This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01c0067e-e771-4e6b-b2b4-f83d5fda1d98.roa
File:                     01c0067e-e771-4e6b-b2b4-f83d5fda1d98.roa (raw, json)
Hash identifier:          hnCRNx5isfkIAPgpVHzNZ0vrrfuBwaIOIwOJXPFAHoQ=
Subject key identifier:   E3:70:E1:BB:77:4A:DF:A2:B5:FE:A3:94:18:E1:50:FB:F3:06:83:5C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1BBF40D2CAE0F1F16B85C577A3E8713D08EC1A2A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01c0067e-e771-4e6b-b2b4-f83d5fda1d98.roa
Signing time:             Wed 30 Apr 2025 13:03:16 +0000
ROA not before:           Wed 30 Apr 2025 13:03:16 +0000
ROA not after:            Wed 04 Jun 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bf:40:d2:ca:e0:f1:f1:6b:85:c5:77:a3:e8:71:3d:08:ec:1a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 30 13:03:16 2025 GMT
            Not After : Jun  4 23:59:59 2025 GMT
        Subject: serialNumber=1de924b5576d9b89857a2b3002163f5d7c8ad4d571c1aeae24667a197977595f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:57:4e:67:df:ad:2b:41:80:b0:b9:8e:88:65:
                    a1:f4:93:6e:9b:56:fa:42:56:e8:c8:f1:28:5a:0f:
                    e5:d0:cc:ba:e0:c1:ee:18:f9:f7:f9:b1:01:31:78:
                    6f:f4:19:65:2f:f3:2d:f3:3a:cf:5e:f5:71:96:cc:
                    b5:b4:a6:2f:c0:32:bb:32:31:f5:6a:89:e7:c1:ef:
                    0f:fa:b0:7f:71:6f:9d:c5:2a:a5:76:f6:d7:4d:39:
                    ac:0f:25:0c:fb:fe:c3:5c:35:79:fb:bc:f1:92:82:
                    cb:37:34:2a:72:8f:f6:1a:96:1c:ec:74:e4:ce:bb:
                    00:9b:ca:e6:79:8f:de:9e:64:92:8b:ed:ef:cc:c4:
                    4a:94:53:7b:7a:e9:dd:fe:a4:24:ba:b6:ab:58:86:
                    da:17:fe:cf:3f:de:ff:10:d4:f1:a8:73:1b:97:d2:
                    17:cc:ff:fb:25:ac:80:92:63:3a:c5:9b:c4:01:a9:
                    f0:0e:94:d9:2f:10:14:e1:43:c1:8c:be:07:8a:58:
                    e4:4f:5f:25:27:f8:34:ce:1a:42:4d:66:91:92:5f:
                    c0:19:17:68:31:01:33:24:73:97:df:b1:aa:40:19:
                    7f:62:4e:03:16:38:8c:01:58:3f:4f:de:77:ef:9b:
                    32:d0:08:b8:6a:55:73:c6:cb:ec:2f:80:38:68:21:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:70:E1:BB:77:4A:DF:A2:B5:FE:A3:94:18:E1:50:FB:F3:06:83:5C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01c0067e-e771-4e6b-b2b4-f83d5fda1d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:40:51:b3:a5:58:00:36:24:0b:15:c9:46:bb:7a:fe:56:f3:
         f8:e5:fd:4f:44:f3:63:88:11:10:ca:d1:bf:cd:9b:5b:b4:86:
         47:fb:17:9b:87:22:84:3e:a0:3e:c7:6b:ef:75:4e:e1:c2:54:
         f6:82:90:ca:07:bb:0f:7c:7d:50:38:c7:de:a3:0c:cd:7e:ce:
         60:39:29:7d:b7:1f:b3:d2:f4:60:59:cc:d1:f2:97:37:64:8d:
         5c:e0:e7:61:7f:19:9c:03:5a:dd:3f:2b:10:66:9a:76:a2:25:
         75:50:49:36:8b:32:60:7a:08:61:a6:6a:a2:00:c9:22:85:7d:
         64:f6:42:57:ad:0d:b2:65:c7:7b:0c:7c:6f:e8:f4:64:0e:99:
         f3:de:1e:cc:eb:98:b6:eb:01:1a:22:9a:da:94:a8:47:ce:07:
         c6:0c:78:34:64:a3:5f:de:74:6f:da:39:2a:e3:8e:4b:67:18:
         88:75:8b:a0:79:9a:7c:c8:4c:ae:50:6e:5d:9b:93:e4:ff:83:
         0d:ec:13:c4:a9:14:a0:5a:d8:e2:f5:23:8a:96:9d:d9:f1:bf:
         1c:8e:fb:48:6d:27:fe:94:81:94:5d:4a:db:6f:74:10:2f:37:
         71:b5:45:9c:d5:92:ec:a1:b9:19:2b:b5:40:fe:a2:d9:b2:2f:
         dc:d8:b7:d1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUG79A0srg8fFrhcV3o+hxPQjsGiowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDMwMTMwMzE2WhcNMjUwNjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZGU5MjRiNTU3NmQ5Yjg5ODU3YTJiMzAwMjE2M2Y1ZDdj
OGFkNGQ1NzFjMWFlYWUyNDY2N2ExOTc5Nzc1OTVmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhV05n360rQYCwuY6IZaH0k26bVvpCVujI8ShaD+XQzLrg
we4Y+ff5sQExeG/0GWUv8y3zOs9e9XGWzLW0pi/AMrsyMfVqiefB7w/6sH9xb53F
KqV29tdNOawPJQz7/sNcNXn7vPGSgss3NCpyj/YalhzsdOTOuwCbyuZ5j96eZJKL
7e/MxEqUU3t66d3+pCS6tqtYhtoX/s8/3v8Q1PGocxuX0hfM//slrICSYzrFm8QB
qfAOlNkvEBThQ8GMvgeKWORPXyUn+DTOGkJNZpGSX8AZF2gxATMkc5ffsapAGX9i
TgMWOIwBWD9P3nfvmzLQCLhqVXPGy+wvgDhoIUYvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU43Dhu3dK36K1/qOUGOFQ+/MGg1wwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzAxYzAwNjdlLWU3NzEtNGU2Yi1iMmI0LWY4M2Q1ZmRhMWQ5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABNAUbOlWAA2JAsVyUa7ev5W8/jl
/U9E82OIERDK0b/Nm1u0hkf7F5uHIoQ+oD7Ha+91TuHCVPaCkMoHuw98fVA4x96j
DM1+zmA5KX23H7PS9GBZzNHylzdkjVzg52F/GZwDWt0/KxBmmnaiJXVQSTaLMmB6
CGGmaqIAySKFfWT2QletDbJlx3sMfG/o9GQOmfPeHszrmLbrARoimtqUqEfOB8YM
eDRko1/edG/aOSrjjktnGIh1i6B5mnzITK5Qbl2bk+T/gw3sE8SpFKBa2OL1I4qW
ndnxvxyO+0htJ/6UgZRdSttvdBAvN3G1RZzVkuyhuRkrtUD+otmyL9zYt9E=
-----END CERTIFICATE-----
Generated at Wed Dec 17 21:05:09 2025 by rpki-client