This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/131c7663-4967-4c9e-a903-926e7df4ef13.roa
File:                     131c7663-4967-4c9e-a903-926e7df4ef13.roa (raw, json)
Hash identifier:          oscGugV11Oz34o2AGJTwda61Ly9cgnN8wqJ0gH0vqNs=
Subject key identifier:   36:D9:29:7F:7A:1D:37:29:1C:4C:28:A2:63:6B:2F:A3:93:C4:5D:65
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1488EA5CB55F1B00E2B2283A16BAD0D2FD2C2A5B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/131c7663-4967-4c9e-a903-926e7df4ef13.roa
Signing time:             Sun 13 Apr 2025 08:38:19 +0000
ROA not before:           Sun 13 Apr 2025 08:38:19 +0000
ROA not after:            Sun 18 May 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:88:ea:5c:b5:5f:1b:00:e2:b2:28:3a:16:ba:d0:d2:fd:2c:2a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 13 08:38:19 2025 GMT
            Not After : May 18 23:59:59 2025 GMT
        Subject: serialNumber=ad88974e3ef5265dcdd72eaff1e482c85c3ec6d96c1da1a85a4f1a3164fc7b04, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:ba:75:c2:b6:5c:5d:d3:ba:81:a5:76:82:
                    e1:1b:b0:b2:9c:6f:a7:8e:2d:13:d7:67:b3:a0:59:
                    80:2b:75:88:86:6c:87:d7:ca:53:35:bf:33:ac:d7:
                    87:dc:24:7c:b5:e5:96:28:b0:66:00:23:f0:2c:fb:
                    37:30:48:cb:da:c3:4a:e8:64:b5:f4:80:17:c3:78:
                    b1:e8:cf:88:50:7c:49:3b:13:63:3a:85:69:fb:26:
                    b2:bc:57:33:c4:4a:36:04:0e:11:10:6f:02:db:a1:
                    cd:62:a8:0b:fa:61:c4:3e:66:2e:ad:3c:12:8a:fc:
                    59:40:c7:02:d0:59:c3:91:68:23:ec:51:52:f8:97:
                    d7:70:52:c9:34:49:3f:93:c6:e1:74:0c:57:4a:f6:
                    9e:44:04:27:1b:98:d9:41:4b:d2:de:0f:ac:c3:17:
                    fd:c9:41:be:39:2f:fb:91:17:70:da:2f:87:df:41:
                    c6:d5:ac:9b:70:77:6c:bf:9a:d3:e1:f6:2e:02:7e:
                    11:0e:01:e1:cf:e9:2e:7e:f7:67:6e:0b:d2:4a:53:
                    01:17:a4:a0:8e:6a:90:f0:e2:d8:53:6e:cf:ac:c3:
                    42:25:73:94:45:42:f8:e9:c0:c1:2e:10:20:85:2d:
                    c9:6d:7a:5b:f6:2f:d9:3f:a3:cd:e4:32:74:06:f3:
                    ae:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D9:29:7F:7A:1D:37:29:1C:4C:28:A2:63:6B:2F:A3:93:C4:5D:65
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/131c7663-4967-4c9e-a903-926e7df4ef13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:40:5a:c5:6f:41:da:9c:bd:d0:f6:35:f1:a4:27:a4:96:65:
         eb:81:82:64:0a:54:59:00:53:95:88:a8:bd:49:c7:6e:7f:0e:
         fa:33:33:e3:75:28:58:c7:25:c1:4a:7a:40:3f:94:8b:94:16:
         46:97:01:20:72:33:6c:3e:2d:ff:c8:77:15:40:5e:d0:4c:b6:
         f4:b9:19:6f:b7:b6:42:9c:12:17:71:45:a2:02:98:c2:e2:74:
         0f:4c:61:0b:d5:0b:18:19:c5:aa:f8:4c:cb:5f:0c:e1:e6:dd:
         a0:98:f1:c9:80:be:2d:85:18:25:cd:f0:1c:e8:ba:28:67:c2:
         cf:e2:19:70:f5:20:21:94:bd:da:3d:ec:9c:34:5b:96:75:76:
         ef:ec:40:67:46:be:1b:1e:2c:20:1b:cd:fe:10:ba:75:b3:a1:
         c8:c0:79:8b:6e:ea:c0:3f:93:93:08:13:db:e9:a5:12:29:2f:
         7e:f6:e9:f5:ab:63:6e:08:1c:9e:91:e6:56:2a:2e:c7:71:d5:
         86:db:a5:c7:7f:32:de:fe:79:75:1a:cd:97:31:4d:bf:ee:d0:
         2a:53:76:18:3e:29:92:97:b5:cb:aa:e9:e9:87:0e:0a:00:ba:
         70:ec:a6:ae:68:5b:e9:f1:9d:e6:4f:ff:96:c2:b6:d0:6f:c7:
         e9:d1:79:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 21:07:10 2025 by rpki-client