This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c2b9016-4dee-47cc-a05d-0e25f934a3f9.roa
File:                     7c2b9016-4dee-47cc-a05d-0e25f934a3f9.roa (raw, json)
Hash identifier:          EeBRTp02dKV0tVtbQbCeGXcX/L7P0yjoSUB2U8qC7Sg=
Subject key identifier:   AF:3F:BE:25:C8:69:28:56:19:0A:D9:C6:B6:D4:B3:E6:AA:D6:3D:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       43AA60F26A54213E91AB9B11990A3728A9DCBF47
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c2b9016-4dee-47cc-a05d-0e25f934a3f9.roa
Signing time:             Tue 08 Jul 2025 16:20:49 +0000
ROA not before:           Tue 08 Jul 2025 16:20:49 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:c080::/46 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:aa:60:f2:6a:54:21:3e:91:ab:9b:11:99:0a:37:28:a9:dc:bf:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 16:20:49 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=816d49f3e63ac937804ec26df325e102420404a1f766a08989628076d4c7a140, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:7c:56:34:61:7c:c1:29:6c:36:88:4e:ea:
                    1e:18:15:aa:0a:e3:78:3b:f8:06:b2:db:12:e3:21:
                    8c:a3:f8:fa:f0:c3:5e:ed:66:da:a6:c9:46:ad:ff:
                    ab:df:8e:3e:56:9d:6a:81:c0:e0:1b:79:73:fa:1d:
                    d7:f0:20:70:0c:05:d4:c8:71:8d:92:37:2f:17:52:
                    b3:59:ce:a2:25:c0:87:95:7e:56:f6:60:ee:bf:8e:
                    a4:8e:a3:72:b8:a4:90:03:72:a8:28:5a:b8:50:06:
                    3f:df:8a:c7:96:3a:aa:3f:19:a8:83:ec:16:a2:58:
                    46:13:13:49:a4:01:e2:9b:37:5b:ca:3c:b2:17:f9:
                    83:8b:29:34:08:0c:b7:f6:07:64:7a:16:59:74:35:
                    2a:a1:dd:d4:a4:2d:21:37:ea:a4:36:88:a9:5d:be:
                    af:79:f1:7b:47:d8:86:d8:6a:fb:72:1f:fb:9b:a4:
                    91:09:37:71:49:fd:05:d3:8c:a8:2e:98:35:33:a1:
                    ed:c4:37:e6:73:12:56:36:31:ca:04:d9:8e:fe:d4:
                    a5:95:86:b6:60:08:92:6e:1a:4a:7c:7e:15:62:cd:
                    37:86:12:58:f4:4a:65:96:f3:d1:4c:44:1e:af:3b:
                    25:cd:db:5b:c0:44:b8:a8:0c:6a:a8:bc:08:00:4d:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3F:BE:25:C8:69:28:56:19:0A:D9:C6:B6:D4:B3:E6:AA:D6:3D:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c2b9016-4dee-47cc-a05d-0e25f934a3f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:c080::/46

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:c0:04:43:f4:d2:e5:95:bb:0d:2b:26:21:9d:8f:3f:df:
         83:e9:2c:47:0c:f2:29:28:6b:d3:bd:77:27:3f:9f:eb:ad:8b:
         fd:cc:29:4b:75:9c:5e:5d:61:f2:e4:0c:44:6b:4e:ca:48:b8:
         3a:04:93:9f:ec:47:c0:fd:de:48:e7:12:88:ee:ac:92:3a:20:
         1f:ce:6a:bf:cd:78:ba:62:37:c9:7f:da:cb:1b:7a:64:67:97:
         e5:84:38:e3:ea:bb:4e:19:76:13:92:69:3a:e1:d5:71:f8:ec:
         ae:a9:6a:7c:aa:3a:c6:4b:98:e7:5c:a1:35:e3:0c:4b:92:2a:
         d2:e7:31:25:07:e1:51:8d:a1:1e:3a:c9:46:70:d7:12:ec:4d:
         15:f8:fc:92:aa:32:d0:fa:06:60:22:7e:18:e0:80:3a:d9:a4:
         c5:c8:b3:06:e0:76:c5:4a:34:89:07:2e:d6:93:fa:b5:7c:f4:
         40:48:fd:6c:c7:3c:18:03:92:88:59:6c:05:dd:9b:0c:37:c1:
         09:16:a1:a5:c7:a9:ad:68:8a:14:af:4f:36:2f:89:d8:5f:ca:
         32:5d:eb:7c:1a:9e:eb:dd:97:95:c2:41:16:9b:0e:91:4d:6d:
         5f:ce:49:ac:c6:1a:61:03:03:4c:40:a3:1c:c9:b9:58:44:40:
         c0:24:23:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----