This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b076af15-ae01-4399-a03e-d6ddd25f1997.roa
File:                     b076af15-ae01-4399-a03e-d6ddd25f1997.roa (raw, json)
Hash identifier:          Uqjsm0XCmzE6B9wRrfQ6L7XaRGQixZEcsQztFm3aXFY=
Subject key identifier:   A7:F8:FE:41:B5:CD:73:24:5A:FA:59:5C:EF:79:E4:22:CF:2A:91:BC
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7FEF01E2B712EEDF9145D21E04884ECAF588CBFE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b076af15-ae01-4399-a03e-d6ddd25f1997.roa
Signing time:             Mon 11 Nov 2024 00:00:00 +0000
ROA not before:           Mon 11 Nov 2024 00:00:00 +0000
ROA not after:            Mon 16 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ef:01:e2:b7:12:ee:df:91:45:d2:1e:04:88:4e:ca:f5:88:cb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 11 00:00:00 2024 GMT
            Not After : Dec 16 23:59:59 2024 GMT
        Subject: serialNumber=ec2724e8645af7f13dc9266ca72cb7c23cd067fa1346be9544e6417a650dd22f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:ba:85:79:ba:e8:06:66:a8:7a:19:29:06:
                    66:fb:e5:73:24:91:c9:c0:a7:a5:18:31:71:e3:dd:
                    47:dd:32:13:69:d7:c3:5d:f7:a2:c5:da:85:48:6d:
                    e1:b8:4c:f0:3c:8e:48:2e:84:27:eb:27:dd:21:ab:
                    b3:20:a7:67:96:2e:8c:6a:6b:1d:56:29:15:02:1c:
                    47:3a:09:c8:22:2a:5e:d7:8d:55:06:ed:4f:e5:2f:
                    dc:66:e9:19:e8:18:74:a2:91:3c:0a:99:d2:db:d6:
                    d7:de:48:c4:46:8a:13:3d:d1:8b:c8:12:c9:1e:74:
                    e2:bf:cf:21:5e:e1:5f:9b:7f:17:4b:7e:0f:40:df:
                    2c:bc:91:34:00:ec:7f:d7:78:21:50:61:d7:d5:cf:
                    d1:c4:2f:00:da:16:85:c2:af:fb:aa:c8:83:47:b9:
                    11:eb:47:03:66:b4:8c:eb:89:34:95:24:27:2f:0b:
                    dd:57:36:c0:b0:62:b8:48:24:8b:67:3b:bf:f9:65:
                    73:fc:e5:a8:27:3c:5a:88:4b:8e:53:33:9e:80:73:
                    f8:de:25:1b:28:a0:25:84:58:d2:fc:27:58:18:f5:
                    76:c1:31:6f:e1:d3:06:27:6d:ab:cd:a2:15:ce:d5:
                    e7:1b:48:e0:f5:19:0f:e0:09:fc:4e:a0:eb:6d:a5:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F8:FE:41:B5:CD:73:24:5A:FA:59:5C:EF:79:E4:22:CF:2A:91:BC
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b076af15-ae01-4399-a03e-d6ddd25f1997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:e0:f7:8d:c9:f7:5a:b0:33:30:65:f5:06:a8:ef:42:99:
         98:92:9e:ff:67:3d:6f:55:40:f1:1e:78:7d:1a:37:f1:cd:37:
         93:3c:0d:43:9c:2b:9b:c6:7c:09:5f:bd:4d:36:e2:b4:ca:86:
         c7:7c:2f:4b:63:59:70:dd:12:59:18:7d:36:77:a8:9a:d3:a2:
         4e:c2:c0:2c:c2:f9:7f:d0:ca:59:b1:aa:e9:6b:06:84:f3:4b:
         d6:28:50:d5:26:78:31:e9:d9:1e:0b:5e:1d:8a:79:74:e3:ac:
         a7:23:74:5a:39:70:b9:7c:4c:b7:fb:64:e3:b9:f0:09:b2:75:
         31:79:10:ae:e0:88:77:39:9d:a4:51:8b:82:0b:75:1e:af:7e:
         99:6c:83:36:81:75:48:58:09:50:d3:92:bd:c2:dd:e8:3e:8b:
         c3:88:93:39:9a:59:ad:26:1a:14:52:9c:21:40:97:e6:03:e4:
         12:46:0a:dc:74:23:8c:27:f5:c6:28:29:21:dc:d7:91:e6:83:
         ad:3c:d9:0c:76:16:32:96:3e:12:97:4b:28:b2:e0:48:b5:42:
         d1:c8:78:14:05:3d:6f:17:a4:4f:28:fb:10:bc:d2:06:51:a5:
         ec:d4:6c:bf:29:6c:54:e3:fa:1e:26:76:33:f1:bf:5d:eb:a4:
         af:95:0b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 22:23:38 2025 by rpki-client