This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa
File:                     4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (raw, json)
Hash identifier:          +7odOGAixFZkzpnQ/em6sNvldWnEircDk5I3XCMkvjA=
Subject key identifier:   EB:97:FB:99:93:3C:12:68:94:81:40:DE:12:83:B4:6D:5C:A1:DD:EA
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       2E39BD3A2FE5210536243600293D2256C682779F
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa
Signing time:             Sun 07 Dec 2025 00:10:09 +0000
ROA not before:           Sun 07 Dec 2025 00:10:09 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        198.41.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:39:bd:3a:2f:e5:21:05:36:24:36:00:29:3d:22:56:c6:82:77:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Dec  7 00:10:09 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=db3f3014272e10b6050d1c87b1d10a0ef454cd86c01e718df29bf85c68b489fc, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:4e:dd:cb:65:6a:4d:24:bd:ea:a6:03:43:
                    2e:90:06:bf:c1:76:17:04:61:4f:63:8d:9b:c8:79:
                    bb:f3:62:a9:32:6d:96:03:4e:b1:95:1f:0c:a0:c4:
                    d8:cf:30:23:3f:58:99:96:72:37:9c:71:b9:59:1e:
                    50:56:aa:1d:27:20:42:35:44:47:ed:59:3b:fb:61:
                    f0:13:cf:34:76:80:1f:69:38:46:ba:c2:20:f2:c5:
                    55:3a:c4:e4:51:6a:b8:c0:bd:f7:96:95:46:6c:d5:
                    b2:8c:85:ae:00:b2:e0:cf:9d:97:bf:96:2b:a4:68:
                    f0:31:d9:c3:f0:5b:11:57:33:a6:63:94:66:68:68:
                    9e:c1:8f:eb:70:bf:c7:b3:b6:20:33:cf:6d:34:6a:
                    d1:ec:5f:7a:6c:76:c2:71:f9:c3:e5:76:e9:20:34:
                    63:df:e6:40:62:63:77:11:59:37:47:12:78:15:9c:
                    74:b3:88:72:4b:da:a7:33:d8:ff:34:2a:d9:5c:3d:
                    f4:9f:07:38:42:26:be:97:c7:b2:3a:08:22:0f:98:
                    a6:93:c5:53:c2:4e:bf:2b:97:d5:8e:71:a3:7d:f4:
                    cf:f9:34:b1:c8:2b:b2:62:d0:d9:cf:ba:88:5c:02:
                    c7:b2:1a:47:01:81:3c:48:02:87:78:7e:be:f1:b3:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:97:FB:99:93:3C:12:68:94:81:40:DE:12:83:B4:6D:5C:A1:DD:EA
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:2e:20:e2:81:d1:ec:3e:46:d4:70:87:51:41:be:36:ec:b8:
         a7:c8:a2:ce:49:cb:04:25:37:23:eb:c6:f8:8a:52:a3:01:e6:
         55:af:4d:f2:52:b9:3a:ff:55:26:19:5e:c2:12:b1:b7:3a:f6:
         b9:46:18:53:1d:03:fc:05:05:4d:c5:de:b8:5a:05:3a:a2:80:
         ce:1f:48:46:60:20:22:34:a1:c4:7e:fd:38:a1:be:bf:5d:a6:
         23:4f:9f:df:a8:aa:e5:eb:b3:29:c0:b4:18:e9:63:c5:09:4f:
         30:63:c5:ab:86:d8:53:a9:4e:01:14:3d:94:be:82:62:8c:74:
         f6:4a:c9:f4:6a:e1:dd:3f:f7:6e:8c:a1:89:3e:d2:4e:39:ca:
         dc:f9:b8:e4:cc:4b:d4:f9:18:12:02:58:3b:bf:0d:1f:52:d4:
         45:7d:42:8c:0c:fd:4f:bd:78:bc:8d:8d:0b:b9:38:53:03:7c:
         d8:4f:19:c3:87:0a:fb:69:f1:06:5f:d3:1e:f9:9d:9a:79:94:
         c5:17:2d:1a:a3:c7:95:02:ac:eb:85:ff:e0:e9:8b:4a:a5:5d:
         cc:a0:4b:05:38:7f:db:6f:1c:a6:c1:36:4a:27:6c:dc:59:46:
         6f:59:09:77:1d:41:c0:99:3d:7a:72:56:e8:a1:93:c3:62:f7:
         31:64:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:48:07 2025 by rpki-client