This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6a63971-980f-41ea-9872-abd64ff5639a.roa
File:                     e6a63971-980f-41ea-9872-abd64ff5639a.roa (raw, json)
Hash identifier:          Qmvcsn80l35ozg9MAHrWfe+qDhvke9aMXTZB5AWSXLE=
Subject key identifier:   C2:E9:01:E2:A0:88:92:4C:83:52:7B:6F:78:9E:E1:D1:81:5C:E4:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6978C03D9D14C40B55F1C90FAC7E1F215BE512B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6a63971-980f-41ea-9872-abd64ff5639a.roa
Signing time:             Fri 13 Jun 2025 16:30:15 +0000
ROA not before:           Fri 13 Jun 2025 16:30:15 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff5:2000::/40 maxlen: 40
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:78:c0:3d:9d:14:c4:0b:55:f1:c9:0f:ac:7e:1f:21:5b:e5:12:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:30:15 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=21803abb2b4f68c4e75a3b56a3d2cd4240efdaca3128c61cc44727750252d283, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:51:11:08:ee:75:76:34:01:33:59:4d:2b:
                    e2:00:fe:98:de:b2:c3:61:f2:d9:11:2c:ae:d2:25:
                    05:d6:e8:ff:46:c0:06:3c:3a:b0:ac:5b:d5:d9:75:
                    d5:99:8e:7d:d7:77:5c:7d:bf:ab:c6:f3:2a:f1:eb:
                    06:3b:aa:98:a3:f0:ad:6e:86:07:e3:0a:e4:74:02:
                    01:21:ea:19:dd:9f:8c:4c:06:8c:b1:b4:02:c1:04:
                    cd:81:16:54:d0:3f:40:58:c5:9b:c4:6d:79:1a:83:
                    a8:21:9a:4a:b5:56:c6:2a:0a:bb:db:3e:8d:5b:c1:
                    5f:46:ef:82:0e:d4:2f:93:0d:d8:c2:0a:b8:05:1c:
                    7f:79:6e:0e:15:6a:1f:00:c0:f6:c5:41:84:c2:48:
                    4e:1b:bc:17:a3:34:81:f1:fd:6b:d7:a4:c8:45:fe:
                    eb:55:98:55:e0:07:93:87:c2:66:45:ac:da:34:c7:
                    33:83:26:ee:76:1f:4d:c0:99:cb:3c:47:ac:47:35:
                    2f:df:52:29:9c:1c:d4:d5:c4:e1:18:77:cd:1e:9d:
                    64:c3:6c:d8:2b:aa:2e:a0:61:04:08:13:87:35:1a:
                    33:18:1d:c5:69:dd:97:bf:b4:3c:01:56:cf:9b:2d:
                    13:ff:6b:0c:bf:1d:3c:72:bf:24:6a:2f:61:02:55:
                    29:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E9:01:E2:A0:88:92:4C:83:52:7B:6F:78:9E:E1:D1:81:5C:E4:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6a63971-980f-41ea-9872-abd64ff5639a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:39:9c:42:43:10:98:01:3a:f5:ce:bc:6e:f2:f1:07:21:37:
         f7:31:0c:f7:2e:e5:09:df:93:74:29:63:72:52:8a:90:24:6f:
         6b:6d:59:11:8b:c6:3e:4a:20:f1:6f:36:d2:cc:fc:59:95:2a:
         c8:ef:02:a2:13:b6:f0:a7:d7:67:39:51:06:09:5d:6f:62:6f:
         0c:91:6a:79:6c:d5:1b:9d:cd:d9:2b:95:04:ed:a0:67:37:73:
         79:54:a8:f3:35:ca:96:db:5d:98:4d:ed:94:e2:47:35:96:e4:
         02:85:1b:b5:ca:08:b5:f6:16:0d:d4:7f:2e:d5:17:f3:da:6c:
         ad:7b:e8:77:a0:e5:22:d0:6c:d8:6f:fb:f7:c9:61:14:fc:28:
         82:0c:0b:41:70:a6:02:cf:26:5b:a3:66:15:59:13:04:d4:22:
         43:0a:2e:85:c7:6e:3e:8a:b6:e6:bf:d9:0f:66:c2:22:e6:84:
         47:7d:95:90:34:0b:da:23:97:91:07:df:8e:4c:0b:48:18:44:
         a0:96:45:af:bf:74:ed:ac:5e:a1:5d:d6:56:a5:50:b2:66:3d:
         65:54:2b:94:a5:1a:78:ca:8d:4d:7d:01:47:7c:75:6b:51:70:
         77:23:2b:c6:92:0e:7c:4c:df:87:9b:b6:26:c9:57:56:fe:b8:
         34:9e:36:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----