This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cff5485-cf8f-4e14-82fb-71e066a271cb.roa
File:                     0cff5485-cf8f-4e14-82fb-71e066a271cb.roa (raw, json)
Hash identifier:          6/V39XGnvcsNel9kd9hm5pKNnEr8TfhhKdvejxwEoA8=
Subject key identifier:   AA:7D:17:FF:D9:91:88:01:48:58:42:5C:68:75:A6:8D:03:97:70:D9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6E44EE8BB0ABFD7CBD3351AFE95C63F6602A2942
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cff5485-cf8f-4e14-82fb-71e066a271cb.roa
Signing time:             Sat 15 Nov 2025 03:42:12 +0000
ROA not before:           Sat 15 Nov 2025 03:42:12 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:44:ee:8b:b0:ab:fd:7c:bd:33:51:af:e9:5c:63:f6:60:2a:29:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 03:42:12 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=d0a15a0f07e35338aab325d6ee262eab025b3b58b60b8f70b3e2609131fde260, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:87:8b:60:65:63:66:13:a8:4a:01:24:d8:
                    16:99:08:7a:0e:d2:01:4a:e6:e9:c6:bd:9f:85:14:
                    9e:e6:03:3a:8a:6d:9b:9c:d9:62:4d:16:79:0b:99:
                    f2:ce:4d:6d:b5:cf:f5:66:f1:90:ac:bf:e5:e1:07:
                    8c:0d:90:e3:bb:66:4e:8b:e7:ff:0f:dd:09:2a:f3:
                    ba:05:c6:c4:5b:b8:52:87:e6:2f:df:92:40:f9:77:
                    ab:29:61:02:32:ea:48:e5:5f:3c:cd:a4:63:8b:c1:
                    90:72:9d:e2:82:46:c8:aa:5c:2b:15:46:24:06:7c:
                    80:1c:8c:4d:3f:25:fa:7f:ea:85:9a:7d:ae:91:9f:
                    94:72:50:e3:5a:44:90:5a:ab:98:dc:f5:62:7a:02:
                    e1:74:9d:5d:40:18:5c:71:0c:cd:87:6d:2c:07:89:
                    69:4c:78:00:b1:a9:7f:28:83:61:f5:de:56:95:94:
                    9c:7c:ca:1d:ac:af:93:fd:50:48:c7:85:a7:3d:88:
                    bb:63:09:25:fe:3f:51:13:ff:b9:22:9b:c4:1f:6a:
                    80:3a:4b:fc:78:f9:ba:e4:9e:83:39:63:bf:52:8c:
                    f9:9a:cb:65:11:02:f5:4a:08:58:58:2e:3d:30:06:
                    cb:f6:16:22:ce:96:f9:3d:ca:ef:22:33:5c:d7:ec:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7D:17:FF:D9:91:88:01:48:58:42:5C:68:75:A6:8D:03:97:70:D9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cff5485-cf8f-4e14-82fb-71e066a271cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:de:3f:de:b1:98:0e:cf:75:59:58:3e:65:8c:a6:cb:29:2a:
         ae:55:8b:74:7f:92:6a:44:8c:26:e7:6f:ed:80:6e:6b:07:c9:
         c5:bf:3a:af:06:f3:21:96:d0:e9:4c:94:27:b8:b7:75:96:e5:
         2a:b3:4e:dd:85:4f:b5:3f:a8:47:e8:52:46:e2:f4:aa:46:1f:
         53:cf:06:7a:6a:37:b6:60:99:97:83:f2:aa:14:05:00:e3:bb:
         08:22:2c:c4:8f:4b:da:b0:5e:cd:d5:5d:5a:a3:c2:42:f8:b5:
         71:82:90:88:e4:ac:41:f0:26:fa:64:9b:e9:27:f6:ee:f6:55:
         29:33:98:02:e7:a8:eb:80:4c:f6:60:54:41:b9:de:c3:b6:d0:
         b4:b8:ca:55:98:2d:50:23:9e:7c:ca:af:ce:ba:93:78:c6:c8:
         6b:f1:81:90:32:a8:5a:df:52:8a:94:bf:ec:5e:c7:ba:cb:22:
         4f:b4:8a:04:f3:ac:66:35:30:90:39:c1:a1:c4:63:b5:5c:ce:
         d1:a7:6c:52:be:dc:e2:35:55:cd:c3:86:df:f6:37:d8:96:a8:
         ad:9f:6f:6b:1d:01:f0:b0:e2:69:8e:e9:37:49:8e:2f:1c:4e:
         14:d8:9a:0a:f9:bb:4d:c4:9b:72:2a:a4:63:79:31:fd:3c:49:
         fb:83:f7:2b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbkTui7Cr/Xy9M1Gv6Vxj9mAqKUIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTE1MDM0MjEyWhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMGExNWEwZjA3ZTM1MzM4YWFiMzI1ZDZlZTI2MmVhYjAy
NWIzYjU4YjYwYjhmNzBiM2UyNjA5MTMxZmRlMjYwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkJ4eLYGVjZhOoSgEk2BaZCHoO0gFK5unGvZ+FFJ7mAzqK
bZuc2WJNFnkLmfLOTW21z/Vm8ZCsv+XhB4wNkOO7Zk6L5/8P3Qkq87oFxsRbuFKH
5i/fkkD5d6spYQIy6kjlXzzNpGOLwZByneKCRsiqXCsVRiQGfIAcjE0/Jfp/6oWa
fa6Rn5RyUONaRJBaq5jc9WJ6AuF0nV1AGFxxDM2HbSwHiWlMeACxqX8og2H13laV
lJx8yh2sr5P9UEjHhac9iLtjCSX+P1ET/7kim8QfaoA6S/x4+brknoM5Y79SjPma
y2URAvVKCFhYLj0wBsv2FiLOlvk9yu8iM1zX7MH5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqn0X/9mRiAFIWEJcaHWmjQOXcNkwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzBjZmY1NDg1LWNmOGYtNGUxNC04MmZiLTcxZTA2NmEyNzFjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0X/QwDQYJKoZIhvcNAQELBQADggEBAAneP96xmA7PdVlYPmWMpsspKq5V
i3R/kmpEjCbnb+2AbmsHycW/Oq8G8yGW0OlMlCe4t3WW5SqzTt2FT7U/qEfoUkbi
9KpGH1PPBnpqN7ZgmZeD8qoUBQDjuwgiLMSPS9qwXs3VXVqjwkL4tXGCkIjkrEHw
Jvpkm+kn9u72VSkzmALnqOuATPZgVEG53sO20LS4ylWYLVAjnnzKr866k3jGyGvx
gZAyqFrfUoqUv+xex7rLIk+0igTzrGY1MJA5waHEY7VcztGnbFK+3OI1Vc3Dht/2
N9iWqK2fb2sdAfCw4mmO6TdJji8cThTYmgr5u03Em3IqpGN5Mf08SfuD9ys=
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:38 2025 by rpki-client