This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02a08a41-ef8e-46bd-b886-81016dc70aeb.roa
File:                     02a08a41-ef8e-46bd-b886-81016dc70aeb.roa (raw, json)
Hash identifier:          /UK/XRL0KW4a8zO6wCMKx4I5OW95W27XMS0+ngkoydc=
Subject key identifier:   52:28:D0:33:E1:8A:16:A8:58:74:84:29:4B:A1:50:7F:B3:53:74:67
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       26FFE3FE4E0C7F49B880E5BF8C575A925C0AB63D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02a08a41-ef8e-46bd-b886-81016dc70aeb.roa
Signing time:             Thu 13 Nov 2025 01:00:55 +0000
ROA not before:           Thu 13 Nov 2025 01:00:55 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.247.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ff:e3:fe:4e:0c:7f:49:b8:80:e5:bf:8c:57:5a:92:5c:0a:b6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 13 01:00:55 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=b9053ab528f09ce61daa9e464f7f2c7a19a83f3fb9314f20e8a83cb00dfeb7ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:f7:7e:b6:01:28:31:91:a3:0e:8e:e4:8a:
                    6c:87:b4:67:db:50:45:5e:a2:8c:b0:99:f9:ca:30:
                    14:b8:ca:f2:b3:6b:e5:c6:fa:cf:29:cc:22:76:23:
                    06:4e:2e:4d:c6:66:5c:96:f5:17:ab:34:c7:c3:30:
                    30:a3:d3:da:a0:96:ed:99:a5:a6:00:5a:7c:0c:45:
                    65:76:29:56:3a:7f:d2:db:ea:d1:bd:0d:b3:b0:bd:
                    c7:86:3d:af:52:3d:11:56:e5:57:16:bc:bb:12:25:
                    7d:6c:04:9e:c6:cd:5e:fb:c8:ae:d2:6f:f4:27:92:
                    26:be:bf:6f:32:79:87:91:e4:36:b5:5e:a8:e1:f7:
                    ad:29:6e:f8:db:f0:89:89:b7:99:09:8b:93:65:d7:
                    b8:98:c2:c0:f6:01:3f:ce:72:59:2e:95:b5:7b:95:
                    4f:c3:32:c1:1f:aa:88:67:85:7c:f7:d0:cd:1f:12:
                    58:0a:f8:d5:05:67:b4:08:ec:36:9d:0d:f0:ce:de:
                    ed:cd:ae:63:97:0c:fd:d0:bf:cf:96:ef:fa:71:58:
                    8e:1f:07:06:ae:8c:66:fe:0e:1d:17:a4:6f:23:71:
                    8b:ab:62:f8:8a:8a:f8:4d:8f:b0:a5:0c:68:10:a3:
                    1d:2b:a2:c7:19:3f:fe:e2:76:3c:ad:89:28:fb:99:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:28:D0:33:E1:8A:16:A8:58:74:84:29:4B:A1:50:7F:B3:53:74:67
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02a08a41-ef8e-46bd-b886-81016dc70aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:83:95:ef:83:86:82:e7:0e:22:89:02:06:2c:85:f7:12:40:
         02:6b:3b:ce:67:63:76:24:23:7a:55:35:dd:97:25:0d:8e:44:
         75:f1:2c:c9:0e:ed:80:0f:bf:44:95:f8:f2:13:ab:17:fe:e1:
         32:9c:c1:a2:bc:af:f4:b7:3c:0f:93:d0:0e:35:08:64:e7:a4:
         4f:7f:10:26:5e:30:40:6b:67:4f:f9:50:fa:47:55:65:31:3a:
         dc:77:4c:20:85:78:ca:d8:7c:b0:63:53:7a:45:d4:9e:bd:43:
         3d:a0:f0:a2:29:9c:36:b5:f9:a1:0e:f7:dc:e9:9a:67:d7:b7:
         bf:c6:ec:67:5e:ec:7f:45:89:60:28:fd:d5:53:ae:c5:09:6c:
         0e:24:0d:c5:7f:1f:64:c9:08:a4:2b:db:b3:5f:0d:07:22:0a:
         62:15:2d:b4:1e:99:52:8d:67:95:d3:42:1c:fe:ad:c8:b2:0f:
         f5:d1:d3:5a:09:b7:bd:06:b2:24:a6:d1:44:86:81:86:0f:08:
         2e:33:fe:28:68:37:8b:50:6d:fc:ca:bd:cb:73:de:57:8d:0a:
         6f:58:ea:35:cf:05:d8:f0:98:57:9c:52:c2:56:1e:da:26:d4:
         eb:b0:a1:0f:88:d0:47:e5:6e:e2:cd:8e:2b:7a:b5:12:69:23:
         42:d6:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 19 15:12:35 2025 by rpki-client