This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b29cc9b-6568-4e37-aa2c-5e2b35828595.roa
File:                     9b29cc9b-6568-4e37-aa2c-5e2b35828595.roa (raw, json)
Hash identifier:          eAtahdag/B7jErfZnZgINMY31EI6UdStdyYBR3zji+Q=
Subject key identifier:   29:0E:74:95:E2:56:AB:27:D2:6B:36:84:ED:D1:50:95:F4:E0:D0:12
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       623A53D6B234450587CEB7B4ABBDB9C9DF34CF75
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b29cc9b-6568-4e37-aa2c-5e2b35828595.roa
Signing time:             Sat 19 Oct 2024 00:00:00 +0000
ROA not before:           Sat 19 Oct 2024 00:00:00 +0000
ROA not after:            Sat 23 Nov 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3a:53:d6:b2:34:45:05:87:ce:b7:b4:ab:bd:b9:c9:df:34:cf:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 19 00:00:00 2024 GMT
            Not After : Nov 23 23:59:59 2024 GMT
        Subject: serialNumber=8f9b0ae5e943724df07b4699043a534185445327456ba18935994a024b15b07e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:36:0c:bd:df:76:7a:c9:21:f2:f6:b0:86:
                    c1:27:af:a9:cd:30:e7:b6:f0:08:98:d9:f2:0f:ed:
                    07:94:58:1f:05:f6:b4:e6:45:f1:69:cb:a2:18:61:
                    ad:c4:96:4e:61:43:e0:04:6d:3a:9a:ea:ae:65:aa:
                    97:27:61:53:6d:b8:b3:7b:f9:91:d2:65:6f:0c:e1:
                    71:20:1c:e3:ab:af:46:de:8d:01:7d:da:6e:85:88:
                    85:93:8c:53:b8:25:61:5d:c1:ef:e4:6c:ec:20:1b:
                    99:80:ec:2e:1e:c7:62:0a:8f:ec:bd:cb:31:60:82:
                    16:92:df:b7:95:6a:30:4a:19:c2:fe:cf:e2:1f:84:
                    65:86:e6:12:e5:ce:90:01:2d:6d:12:85:b6:c9:7d:
                    ee:bc:dc:49:4e:88:0f:29:9f:0d:73:08:15:28:4a:
                    3f:f4:3e:b5:39:d6:44:60:7a:ed:d4:35:7b:b8:44:
                    18:6a:8d:64:c6:6f:fc:a1:6c:1b:ed:59:6d:28:cc:
                    c4:62:9a:0d:63:91:6e:ac:56:e6:bb:72:87:95:71:
                    fa:ff:a7:62:59:52:56:a0:2d:b8:b2:d1:e4:ed:8a:
                    9e:e9:68:09:bb:53:ea:68:d9:7d:50:fe:46:20:fa:
                    37:bb:30:eb:9c:d1:f5:bb:55:e8:99:69:e3:42:a3:
                    04:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0E:74:95:E2:56:AB:27:D2:6B:36:84:ED:D1:50:95:F4:E0:D0:12
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b29cc9b-6568-4e37-aa2c-5e2b35828595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:97:50:40:31:32:24:9a:ab:de:e2:de:cd:3c:5d:a0:1f:1b:
         20:12:36:c8:1d:be:00:7e:99:36:1a:68:e1:82:8e:a9:e4:ab:
         de:71:a9:ad:4d:d4:cd:60:8c:61:f5:0f:fd:2d:36:9b:be:1b:
         e8:52:4d:a2:96:92:4d:17:f1:9b:1f:16:39:9e:89:86:00:18:
         92:84:df:81:ad:0b:ab:89:69:87:f1:76:71:42:d2:34:8f:4f:
         f7:4c:37:48:b8:ed:cc:17:57:1f:4f:4b:1e:4e:06:f4:0d:1b:
         1f:49:60:ce:43:8b:7c:71:da:e3:96:e2:2c:cc:40:9b:96:1a:
         d5:e4:7b:f6:d4:69:d7:6b:bc:44:01:8d:11:8c:6f:ab:ef:5a:
         ff:71:7e:cf:bb:6d:d7:3b:95:35:49:c9:8f:93:66:e7:19:67:
         d5:d5:1a:94:4c:09:d1:12:1d:1f:46:c6:7f:ba:bf:56:44:f7:
         1d:af:f2:0b:e5:9f:78:64:ef:3c:0e:b8:54:0a:6a:90:be:1a:
         ce:6a:0c:6c:e1:1c:b9:22:d5:c0:58:58:c4:59:78:d1:dd:af:
         a0:86:8a:5b:89:5f:0b:62:61:fe:f7:19:1d:33:a3:26:11:58:
         a3:b5:39:8a:6e:72:d4:77:11:61:75:ae:14:e5:07:b1:1a:fb:
         ce:51:01:bc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYjpT1rI0RQWHzre0q725yd80z3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDE5MDAwMDAwWhcNMjQxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZjliMGFlNWU5NDM3MjRkZjA3YjQ2OTkwNDNhNTM0MTg1
NDQ1MzI3NDU2YmExODkzNTk5NGEwMjRiMTViMDdlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvSTYMvd92eskh8vawhsEnr6nNMOe28AiY2fIP7QeUWB8F
9rTmRfFpy6IYYa3Elk5hQ+AEbTqa6q5lqpcnYVNtuLN7+ZHSZW8M4XEgHOOrr0be
jQF92m6FiIWTjFO4JWFdwe/kbOwgG5mA7C4ex2IKj+y9yzFgghaS37eVajBKGcL+
z+IfhGWG5hLlzpABLW0ShbbJfe683ElOiA8pnw1zCBUoSj/0PrU51kRgeu3UNXu4
RBhqjWTGb/yhbBvtWW0ozMRimg1jkW6sVua7coeVcfr/p2JZUlagLbiy0eTtip7p
aAm7U+po2X1Q/kYg+je7MOuc0fW7VeiZaeNCowTzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKQ50leJWqyfSazaE7dFQlfTg0BIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzliMjljYzliLTY1NjgtNGUzNy1hYTJjLTVlMmIzNTgyODU5NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFuXUEAxMiSaq97i3s08XaAfGyAS
NsgdvgB+mTYaaOGCjqnkq95xqa1N1M1gjGH1D/0tNpu+G+hSTaKWkk0X8ZsfFjme
iYYAGJKE34GtC6uJaYfxdnFC0jSPT/dMN0i47cwXVx9PSx5OBvQNGx9JYM5Di3xx
2uOW4izMQJuWGtXke/bUaddrvEQBjRGMb6vvWv9xfs+7bdc7lTVJyY+TZucZZ9XV
GpRMCdESHR9Gxn+6v1ZE9x2v8gvln3hk7zwOuFQKapC+Gs5qDGzhHLki1cBYWMRZ
eNHdr6CGiluJXwtiYf73GR0zoyYRWKO1OYpuctR3EWF1rhTlB7Ea+85RAbw=
-----END CERTIFICATE-----
Generated at Mon Dec 22 22:57:19 2025 by rpki-client