This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0181596d-bd5b-44af-ba8d-65c3414c23f6.roa
File:                     0181596d-bd5b-44af-ba8d-65c3414c23f6.roa (raw, json)
Hash identifier:          fPeCivOYYk/2yEwujNilqffW7ZXW2oK2PYTspIlXzxk=
Subject key identifier:   29:CC:3C:19:DC:24:6A:DC:4F:84:9C:42:D5:4E:29:CC:57:BC:EF:B1
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       337E8ACBFDD78A47AD93370DB1F8A8BA2646E916
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0181596d-bd5b-44af-ba8d-65c3414c23f6.roa
Signing time:             Thu 01 May 2025 14:48:18 +0000
ROA not before:           Thu 01 May 2025 14:48:18 +0000
ROA not after:            Thu 05 Jun 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7e:8a:cb:fd:d7:8a:47:ad:93:37:0d:b1:f8:a8:ba:26:46:e9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May  1 14:48:18 2025 GMT
            Not After : Jun  5 23:59:59 2025 GMT
        Subject: serialNumber=3d5238fbc57b1b728e8aa91650ee3939ca8e4ebd1613cda74e3a212e9a7c897a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:99:14:91:b0:af:75:49:44:15:27:69:f5:87:
                    fc:10:ad:31:9b:cb:31:a2:73:0a:f9:b1:cb:33:47:
                    2e:cb:80:13:8d:23:dc:ba:3a:79:82:97:97:e1:ef:
                    9b:94:e6:47:4d:55:d0:9d:1d:1e:68:40:5b:74:f8:
                    2d:79:8a:f9:0a:cc:8a:a1:8c:30:49:77:bb:55:55:
                    5e:5b:5e:a9:86:f3:09:68:a3:0d:94:2b:51:cf:9d:
                    d1:16:74:77:28:63:61:1a:8f:c1:de:78:da:a1:b8:
                    e8:14:35:c2:bd:4a:24:cc:fc:04:f1:42:07:eb:00:
                    e4:9b:0f:9c:a3:b6:28:41:95:a2:cd:fd:66:6f:ca:
                    8f:a0:55:63:ab:4d:db:e3:98:7a:5b:e0:59:b9:02:
                    35:02:9c:41:60:d4:f4:e5:3e:6c:d9:6e:1b:a6:11:
                    59:c1:42:4d:fd:ab:69:86:3f:80:39:3f:e3:99:a1:
                    43:a7:cd:59:d9:bb:79:ad:98:c4:09:66:6c:57:2a:
                    4c:4d:72:d8:a2:4a:a2:93:f4:23:10:15:aa:ef:46:
                    02:15:7c:69:59:89:e3:dd:dd:42:a4:7b:15:e2:34:
                    c3:be:ce:15:84:eb:cf:b1:e8:40:73:c6:92:73:62:
                    31:3e:2b:0d:b0:a5:c9:a2:94:91:35:b6:b8:bc:a5:
                    96:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CC:3C:19:DC:24:6A:DC:4F:84:9C:42:D5:4E:29:CC:57:BC:EF:B1
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0181596d-bd5b-44af-ba8d-65c3414c23f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:fb:d5:02:30:50:7b:63:a4:f3:89:d4:ea:e5:22:01:99:39:
         30:00:c4:aa:60:54:50:cf:68:f1:67:fe:3f:f6:25:fb:9e:57:
         65:19:fb:ab:98:7b:be:cd:dc:b7:68:14:e4:ae:58:f9:7f:08:
         96:92:bd:f9:6b:50:e8:38:10:d0:a1:6b:a1:ce:68:75:39:bd:
         8a:10:58:01:95:a3:76:bc:82:d7:ad:f8:e1:09:2a:36:97:91:
         30:c9:ce:dc:96:0a:a3:c4:eb:55:bd:4c:33:a8:43:60:d3:28:
         f6:d6:47:73:8f:71:d0:cc:7a:e8:af:0b:83:e4:d1:28:38:22:
         bf:de:f8:ec:c7:68:e7:82:3e:4e:9c:eb:27:e8:01:2c:fc:ad:
         53:19:ee:dc:a8:b5:ad:25:df:63:3a:17:8f:c6:b3:1c:e1:f0:
         c4:9c:90:33:ef:c5:9b:db:11:71:f5:ed:56:19:1e:81:4d:d2:
         fe:44:6e:b4:f7:36:1f:97:a5:2f:17:8b:0a:e5:77:26:57:6d:
         f4:46:a8:16:c6:13:ae:ee:ac:20:f2:77:83:f7:c4:58:38:aa:
         33:e3:f6:60:87:62:f5:f7:b4:ef:eb:52:4a:70:e7:aa:63:bf:
         7f:94:e7:9f:07:33:bb:80:e7:a4:fb:83:72:64:0e:00:f9:8d:
         75:e3:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:02:03 2025 by rpki-client