This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05c20507-d983-4ab8-a723-eaa87c7d5fa8.roa
File:                     05c20507-d983-4ab8-a723-eaa87c7d5fa8.roa (raw, json)
Hash identifier:          TNl/iMCB2gqGaLzE++SL/1sbcT2zBsFdTovaVY53qnA=
Subject key identifier:   EA:B8:8B:88:D7:25:7C:51:2B:BB:E7:1F:6C:FE:86:F6:97:DC:6E:1B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       098587251EBE53E690798A32EE742B073DFE65FF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05c20507-d983-4ab8-a723-eaa87c7d5fa8.roa
Signing time:             Mon 10 Nov 2025 02:11:37 +0000
ROA not before:           Mon 10 Nov 2025 02:11:37 +0000
ROA not after:            Mon 15 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.182.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:85:87:25:1e:be:53:e6:90:79:8a:32:ee:74:2b:07:3d:fe:65:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 10 02:11:37 2025 GMT
            Not After : Dec 15 23:59:59 2025 GMT
        Subject: serialNumber=92953b86d3949da8b948bb411217f2337a39a86cc40c84ef7fbd3c54dc885ca7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:07:3b:97:d9:d9:d3:b3:74:50:a2:f5:cb:
                    06:a4:80:3c:5c:a1:79:ff:6d:e5:dd:10:9e:9b:2a:
                    7d:85:ae:46:b7:79:c3:30:c9:4f:58:67:c9:ae:9a:
                    3d:39:a4:4b:58:03:c3:09:fb:68:05:41:ba:bf:e0:
                    83:95:46:6b:ff:3e:c7:04:cc:7a:db:a9:42:4d:70:
                    8b:0d:12:52:04:c9:5d:ae:21:94:1b:27:65:75:6f:
                    17:33:58:fa:fa:9f:b2:f7:ca:ba:66:c3:d6:10:5a:
                    39:80:96:bd:a7:78:5e:b7:ea:40:58:6e:0c:95:74:
                    0f:d7:ef:93:3c:bc:6a:7a:a0:62:db:76:54:0d:31:
                    7a:96:43:00:94:95:d6:cd:f0:d0:1a:16:37:b4:9f:
                    26:35:f1:68:0c:60:c1:b4:4b:1e:e5:df:b4:b6:a2:
                    08:2a:aa:6e:1f:08:62:47:45:59:70:ec:b5:29:e6:
                    9c:c9:55:5a:6d:df:c8:ce:41:0b:36:36:fa:0f:d8:
                    ff:ca:83:70:9b:de:bc:8c:9c:14:15:04:fd:da:c1:
                    8e:e8:a5:d8:ba:ba:b8:5a:fa:4e:5f:63:29:a5:24:
                    ed:55:95:0b:c5:93:bf:50:4e:ac:aa:b7:b5:8f:2e:
                    47:b9:6e:81:f0:f4:7c:99:8a:bd:82:be:ff:6c:aa:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B8:8B:88:D7:25:7C:51:2B:BB:E7:1F:6C:FE:86:F6:97:DC:6E:1B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05c20507-d983-4ab8-a723-eaa87c7d5fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.182.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:4c:18:17:f1:08:37:d1:ac:ac:ba:b7:06:cf:13:07:75:58:
         f7:b5:58:d9:c0:30:fc:93:80:19:be:94:b5:33:78:62:a3:4c:
         0d:d8:02:10:c3:fc:e8:7e:6f:4e:d1:c5:a4:ef:1d:b2:3b:e9:
         2d:ac:b7:b9:c5:a4:67:dc:2a:b2:b9:4d:80:45:3e:f1:de:07:
         fb:a4:24:14:3d:a0:99:91:c5:37:ee:9f:ee:42:06:e2:1e:50:
         cb:c3:e8:7f:c8:e1:2c:fa:14:b7:3e:29:70:20:60:ee:e4:c5:
         50:54:94:2c:20:cb:fd:06:27:67:c6:6d:2d:1a:07:f1:25:b3:
         8c:04:3a:63:41:05:1e:ff:94:9e:49:33:8c:47:71:1f:2a:e4:
         c4:90:49:d0:39:8d:80:46:40:53:e8:07:4d:c9:f4:33:c1:13:
         a4:fe:08:30:d1:7d:ac:69:5f:57:bf:61:11:f2:a8:e2:b4:72:
         75:82:b8:2e:aa:96:78:1b:4e:1d:b4:46:0b:9a:b0:c2:cb:fb:
         73:c1:49:51:9b:c5:10:8a:07:9e:9d:f0:30:84:eb:f1:da:80:
         7b:9c:e4:2c:35:22:53:19:49:74:b2:a8:6f:b1:62:84:ad:cb:
         30:40:04:a2:87:ad:4c:6a:9d:62:79:ca:ad:ab:02:0a:5e:8d:
         1f:71:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:34:46 2025 by rpki-client