This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb56fd41-621b-4a61-894e-5343c7ae843b.roa
File:                     eb56fd41-621b-4a61-894e-5343c7ae843b.roa (raw, json)
Hash identifier:          z2X8qEFRWG6EAWiTh3tTWBly9xX/YWg909omQrdhspA=
Subject key identifier:   57:76:69:3B:2D:40:78:40:30:50:81:8F:32:1D:15:CE:56:FA:44:98
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       26ED1D6F22A70FC60218D0AB65D1FD043100DDFA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb56fd41-621b-4a61-894e-5343c7ae843b.roa
Signing time:             Sat 20 Dec 2025 18:28:21 +0000
ROA not before:           Sat 20 Dec 2025 18:28:21 +0000
ROA not after:            Fri 20 Mar 2026 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 20 Dec 2025 18:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ed:1d:6f:22:a7:0f:c6:02:18:d0:ab:65:d1:fd:04:31:00:dd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 20 18:28:21 2025 GMT
            Not After : Mar 20 23:59:59 2026 GMT
        Subject: serialNumber=bb179a4590883b21de94e64c9d1068e095bffe05bbde3ad301ee4f433fb2824f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:b8:c8:ba:71:d4:9f:7f:26:87:0e:27:49:
                    77:a1:e4:87:35:1f:ef:71:82:03:c5:e6:40:50:81:
                    32:50:f0:b8:48:76:bd:cb:94:85:97:9e:93:1f:e8:
                    3c:9f:ee:13:45:b5:d5:bc:56:65:ce:cc:df:f4:cb:
                    4d:42:bf:3a:08:a1:fc:d7:bb:e9:d2:52:74:52:71:
                    08:62:14:46:7e:31:a3:fc:0d:04:45:cc:66:e4:25:
                    c9:15:3c:8d:16:ac:ee:bd:64:aa:91:8e:d2:3e:e4:
                    79:d0:15:d1:27:0f:cc:e7:26:ec:62:73:5c:26:75:
                    dc:32:82:4c:26:dd:3e:2f:95:80:3c:51:f7:7f:cb:
                    d0:b9:56:68:d1:cb:86:39:49:da:4e:17:e9:55:5f:
                    06:f9:9d:43:a0:02:3b:55:a4:8b:33:d5:37:88:55:
                    6b:8b:2d:88:c4:2b:64:6a:f4:c4:86:96:d0:0d:6e:
                    3e:84:63:07:7b:e1:74:67:43:ef:11:68:ad:86:3b:
                    3a:87:e9:2d:59:c6:7f:64:b7:9d:f3:37:e0:55:5c:
                    2e:0c:23:6a:a6:2f:90:bf:a7:3a:61:f7:04:25:73:
                    f7:e0:3f:57:21:d9:b6:55:66:cb:04:0e:f8:cc:82:
                    93:f3:ab:86:c8:a7:72:20:c6:a0:9f:ae:4e:8a:8e:
                    4d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:76:69:3B:2D:40:78:40:30:50:81:8F:32:1D:15:CE:56:FA:44:98
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb56fd41-621b-4a61-894e-5343c7ae843b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a0:e4:81:d8:58:2f:e0:b5:d9:e4:90:a5:5a:66:69:39:84:
         f6:ca:26:84:7d:ec:b9:4c:f0:de:c5:75:76:4a:e0:46:5b:fc:
         63:1f:2d:82:4d:ef:1e:72:8c:d7:24:b7:df:5d:90:4e:c0:a7:
         9f:c5:1d:ae:5e:4a:49:ea:a8:6d:29:b3:10:3b:ec:f0:17:96:
         df:f6:7a:aa:78:c6:49:96:75:78:ec:cf:03:c1:37:b4:a1:ff:
         a5:75:a2:3e:dd:02:3a:87:99:a6:54:42:46:29:12:2e:83:9e:
         a4:b0:d2:95:b2:4e:6b:40:74:d0:55:c2:98:4d:a0:0d:90:38:
         d9:b0:5a:50:9c:22:f8:ff:61:b4:93:17:e1:4d:03:7d:52:de:
         cd:ca:65:0d:27:9f:a8:43:a7:b0:a1:73:94:5d:e3:5c:25:84:
         07:ca:da:ba:a1:56:0c:7f:22:b9:96:50:a8:57:bb:6a:88:52:
         3f:b3:bb:c7:84:30:64:6d:53:5a:62:9f:91:e7:ba:ee:fa:9a:
         27:8d:f1:b9:dd:af:29:9b:e9:c7:71:4e:c0:25:13:13:12:11:
         4a:4a:9f:0c:59:e8:b3:dc:94:c5:34:b8:81:1d:0c:9f:fb:4a:
         fb:13:94:f2:0c:14:86:43:07:f2:ec:03:fc:25:6f:b9:b7:b0:
         be:cb:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----