This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0dd6c7e2-b47d-45bc-910f-cd729038d719.roa
File:                     0dd6c7e2-b47d-45bc-910f-cd729038d719.roa (raw, json)
Hash identifier:          PmmrONcmgncQ6C2UNBIIV/0clgD+GOnAHPY5V8fw4vQ=
Subject key identifier:   21:35:E2:96:F2:E3:52:E3:9E:75:3E:A7:7E:67:E6:80:1B:71:59:33
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       57C5CE292ABC61729AAE1F50399D6864400E4FC5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0dd6c7e2-b47d-45bc-910f-cd729038d719.roa
Signing time:             Sat 29 Nov 2025 01:41:47 +0000
ROA not before:           Sat 29 Nov 2025 01:41:47 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.53.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c5:ce:29:2a:bc:61:72:9a:ae:1f:50:39:9d:68:64:40:0e:4f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 01:41:47 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=d2206c0955a55e56b467f178a3c24729c88fa3cb980595e0fbdf2a1e9b3d8321, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:09:f6:d6:90:58:12:2d:48:ec:e4:bf:3c:
                    8e:59:61:64:eb:6e:6e:46:4f:06:2e:6a:5a:9f:3b:
                    bd:51:6e:5f:ce:5e:76:87:5e:18:96:8e:40:32:86:
                    5d:6a:1d:30:9a:62:ad:3b:a8:12:d5:7f:46:4f:6d:
                    50:10:6c:c2:6b:34:de:f0:7a:1c:01:36:f8:3d:ea:
                    fa:fc:49:ab:f7:5f:2d:cd:70:b7:c1:a9:e7:a0:e2:
                    6f:b1:3c:38:a1:4f:d6:b5:0a:a6:d5:2d:db:88:ce:
                    ea:38:f1:ed:0d:98:67:d2:4e:06:08:72:64:46:aa:
                    5a:89:91:77:f2:10:d8:3f:b1:22:04:12:79:56:98:
                    bc:ee:86:c1:2e:98:c3:e2:79:a4:43:5f:0f:90:d9:
                    0e:4c:42:8b:64:45:70:17:17:53:b3:99:f3:39:1f:
                    00:ed:e7:30:ac:3c:59:f9:3e:3f:87:17:a6:04:7e:
                    43:44:66:7d:34:e4:8b:3d:49:9f:83:70:1c:b2:a0:
                    76:b0:b6:af:10:26:7e:01:a7:a4:d6:41:a1:b5:0a:
                    50:33:34:ff:ab:8c:e3:d9:f3:99:80:ce:f3:53:03:
                    18:db:f9:83:69:41:f5:46:d3:08:ff:05:4f:76:ab:
                    ac:6e:e4:58:16:d0:28:4a:77:c0:5d:87:e5:3f:1c:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:35:E2:96:F2:E3:52:E3:9E:75:3E:A7:7E:67:E6:80:1B:71:59:33
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0dd6c7e2-b47d-45bc-910f-cd729038d719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:f4:ab:d5:79:0e:b0:78:f6:c1:41:92:3f:8f:7f:49:df:
         bb:6b:d0:51:4c:87:f2:98:16:a7:e1:d4:0c:3f:1d:0f:a4:63:
         e6:b5:3f:4d:20:3c:96:fb:fd:1a:6c:17:69:55:44:93:b6:72:
         46:bd:e9:5e:72:e7:5f:be:1c:46:90:e5:99:46:38:da:cf:40:
         e5:cf:ce:45:eb:10:ad:8a:54:f8:ba:84:d0:22:22:86:d9:b2:
         dd:f1:88:a9:a2:81:05:b7:dd:e2:c1:ca:1f:6b:7f:50:5a:9f:
         35:74:1f:d4:c7:b1:5b:43:89:05:4b:59:fb:8c:4c:4c:34:85:
         13:98:7b:c4:53:20:9c:04:2f:97:e0:9c:db:e0:74:48:38:0a:
         8d:9f:a9:06:0e:a9:c3:98:6c:03:a4:6b:ed:10:ed:2a:af:88:
         99:fb:f5:4b:d9:81:d6:a8:4c:ea:6c:b5:21:e9:33:d1:85:bf:
         82:2c:5b:38:1f:c4:bb:2d:b3:76:c4:6e:76:b9:56:70:d5:bb:
         f6:32:af:f6:1b:42:3a:cf:a7:33:0a:64:a7:7f:72:fb:1e:c1:
         91:87:46:4a:47:83:91:2a:bb:6a:27:94:7a:91:aa:77:60:f9:
         d1:80:01:25:9f:d3:be:cf:f4:88:8b:87:8c:ea:e5:e2:66:e3:
         c4:c0:b1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:00:11 2025 by rpki-client