08:88:73:f5:2b:4b:3d:77:50:1f:61:
51:43:af:1a:cd:38:15:3e:0a:c4:c3:41:35:be:3d:
c5:e6:e9:9a:45:4b:14:c9:fa:f2:54:a7:02:fd:d1:
ed:0b:a7:35:48:ad:60:f8:56:9d:8e:d2:76:25:24:
fb:dd:c4:92:e7:2a:ee:b5:8a:cd:34:93:8f:bf:85:
47:53:51:7a:db:65:e2:9d:1b:af:b5:46:49:e9:fc:
97:13:b1:ba:ac:7d:ae:7c:53:6e:67:5c:e8:38:44:
11:2d:58:75:ff:12:b3:e9:40:d1:bb:a4:e6:32:41:
12:ac:e7:67:c8:43:d8:a0:e2:d7:08:37:60:51:92:
3e:fa:f3:ed:43:4b:c7:67:02:59:07:dd:78:27:dc:
64:9d:90:ff:04:2c:78:08:77:a8:96:83:a5:d5:57:
42:63:7c:3d:fd:03:04:87:1b:4f:f3:14:63:ca:a1:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:E7:72:02:B4:63:BC:9C:D3:2D:97:55:56:A4:14:BE:BA:A1:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/40fd236d-3bdc-3348-8667-257ffc06e7a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
149.100.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:04:58:81:62:5d:f4:25:8a:60:ac:43:24:59:1d:7b:17:a3:
1a:74:b0:04:ef:7d:a3:1f:97:ef:8e:21:ca:2b:c1:71:e6:1b:
d7:16:0b:46:bf:77:7e:c1:65:f7:85:67:22:4e:a3:36:3b:63:
98:20:df:4d:6e:0c:11:ec:0d:bf:8a:6e:5c:4d:09:82:f1:64:
d1:64:87:f8:93:a4:85:12:51:0b:8d:4b:e9:54:38:a4:70:a7:
2d:f9:db:02:0c:48:ef:5c:12:ae:6f:1a:d4:43:c0:b8:41:12:
78:8f:b1:7c:f4:6f:90:43:37:16:68:44:16:61:98:0a:7f:26:
bc:cf:c4:77:32:17:01:6f:33:78:16:d3:ef:00:d7:5d:5f:10:
f2:1d:ca:eb:04:60:6d:79:86:11:c9:c4:dd:13:2b:c7:5c:08:
8e:bd:81:c3:44:c0:98:f8:83:18:17:88:e9:08:14:e3:a1:a5:
32:89:c6:b5:8c:82:b9:57:f3:46:4b:56:fe:32:df:8e:ad:32:
eb:10:34:ce:48:bf:8d:66:86:fa:b4:6d:24:8e:b5:71:d1:74:
2f:78:96:d4:8f:c1:cd:7e:96:14:5e:8f:27:87:85:52:60:93:
3c:90:bc:bc:ab:75:e0:96:a3:12:27:6b:10:bf:14:7c:56:8f:
99:42:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:30:03 2026 by rpki-client