This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e1abd21-763a-4c12-809d-d7d99ba905a2.roa
File:                     1e1abd21-763a-4c12-809d-d7d99ba905a2.roa (raw, json)
Hash identifier:          s3YGDnkOsfRF0BPJkhZM+xwyQPJ6TWAcZ4E05gTMELI=
Subject key identifier:   88:74:BF:36:55:0C:0B:A2:11:70:60:79:3E:68:A1:5C:A4:CB:02:27
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       42228F2A25A5E93AA87EC69F398227FDC5CA2256
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e1abd21-763a-4c12-809d-d7d99ba905a2.roa
Signing time:             Fri 29 Aug 2025 16:51:14 +0000
ROA not before:           Fri 29 Aug 2025 16:51:14 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.249.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:22:8f:2a:25:a5:e9:3a:a8:7e:c6:9f:39:82:27:fd:c5:ca:22:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 29 16:51:14 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=1476b055f350e6bfaf99a54d2929c08d895e05110db41b6d96d85ca16ddba231, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:9f:b9:f4:49:8c:07:31:94:31:7c:8b:fe:
                    ef:2a:50:dc:bb:10:f4:b0:55:f5:12:df:f8:08:26:
                    75:70:6a:38:91:ab:dc:f4:25:e3:bf:5c:f7:d4:e5:
                    cc:c5:a1:c8:89:37:32:58:8e:40:d2:53:67:03:a2:
                    c4:4b:60:5c:bf:36:59:0f:02:c9:fa:49:46:c2:5e:
                    0a:28:25:48:da:b8:93:4c:74:8e:83:19:0f:37:b6:
                    8d:91:62:10:19:d8:12:1a:ca:dd:de:ca:4e:e9:3c:
                    8b:b6:1b:78:94:80:10:dc:7f:97:32:c2:65:e7:a7:
                    c4:db:35:85:98:97:c4:7f:8e:81:a2:f6:03:31:98:
                    cb:9e:b7:44:52:c6:92:ab:de:11:bc:d7:93:12:5b:
                    37:ca:fb:62:83:22:af:40:da:69:2b:b7:0d:9d:d7:
                    7f:fc:a5:fe:af:82:75:aa:33:90:68:15:10:8a:1b:
                    94:1c:a3:45:2d:31:ca:07:d8:f9:37:3e:23:10:05:
                    06:f2:f4:1e:ce:2a:d3:41:09:e3:e5:60:60:b8:5a:
                    1e:12:5d:65:4a:94:25:c5:ff:22:f5:b4:b8:34:f1:
                    73:f3:ae:40:75:41:49:78:6e:a1:f0:35:03:79:72:
                    d2:83:4e:c6:e3:22:27:f8:53:6f:cd:3f:9c:7a:b8:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:74:BF:36:55:0C:0B:A2:11:70:60:79:3E:68:A1:5C:A4:CB:02:27
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e1abd21-763a-4c12-809d-d7d99ba905a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:8b:9e:f6:8c:61:ff:dc:d4:f4:41:0f:06:4e:50:57:99:c7:
         99:b3:97:1d:35:1c:63:85:ba:ff:14:d6:06:60:5e:a7:6d:62:
         0d:ea:ac:07:53:f1:88:5c:61:e6:5a:e6:5d:d4:b1:31:6d:03:
         c1:a5:0e:ba:f0:44:28:fc:44:75:79:43:c8:e6:a6:7f:72:45:
         9e:e5:66:1f:ca:86:4e:aa:c7:b6:de:e9:c5:fb:1b:75:ef:75:
         a3:9f:8c:48:56:fb:be:b3:e5:0d:7d:f3:96:00:20:da:66:f7:
         06:6e:11:3d:a9:63:9d:80:fb:a0:6c:57:0e:87:d1:86:ad:34:
         3e:2c:8c:db:ce:24:a6:71:88:ee:5e:7e:8a:a7:e5:da:87:07:
         80:d5:43:e2:58:7d:8f:69:b3:dd:fb:4d:05:7e:23:a2:3d:da:
         fa:5d:2f:b3:4a:5a:83:d6:50:e5:46:f4:14:79:1a:97:72:4b:
         2b:b1:a7:58:ca:91:15:33:27:4c:b9:b1:25:16:01:cc:1b:e0:
         74:91:00:d4:9a:fc:89:de:0d:bd:8d:3b:f1:31:ee:f7:d1:d7:
         bb:a0:56:57:22:f6:e2:ec:a4:8e:37:33:47:cb:37:56:a8:61:
         b9:69:45:f1:94:31:88:8c:e2:14:52:68:ee:94:cb:17:48:6b:
         ef:18:19:e4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUQiKPKiWl6TqofsafOYIn/cXKIlYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODI5MTY1MTE0WhcNMjUxMDAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNDc2YjA1NWYzNTBlNmJmYWY5OWE1NGQyOTI5YzA4ZDg5
NWUwNTExMGRiNDFiNmQ5NmQ4NWNhMTZkZGJhMjMxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQHp+59EmMBzGUMXyL/u8qUNy7EPSwVfUS3/gIJnVwajiR
q9z0JeO/XPfU5czFociJNzJYjkDSU2cDosRLYFy/NlkPAsn6SUbCXgooJUjauJNM
dI6DGQ83to2RYhAZ2BIayt3eyk7pPIu2G3iUgBDcf5cywmXnp8TbNYWYl8R/joGi
9gMxmMuet0RSxpKr3hG815MSWzfK+2KDIq9A2mkrtw2d13/8pf6vgnWqM5BoFRCK
G5Qco0UtMcoH2Pk3PiMQBQby9B7OKtNBCePlYGC4Wh4SXWVKlCXF/yL1tLg08XPz
rkB1QUl4bqHwNQN5ctKDTsbjIif4U2/NP5x6uGAbAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUiHS/NlUMC6IRcGB5PmihXKTLAicwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzFlMWFiZDIxLTc2M2EtNGMxMi04MDlkLWQ3ZDk5YmE5MDVhMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAN+TANBgkqhkiG9w0BAQsFAAOCAQEAL4ue9oxh/9zU9EEPBk5QV5nHmbOX
HTUcY4W6/xTWBmBep21iDeqsB1PxiFxh5lrmXdSxMW0DwaUOuvBEKPxEdXlDyOam
f3JFnuVmH8qGTqrHtt7pxfsbde91o5+MSFb7vrPlDX3zlgAg2mb3Bm4RPaljnYD7
oGxXDofRhq00PiyM284kpnGI7l5+iqfl2ocHgNVD4lh9j2mz3ftNBX4joj3a+l0v
s0pag9ZQ5Ub0FHkal3JLK7GnWMqRFTMnTLmxJRYBzBvgdJEA1Jr8id4NvY078THu
99HXu6BWVyL24uykjjczR8s3VqhhuWlF8ZQxiIziFFJo7pTLF0hr7xgZ5A==
-----END CERTIFICATE-----