This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa
File:                     5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa (raw, json)
Hash identifier:          cXVnEoM323HD3TteohywCuo1oSfVvQ+bmYWcFDy3MTw=
Subject key identifier:   8A:1A:D3:3F:D1:9F:AB:9C:B2:DF:CC:83:FA:5D:48:E3:7D:3C:81:6D
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6C783CA9E11C5B7D4AE47C130B6DE2F33C042569
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa
Signing time:             Mon 15 Sep 2025 17:40:06 +0000
ROA not before:           Mon 15 Sep 2025 17:40:06 +0000
ROA not after:            Mon 20 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.77.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:78:3c:a9:e1:1c:5b:7d:4a:e4:7c:13:0b:6d:e2:f3:3c:04:25:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 15 17:40:06 2025 GMT
            Not After : Oct 20 23:59:59 2025 GMT
        Subject: serialNumber=84438ba082a8a96ca6ae7a66698687881a039db236021562024bb5a2decf9cee, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:bc:dc:49:c0:de:13:fc:c9:f3:27:0e:f8:
                    30:16:ef:91:7e:43:ff:a3:37:db:a5:8b:15:ce:fa:
                    1e:85:f5:97:32:a7:73:8f:2c:49:35:04:a7:1a:2e:
                    53:25:e0:a0:a1:1a:43:36:4d:51:e9:f2:ab:4f:06:
                    56:45:ce:9a:9a:54:84:52:98:7d:45:6f:d2:f0:97:
                    49:0f:24:d7:87:7b:b3:b8:bc:6f:7e:ab:bf:76:1a:
                    e7:53:79:ac:a4:78:13:fc:36:cd:83:dc:36:82:39:
                    c3:30:3a:bf:51:93:ce:bd:8e:7d:e6:2f:6c:f1:45:
                    05:ad:ba:b4:43:fe:1b:71:34:7a:75:71:c7:0d:3e:
                    ce:a4:53:ef:6d:4e:27:6f:42:05:31:59:f6:25:54:
                    c1:7e:ac:7c:3d:30:cd:9a:95:76:e5:2e:54:be:90:
                    99:72:70:ce:6c:69:0e:78:fa:ed:b8:31:1f:65:26:
                    9a:28:e4:ed:8a:f4:03:34:65:29:57:a5:47:73:ee:
                    e5:7f:6f:22:ef:63:8f:1f:9d:5e:6f:10:13:a9:61:
                    fe:5d:55:df:6d:78:0a:e7:fb:f2:a6:5b:e7:5c:2b:
                    7a:53:e3:35:bf:e3:42:3e:56:7a:35:e0:13:4b:74:
                    e1:40:d0:db:cf:58:54:75:2b:1d:15:5c:09:89:8c:
                    87:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1A:D3:3F:D1:9F:AB:9C:B2:DF:CC:83:FA:5D:48:E3:7D:3C:81:6D
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:6e:02:c6:47:48:12:e5:d4:de:50:0a:83:d5:90:59:bb:d8:
         05:58:cd:9b:ce:d7:45:cc:fc:36:04:44:7e:3d:22:57:32:dd:
         14:00:c9:bd:bd:b8:af:04:d9:98:92:2b:62:ef:c9:19:3f:c9:
         ab:c7:c3:74:43:a9:cd:bb:2d:06:0a:f1:3b:3e:12:fa:bd:18:
         ab:f2:4a:6a:cf:09:5c:a9:3e:ed:28:9c:ea:72:86:15:32:de:
         1f:68:67:48:24:fa:bb:3b:08:55:6c:f8:1f:53:1f:58:03:5b:
         0a:27:7d:9d:cc:8b:7f:32:3b:d6:13:f4:8c:83:e8:68:78:21:
         80:e7:63:b3:b7:e1:d8:44:a5:49:1a:0d:ea:95:85:be:fc:51:
         e6:99:b8:29:11:b9:94:cf:3d:24:37:37:a3:a1:39:02:a8:0b:
         20:10:6e:9e:d8:65:56:c1:a0:ab:2d:9c:0d:f1:aa:ca:14:15:
         c9:6f:1b:b1:85:db:fe:b4:58:9f:5c:2a:ec:14:7a:b2:95:73:
         81:95:8e:3f:c7:f8:f5:0d:55:b6:59:04:d5:75:8e:b8:4b:d2:
         2c:fc:af:b6:22:5f:b9:af:9f:be:13:ce:f0:00:11:90:be:b0:
         d1:6d:63:09:96:6e:1e:cd:1f:eb:31:31:93:22:5a:5b:3e:9c:
         57:53:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----