This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa
File:                     06632fd0-6abb-437c-aec2-0a661e165739.roa (raw, json)
Hash identifier:          4+CuNc4fIzH8Co52qRKyPHt7K/O6joz4oWNhEH3SFXk=
Subject key identifier:   FA:61:0F:D9:DD:DF:D9:AC:3B:FE:44:C3:4B:E2:FE:0F:EA:1C:35:87
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       262C5962858DE110D529F6E95A2A34ADB71A49D4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa
Signing time:             Sat 15 Nov 2025 02:00:44 +0000
ROA not before:           Sat 15 Nov 2025 02:00:44 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.83.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2c:59:62:85:8d:e1:10:d5:29:f6:e9:5a:2a:34:ad:b7:1a:49:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 02:00:44 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=a1680fd044e55db3bf08f4a256f514c95cf6e6d7ad50da19b907804667b25029, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ab:df:9d:ad:32:13:8e:47:9d:24:a7:af:9c:
                    c4:23:4e:7f:eb:af:fd:a4:61:a9:ae:e7:29:b8:75:
                    19:a0:91:46:96:d3:99:3a:48:ac:76:17:81:5b:8e:
                    fb:6d:13:2d:34:3c:ab:18:e6:ff:32:09:59:68:af:
                    39:23:80:1c:68:b4:ca:09:23:b4:8f:97:b2:4c:82:
                    d0:11:f0:08:f2:a0:c2:5d:b3:2b:78:84:ca:fb:1e:
                    5e:03:eb:90:71:da:bf:3b:a2:0b:82:ff:4f:42:e4:
                    8b:6a:d8:3b:16:8a:a3:80:31:cb:9b:fd:e5:b2:03:
                    56:9f:df:97:7e:87:73:0c:14:df:f3:e4:d1:ee:ad:
                    4b:88:91:55:2f:98:52:45:d4:2d:ad:f2:fb:78:f4:
                    ac:e1:eb:91:d2:ed:9d:eb:e2:3f:c8:7b:6d:54:bd:
                    a8:98:47:b2:f3:f3:70:3e:24:1c:68:77:75:6b:9d:
                    18:72:ed:7d:00:de:cd:2a:b8:31:57:f4:2c:11:23:
                    06:ec:06:68:c2:a2:1e:c0:14:b1:96:8d:e0:70:76:
                    0a:38:e5:e0:e3:0f:2f:f5:c9:f0:61:09:c2:8d:27:
                    ea:ea:ca:85:b3:dc:9c:da:b4:bc:20:22:b7:fe:b5:
                    b0:f6:b3:25:97:0f:e0:0e:f7:a6:61:38:7b:26:ac:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:61:0F:D9:DD:DF:D9:AC:3B:FE:44:C3:4B:E2:FE:0F:EA:1C:35:87
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.83.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         63:4f:86:4f:60:13:48:0e:23:4c:20:2c:b8:ab:63:dd:21:d2:
         d4:82:a4:3e:b5:8a:75:0f:73:f5:33:2b:c7:6a:7b:c8:f2:de:
         ac:75:41:e3:9a:4c:13:31:ab:2a:c6:83:af:90:ae:20:20:a4:
         92:e0:91:d6:d8:2a:cd:25:0d:a2:b5:12:5f:80:1c:23:8b:68:
         01:02:cd:4c:ee:16:26:34:5c:40:99:be:98:4d:f1:63:4a:73:
         5f:20:7a:7d:53:03:20:85:50:4c:d4:6a:35:ab:7b:e8:7d:52:
         a5:04:59:a7:75:fb:b9:2c:78:04:5f:8c:88:07:11:95:1a:69:
         59:38:c8:99:82:ad:f6:57:0e:6b:80:02:16:07:a9:dd:7f:44:
         58:40:55:f9:86:0a:69:95:7f:39:0f:17:73:3d:8a:b8:0c:42:
         8d:98:57:07:df:c8:23:45:e7:9d:38:e7:1e:82:e9:d2:29:db:
         e9:fc:e9:d1:24:e9:4a:73:bd:f2:f9:ef:ac:b6:0e:8e:8b:4b:
         39:5e:66:c7:fd:e1:9e:ea:2f:dd:d7:e5:e5:f1:07:3d:21:58:
         0b:a0:e2:87:67:30:7e:8a:bd:e4:b9:37:14:ee:cb:3d:9b:93:
         d7:2a:87:3a:b2:7f:68:59:9d:ef:ce:93:a6:52:24:f2:41:31:
         9f:42:6d:27
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJixZYoWN4RDVKfbpWio0rbcaSdQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTE1MDIwMDQ0WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMTY4MGZkMDQ0ZTU1ZGIzYmYwOGY0YTI1NmY1MTRjOTVj
ZjZlNmQ3YWQ1MGRhMTliOTA3ODA0NjY3YjI1MDI5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCKq9+drTITjkedJKevnMQjTn/rr/2kYamu5ym4dRmgkUaW
05k6SKx2F4FbjvttEy00PKsY5v8yCVlorzkjgBxotMoJI7SPl7JMgtAR8AjyoMJd
syt4hMr7Hl4D65Bx2r87oguC/09C5Itq2DsWiqOAMcub/eWyA1af35d+h3MMFN/z
5NHurUuIkVUvmFJF1C2t8vt49Kzh65HS7Z3r4j/Ie21UvaiYR7Lz83A+JBxod3Vr
nRhy7X0A3s0quDFX9CwRIwbsBmjCoh7AFLGWjeBwdgo45eDjDy/1yfBhCcKNJ+rq
yoWz3JzatLwgIrf+tbD2syWXD+AO96ZhOHsmrPMxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+mEP2d3f2aw7/kTDS+L+D+ocNYcwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzA2NjMyZmQwLTZhYmItNDM3Yy1hZWMyLTBhNjYxZTE2NTczOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY2U4AwDQYJKoZIhvcNAQELBQADggEBAGNPhk9gE0gOI0wgLLirY90h0tSC
pD61inUPc/UzK8dqe8jy3qx1QeOaTBMxqyrGg6+QriAgpJLgkdbYKs0lDaK1El+A
HCOLaAECzUzuFiY0XECZvphN8WNKc18gen1TAyCFUEzUajWre+h9UqUEWad1+7ks
eARfjIgHEZUaaVk4yJmCrfZXDmuAAhYHqd1/RFhAVfmGCmmVfzkPF3M9irgMQo2Y
VwffyCNF55045x6C6dIp2+n86dEk6UpzvfL576y2Do6LSzleZsf94Z7qL93X5eXx
Bz0hWAug4odnMH6KveS5NxTuyz2bk9cqhzqyf2hZne/Ok6ZSJPJBMZ9CbSc=
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:00:16 2025 by rpki-client