This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1bfb161-fc7d-4e0f-908e-1419867b0e21.roa
File:                     d1bfb161-fc7d-4e0f-908e-1419867b0e21.roa (raw, json)
Hash identifier:          AcAyNso7+NNISKY3biVGjtJwCIDZESLvrHBZwe3aL4I=
Subject key identifier:   29:B0:2F:B6:7D:9C:81:9F:8B:8E:85:DB:05:C3:D2:85:8B:DF:AF:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20BDAB2BA68EB582A5A4225C513C40A01062AEFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1bfb161-fc7d-4e0f-908e-1419867b0e21.roa
Signing time:             Fri 13 Jun 2025 16:31:23 +0000
ROA not before:           Fri 13 Jun 2025 16:31:23 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb8:5000::/40 maxlen: 40
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bd:ab:2b:a6:8e:b5:82:a5:a4:22:5c:51:3c:40:a0:10:62:ae:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:31:23 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=2d99648813322c0155755765d8a9d251338cb958c72bf1375cf818481a648992, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:d4:14:b6:c2:56:2e:41:f1:60:93:66:d8:
                    81:68:77:53:08:8a:5f:3b:da:6b:41:da:32:ed:f9:
                    e2:db:81:2d:4d:82:4e:0b:23:b3:92:b2:e5:cf:95:
                    33:c7:7d:a8:0f:38:1e:63:7d:a6:73:96:f1:ca:09:
                    32:08:e6:87:5d:62:1b:34:a6:a0:de:ca:54:6d:df:
                    a3:24:7b:c0:5e:cb:a9:44:09:88:c3:5b:46:bd:e8:
                    d5:d8:a9:00:90:2f:d4:14:28:c0:79:02:20:3a:79:
                    64:78:33:f0:79:2b:c5:13:8a:a1:6c:94:1c:02:bd:
                    15:1f:fc:3e:1d:7b:2d:da:3a:4a:ac:88:00:dc:be:
                    91:ab:37:93:2d:66:6d:8f:26:81:31:38:d7:c7:a2:
                    de:fb:e3:85:02:98:c4:69:95:31:29:bc:b4:14:58:
                    94:34:8a:52:0a:38:10:78:88:1f:70:f5:4b:dd:8e:
                    8f:b2:66:c2:82:f6:97:be:c4:48:04:9c:31:9f:7f:
                    7b:07:78:13:79:9e:71:6b:07:54:9e:76:34:d5:b1:
                    90:dc:92:a6:00:67:8c:1d:ea:e4:da:25:05:e2:86:
                    86:e4:11:13:d9:be:af:42:6f:0e:43:2a:e0:e9:03:
                    61:69:64:da:34:84:e6:e1:5a:65:e3:08:c0:ac:a7:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B0:2F:B6:7D:9C:81:9F:8B:8E:85:DB:05:C3:D2:85:8B:DF:AF:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1bfb161-fc7d-4e0f-908e-1419867b0e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:3d:81:a6:72:1d:72:03:5e:69:85:ae:dd:c3:ae:8d:17:4c:
         b0:a2:d6:e5:92:6d:b8:22:bb:4b:42:4c:82:5b:c2:f8:39:18:
         68:58:27:dd:e3:7c:ac:20:5b:9b:70:59:3e:89:17:cb:c6:34:
         a3:53:0e:ed:fc:de:21:1a:b9:21:c5:50:d0:5b:c4:ac:84:60:
         89:0a:5d:c3:38:45:a2:3d:df:c7:5c:57:eb:ee:4a:25:72:01:
         73:ec:11:8c:fc:4c:fa:64:44:f5:eb:78:fc:97:3c:ad:a1:40:
         06:e1:71:77:a6:09:31:fa:00:c3:3b:c0:25:4a:c5:c3:cf:27:
         9b:e7:ac:35:6f:9e:69:30:75:78:08:03:9c:08:0a:fc:34:29:
         fe:42:34:0c:02:df:97:1f:32:3f:7d:c6:d5:59:77:d6:99:01:
         40:f7:78:d3:62:38:4a:14:cb:16:14:e4:fa:c0:35:a7:75:95:
         17:2b:85:9e:3e:f1:13:81:ee:0f:9c:36:9d:11:59:ce:3a:92:
         da:86:fa:e4:a8:44:04:f9:dc:09:c0:81:bc:fe:a7:89:84:5f:
         7e:23:8f:b2:04:cd:71:26:30:97:e9:b6:51:58:94:3f:0c:ab:
         02:d3:be:4b:9f:96:32:bd:1b:a9:39:b3:d3:28:8e:67:a5:8c:
         99:a2:02:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----