This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ea66562-2b47-4847-be06-40c82e3c114e.roa
File:                     0ea66562-2b47-4847-be06-40c82e3c114e.roa (raw, json)
Hash identifier:          OOzIlSld7yOc0QBfg5EKyp+d4XN+3E4pmJs1kJVhm6g=
Subject key identifier:   61:F3:80:9C:AD:43:B0:A6:56:7D:52:59:8F:1E:C4:7B:7F:AD:5F:49
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6DE76A5000C9BD2796754545D50CE935BA45A5A9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ea66562-2b47-4847-be06-40c82e3c114e.roa
Signing time:             Tue 02 Dec 2025 01:11:35 +0000
ROA not before:           Tue 02 Dec 2025 01:11:35 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.156.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e7:6a:50:00:c9:bd:27:96:75:45:45:d5:0c:e9:35:ba:45:a5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  2 01:11:35 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=662930d93724c58852eb34a161bd6cb2d622bd516e35e52ff2f0c74cf4e1f110, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:64:ff:61:14:00:bf:5a:88:e9:20:ba:b1:
                    9e:65:f7:b6:bc:3b:c2:17:8a:22:b8:6a:2d:47:a2:
                    a0:e0:f9:57:1c:3d:7d:a9:d3:6b:2e:1e:d2:25:a3:
                    2b:15:fe:2a:3b:2d:47:25:2f:e3:06:eb:9e:b4:9a:
                    75:e6:c4:db:68:13:c4:57:10:24:d9:58:3f:c2:e9:
                    35:ed:a3:88:ba:cd:9f:2b:d7:48:c0:3a:0e:79:21:
                    a3:04:46:76:4d:31:b8:d3:f5:7f:7a:fd:83:f8:21:
                    ef:68:df:c8:e4:a6:40:f5:18:88:be:a0:10:b9:de:
                    29:a6:48:2d:f7:eb:72:89:ed:47:ba:5c:f6:fb:ab:
                    b6:5d:79:80:5d:e1:27:0e:21:91:2e:b7:16:46:54:
                    c6:81:93:a8:1d:49:20:be:58:c8:07:a5:79:fe:63:
                    ef:dd:e2:b2:d7:1a:01:a1:7b:d9:93:f3:0b:e4:ee:
                    da:2f:8a:11:84:f5:43:71:8d:5d:62:b4:2f:81:6b:
                    ba:5d:10:1a:3a:70:20:fb:4f:ec:0d:98:63:52:0c:
                    a9:9a:45:89:dd:6c:a5:00:33:60:c7:b8:90:e5:2f:
                    31:82:0d:23:99:61:26:7e:8c:f5:3f:6a:d5:30:85:
                    9a:39:15:7e:15:53:6e:6f:de:b5:dd:33:f1:36:7e:
                    e5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F3:80:9C:AD:43:B0:A6:56:7D:52:59:8F:1E:C4:7B:7F:AD:5F:49
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ea66562-2b47-4847-be06-40c82e3c114e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.156.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:01:69:a7:84:9e:a9:a5:94:20:27:70:20:08:a3:d0:bd:
         8c:83:62:08:b3:07:76:63:d5:6b:0c:6b:c9:fb:09:16:0d:04:
         8b:49:3d:74:79:f7:53:27:79:75:33:f8:4b:37:e8:a3:e0:61:
         7c:80:48:95:cf:30:e1:87:16:57:6d:8a:39:bc:48:e7:6f:6d:
         30:ec:38:70:e5:19:2c:b7:61:14:57:8d:78:f5:f2:bd:df:20:
         fd:b4:c5:f7:33:b0:3f:29:33:66:bf:5e:8d:42:ff:9c:a0:11:
         9a:26:a2:17:b1:7e:8a:a5:78:b7:69:e1:ce:46:1f:5c:7f:89:
         a4:7f:2f:fd:bf:64:82:ce:8f:ae:13:55:dc:2c:74:a8:bb:0b:
         88:e8:d8:e7:ec:18:45:ce:b1:a5:04:c2:71:73:0a:80:64:66:
         ce:2d:e2:3f:bd:87:03:f3:64:a8:86:04:10:1c:60:f4:a7:74:
         ef:83:eb:5c:21:df:9a:81:7c:b4:e3:3b:7b:51:c8:e1:04:23:
         4d:29:d2:84:80:46:84:9b:b9:22:05:41:c8:f9:88:70:b6:c1:
         c9:f3:f4:b1:d4:1a:4d:03:62:54:8d:0f:f3:0d:36:6a:13:3a:
         b5:cb:7c:76:49:e7:fe:b6:73:02:ec:ea:dd:c3:6b:25:be:34:
         3a:34:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:00:45 2025 by rpki-client