This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca121721-7ef5-4326-be7e-f74052265fe3.roa
File:                     ca121721-7ef5-4326-be7e-f74052265fe3.roa (raw, json)
Hash identifier:          S0WS7BVnsgNp1f3yx/EVbV0BkVytLrIxx+z96jMckJU=
Subject key identifier:   63:59:B8:38:DF:A9:1A:3F:86:38:F5:10:E7:E1:53:3A:70:17:20:3A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       34AF255EE36E3007ADE3D20D467332D6DC7DBCB4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca121721-7ef5-4326-be7e-f74052265fe3.roa
Signing time:             Wed 14 May 2025 07:58:16 +0000
ROA not before:           Wed 14 May 2025 07:58:16 +0000
ROA not after:            Wed 18 Jun 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:af:25:5e:e3:6e:30:07:ad:e3:d2:0d:46:73:32:d6:dc:7d:bc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 14 07:58:16 2025 GMT
            Not After : Jun 18 23:59:59 2025 GMT
        Subject: serialNumber=0af73bce50d50478db1915dcb8269719db4a65c3f0ee3c7e7dacc84cc8e96e08, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:d9:07:11:2f:d4:89:1d:34:27:bf:1b:96:
                    ae:71:36:e6:2e:7a:f9:9f:6c:77:4e:75:d4:92:5e:
                    66:00:14:79:ea:a0:fb:95:dc:f2:66:a3:81:61:03:
                    94:e6:b9:ed:23:5e:ba:bc:1f:e9:d9:31:a7:bf:3e:
                    43:1e:e8:4d:fb:c8:3b:e1:38:0c:53:5a:17:e5:22:
                    ca:d2:c5:40:ca:8a:14:c6:6e:f1:d0:51:3b:a1:98:
                    83:44:f1:b2:07:5c:65:49:2a:a7:e4:32:fd:c2:37:
                    fa:8b:d3:23:4a:7f:b6:05:d9:b3:10:ce:12:20:87:
                    86:a6:e1:a1:2f:61:88:fa:97:fa:80:63:25:37:02:
                    01:48:6f:c4:6d:17:08:4c:ad:11:fd:a3:df:34:07:
                    83:e4:57:22:15:ab:4a:39:7f:3d:8f:0d:6e:be:2b:
                    1b:8c:bc:c8:96:b3:b3:63:2d:fb:23:13:c0:9f:3e:
                    de:d4:46:a2:19:ec:32:a4:7f:be:f9:95:ce:e3:ed:
                    0b:f4:29:a0:1d:fb:7b:49:d9:16:1a:90:44:5b:b8:
                    5f:d6:69:e2:11:75:d0:52:d8:06:a4:3e:20:89:8f:
                    cf:f2:53:93:8e:b2:cf:93:07:e5:2b:5d:09:65:37:
                    b2:38:f5:9c:61:45:d6:fc:94:19:3d:8f:38:eb:21:
                    b8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:B8:38:DF:A9:1A:3F:86:38:F5:10:E7:E1:53:3A:70:17:20:3A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca121721-7ef5-4326-be7e-f74052265fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:12:50:9d:c8:e1:7a:20:ca:38:f9:ae:65:09:8e:93:47:fc:
         d6:79:b6:a6:cc:73:46:75:0a:16:96:d6:0b:65:31:30:8e:02:
         f2:db:fc:c5:c6:95:dc:d2:1d:ab:e7:0c:90:33:2d:ae:b2:90:
         33:2a:1f:16:32:e1:df:ca:de:ad:dd:29:d2:27:c6:6b:89:a0:
         55:a6:24:07:cb:8d:b1:91:97:a2:9a:44:c9:2f:62:c9:04:3a:
         c0:80:f1:cd:78:0c:2b:2f:9e:06:d3:eb:af:97:55:68:b1:b6:
         4f:0c:a9:eb:17:db:70:30:dd:da:f3:1e:7e:40:2e:d5:9e:ac:
         5a:b5:46:64:80:70:41:e1:b3:19:0a:ad:0b:82:e7:2e:31:71:
         80:96:6f:bd:87:5d:7b:f0:e8:bf:bf:db:bc:ae:97:14:38:34:
         6d:a1:09:eb:f2:4c:80:08:a9:05:c8:09:8e:a3:01:b0:7c:87:
         4a:fc:d0:f4:5b:28:e9:d0:9a:bf:2d:e6:d7:04:1e:7f:04:e7:
         94:9f:1b:8c:69:43:4d:0a:58:0e:20:81:75:88:d8:25:df:00:
         04:d6:30:77:5d:03:5e:d3:da:0e:af:05:36:e6:d8:d2:ee:54:
         3b:38:1a:b4:6b:ca:6b:33:81:e9:23:60:09:9a:67:19:fe:8a:
         c6:2b:45:ff
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNK8lXuNuMAet49INRnMy1tx9vLQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNTE0MDc1ODE2WhcNMjUwNjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYWY3M2JjZTUwZDUwNDc4ZGIxOTE1ZGNiODI2OTcxOWRi
NGE2NWMzZjBlZTNjN2U3ZGFjYzg0Y2M4ZTk2ZTA4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCaBNkHES/UiR00J78blq5xNuYuevmfbHdOddSSXmYAFHnq
oPuV3PJmo4FhA5Tmue0jXrq8H+nZMae/PkMe6E37yDvhOAxTWhflIsrSxUDKihTG
bvHQUTuhmINE8bIHXGVJKqfkMv3CN/qL0yNKf7YF2bMQzhIgh4am4aEvYYj6l/qA
YyU3AgFIb8RtFwhMrRH9o980B4PkVyIVq0o5fz2PDW6+KxuMvMiWs7NjLfsjE8Cf
Pt7URqIZ7DKkf775lc7j7Qv0KaAd+3tJ2RYakERbuF/WaeIRddBS2AakPiCJj8/y
U5OOss+TB+UrXQllN7I49ZxhRdb8lBk9jzjrIbjbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUY1m4ON+pGj+GOPUQ5+FTOnAXIDowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NhMTIxNzIxLTdlZjUtNDMyNi1iZTdlLWY3NDA1MjI2NWZlMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAI0SUJ3I4Xogyjj5rmUJjpNH/NZ5
tqbMc0Z1ChaW1gtlMTCOAvLb/MXGldzSHavnDJAzLa6ykDMqHxYy4d/K3q3dKdIn
xmuJoFWmJAfLjbGRl6KaRMkvYskEOsCA8c14DCsvngbT66+XVWixtk8MqesX23Aw
3drzHn5ALtWerFq1RmSAcEHhsxkKrQuC5y4xcYCWb72HXXvw6L+/27yulxQ4NG2h
CevyTIAIqQXICY6jAbB8h0r80PRbKOnQmr8t5tcEHn8E55SfG4xpQ00KWA4ggXWI
2CXfAATWMHddA17T2g6vBTbm2NLuVDs4GrRrymszgekjYAmaZxn+isYrRf8=
-----END CERTIFICATE-----