This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa
File:                     1807722b-6239-464f-b361-a2bdd368c5eb.roa (raw, json)
Hash identifier:          F59bucwmTd2WJPaWcsWOCu9CBPEuNmLz/HcIt8TgaGE=
Subject key identifier:   B8:9B:E1:3A:76:A5:8F:5B:E7:10:24:6C:88:66:18:9D:38:9B:7D:5C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       69B17ABFBA69AC800F7502AFCC0885B16B79F4F7
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa
Signing time:             Mon 15 Sep 2025 17:40:20 +0000
ROA not before:           Mon 15 Sep 2025 17:40:20 +0000
ROA not after:            Mon 20 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.78.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b1:7a:bf:ba:69:ac:80:0f:75:02:af:cc:08:85:b1:6b:79:f4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 15 17:40:20 2025 GMT
            Not After : Oct 20 23:59:59 2025 GMT
        Subject: serialNumber=522b878833f5c7ccd308e9a53d1ecc462741ad65d39698b6d484f80962b15d7e, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:d7:9a:56:c7:2c:b5:e5:28:2e:16:89:8c:
                    e3:9b:5a:b1:90:65:9f:4f:45:70:51:f7:b5:a8:d4:
                    4c:72:d7:9b:dc:1c:0f:20:a9:3c:bc:03:6a:37:a9:
                    7c:be:7b:9a:b2:41:a5:00:f4:82:07:70:ed:ee:91:
                    7c:36:40:09:4e:88:19:a6:b2:87:3c:a5:a3:86:14:
                    21:5c:aa:48:96:a6:ce:df:24:48:ef:29:42:53:91:
                    d0:29:e1:d4:27:1d:4c:4b:3b:2d:da:9d:ba:03:f1:
                    a5:39:1c:52:8b:a6:58:62:87:db:e8:ef:d8:d8:97:
                    1a:96:2e:47:58:d3:82:3d:c8:45:9d:e1:84:4a:4d:
                    72:78:c0:3f:97:8d:bc:9b:2f:1e:e9:48:9b:ca:1c:
                    60:fe:c1:77:6f:28:8a:73:35:d7:6d:4f:d4:ff:f6:
                    9b:6e:d2:e7:4c:09:d5:54:0d:07:d6:8c:e2:01:b0:
                    24:64:22:fc:b6:26:c0:39:d0:70:44:fa:b9:7c:51:
                    7c:11:c8:dd:42:cc:89:01:19:c4:73:d9:1e:d1:91:
                    47:de:b8:36:e8:8a:30:11:3b:6c:b4:86:88:d4:40:
                    fd:8c:03:a8:4a:3a:1a:00:36:b0:1d:d0:ab:82:2f:
                    23:44:a6:2e:44:37:04:e8:10:72:d9:db:d2:ed:c8:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9B:E1:3A:76:A5:8F:5B:E7:10:24:6C:88:66:18:9D:38:9B:7D:5C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:aa:fa:e2:df:50:8f:c3:e6:49:e1:fd:f3:b6:ac:c5:91:f1:
         d8:32:29:f9:ba:86:68:03:a3:d1:6c:ba:67:db:b9:c7:d3:5c:
         13:c7:33:33:3b:53:d8:39:0c:c7:42:e5:49:7a:15:47:80:62:
         17:d8:a2:b7:fd:f5:29:e4:a9:5c:f2:c8:6d:a2:41:93:ee:78:
         2d:ee:13:f7:9b:e1:c4:a9:bb:01:16:f8:7a:54:66:3b:97:be:
         35:b4:58:f2:70:cf:8c:0b:e7:73:ae:89:8c:99:8f:f2:7d:3d:
         e7:16:57:6c:35:d9:83:d8:48:63:38:cc:e3:71:ff:07:4a:9e:
         7d:f4:cf:c3:a6:a4:3c:90:ca:f8:96:bc:ca:9d:b5:dc:a0:4a:
         80:69:12:93:67:58:6b:d8:d0:e9:ce:27:c5:de:7d:84:cc:3b:
         e5:94:7b:7c:f7:d4:65:c4:04:74:a0:ae:15:78:12:0d:d0:92:
         47:15:82:0b:00:dc:04:b8:cf:0b:49:ab:2e:9a:6c:88:ee:1f:
         0d:3a:2d:b7:1c:0d:59:58:a2:a3:8f:74:54:a8:51:a5:95:a8:
         a1:ea:91:a5:a0:2f:56:4d:bc:b5:a1:5d:af:13:fb:47:89:d4:
         58:51:c1:3d:37:7d:7e:60:92:ca:68:07:d7:d3:d7:cb:c4:61:
         ea:ad:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----