This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf1cb980-1478-40c7-9e1e-962fcdc85e27.roa
File:                     bf1cb980-1478-40c7-9e1e-962fcdc85e27.roa (raw, json)
Hash identifier:          FEGda63n4jJAA7dq9vPdIjq7wc8ddt2Fz69lW8AiIqU=
Subject key identifier:   6D:0B:4D:E8:E9:D8:57:BD:CE:35:D5:1B:6E:01:40:66:5F:AA:6C:FE
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       67BACA96127E6B558BC52EE1CA972637DDE63F5E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf1cb980-1478-40c7-9e1e-962fcdc85e27.roa
Signing time:             Sun 07 Jan 2024 00:00:00 +0000
ROA not before:           Sun 07 Jan 2024 00:00:00 +0000
ROA not after:            Sun 11 Feb 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ba:ca:96:12:7e:6b:55:8b:c5:2e:e1:ca:97:26:37:dd:e6:3f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan  7 00:00:00 2024 GMT
            Not After : Feb 11 23:59:59 2024 GMT
        Subject: serialNumber=dc251f7fa58e95be80f29fd255fa5665aa6e4164c16e34ae3c8b2b679d51825e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:a5:60:66:1a:bc:50:74:de:bd:e5:a3:0c:
                    46:75:39:6a:81:1c:22:f7:5f:ec:f7:19:ff:5c:9d:
                    33:d1:b8:fe:c2:f7:2e:ce:73:e6:8e:d7:9f:b8:e8:
                    48:5a:85:c2:aa:38:23:6b:a5:6a:57:ac:dd:2b:97:
                    d1:68:c2:41:76:87:9c:65:0b:c5:ce:e4:7c:6e:d0:
                    ce:5e:63:83:6d:b4:ab:cf:1a:45:6d:26:10:73:8e:
                    65:90:f6:9a:9b:9b:10:68:d3:07:21:62:10:74:37:
                    af:d5:de:e7:c1:f5:71:ea:eb:a8:28:98:e0:dc:84:
                    90:04:c7:f6:86:98:d7:7f:bb:19:b7:98:0b:99:ad:
                    e8:83:2a:7c:9e:f4:c0:4c:8a:22:3a:38:de:2a:0b:
                    7a:8a:e1:7f:36:2d:96:b0:85:3e:41:3e:de:bf:63:
                    70:54:00:bb:44:18:91:93:b8:ef:29:61:42:4b:49:
                    ce:45:ee:f2:e5:87:29:f6:14:dc:ee:50:0e:a0:d8:
                    3b:36:99:50:e9:a9:1f:62:c2:37:46:9b:06:4a:de:
                    c2:ab:98:60:91:95:35:e8:3f:b4:32:5f:ab:8d:fb:
                    fe:8c:04:6f:f9:c1:0d:55:c7:f9:60:0f:ed:13:d8:
                    bb:55:32:93:4b:40:22:39:3b:38:ed:c7:50:15:14:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:4D:E8:E9:D8:57:BD:CE:35:D5:1B:6E:01:40:66:5F:AA:6C:FE
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf1cb980-1478-40c7-9e1e-962fcdc85e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c2:24:b6:46:74:cb:f4:02:55:04:9a:9f:6d:f9:69:1e:ec:
         c7:28:94:bd:6e:9c:ca:a7:4a:4e:3f:a3:b1:68:7c:ad:22:c8:
         ec:80:ec:ce:1d:93:68:29:b3:50:a7:01:04:0e:0e:7b:f2:2f:
         25:d2:c7:46:40:66:b5:de:6e:d4:36:ab:ae:43:89:90:7a:c4:
         46:1d:7e:f3:3a:f5:19:00:14:20:b6:f5:9b:b3:9d:cf:e5:65:
         53:e5:3a:1a:56:59:6a:b9:27:64:92:cf:b7:7f:83:74:a4:f4:
         9a:fa:14:8a:2f:73:11:94:f7:3b:47:b7:de:38:37:a4:b4:c0:
         63:e8:3f:7f:f3:56:25:b7:1d:f5:16:29:e7:9a:43:d2:5c:4a:
         22:71:51:72:2d:20:29:7f:29:c7:44:29:1b:86:36:f5:1e:47:
         67:7c:fa:90:7d:e5:84:0b:ec:32:31:86:9e:c8:e0:b6:ce:32:
         6a:07:b7:e7:8d:23:46:f6:73:c9:92:80:06:74:90:4f:31:dc:
         77:43:ea:60:90:8c:75:f7:25:8f:7f:7b:a0:30:62:04:ff:4a:
         ab:ee:0a:4a:c8:9e:b6:23:81:3c:26:31:fe:5a:d6:45:39:1b:
         6d:92:a2:8c:ed:d0:bf:40:d3:65:ef:ea:af:31:6b:d9:f8:e4:
         ff:06:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:41:08 2025 by rpki-client