This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16070da7-9e23-4a70-80a1-3ed5a8951024.roa
File:                     16070da7-9e23-4a70-80a1-3ed5a8951024.roa (raw, json)
Hash identifier:          +BarBZG9UYTrHiqQEVrCQNEIB1weV8cOsYw63Ad6Q7g=
Subject key identifier:   62:4F:2F:5E:66:CD:C9:58:D7:2C:27:D0:7A:E2:97:F6:FB:FE:17:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       57A5BAB92BF5622F6FEE16A5460978A9DA505158
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16070da7-9e23-4a70-80a1-3ed5a8951024.roa
Signing time:             Sat 15 Nov 2025 04:21:14 +0000
ROA not before:           Sat 15 Nov 2025 04:21:14 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.169.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a5:ba:b9:2b:f5:62:2f:6f:ee:16:a5:46:09:78:a9:da:50:51:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 04:21:14 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=2ee25afc04fbb112f8d9b5288a2cc1d90e6c2ba8db0d718e3d94dfb1717d53a0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:83:8e:9e:dc:50:4e:40:05:44:b7:81:76:
                    a5:1b:4a:aa:25:3a:20:2c:0a:6b:54:52:a7:9e:3e:
                    9d:0f:ff:ec:b3:cf:be:98:a0:2f:c5:05:8f:2a:79:
                    a4:c1:e0:56:bc:12:1b:25:4c:24:49:d4:f0:c0:e0:
                    a3:87:fb:b1:9f:15:65:c4:0d:a2:a0:7a:5b:f4:24:
                    ba:f4:f8:07:b5:00:50:76:77:69:0e:f2:db:b8:d5:
                    ad:e9:4a:0e:84:ab:85:dc:59:36:1e:b9:43:d0:80:
                    e7:ef:51:24:7c:70:ce:9f:0f:c2:6a:7d:03:9e:26:
                    87:98:65:92:22:b5:54:c1:35:33:ea:ab:1c:4c:7e:
                    72:2a:0f:99:f1:8f:e2:a0:2a:84:ff:83:22:53:1a:
                    c8:a7:cd:4e:bd:27:af:e2:e4:55:be:53:18:dd:a4:
                    4e:5e:81:7e:08:c1:5f:3a:e7:9e:a4:32:c9:78:60:
                    44:c4:de:ff:54:ba:78:c2:43:8b:58:5b:a2:5d:c8:
                    2e:f7:ee:89:40:2c:84:aa:9a:58:85:2c:d6:d6:54:
                    f5:83:35:d5:c7:c8:71:8f:83:a0:9e:70:9f:ca:d2:
                    25:04:e7:77:c6:7f:4a:78:91:5a:33:9d:40:2d:18:
                    07:df:aa:70:be:1e:4c:17:e8:01:7b:55:7c:04:b5:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4F:2F:5E:66:CD:C9:58:D7:2C:27:D0:7A:E2:97:F6:FB:FE:17:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16070da7-9e23-4a70-80a1-3ed5a8951024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:47:09:8a:9e:52:b3:ec:30:6b:1e:f5:64:20:3e:69:f9:5c:
         39:57:9f:11:46:13:b3:1f:76:ff:f6:d4:5c:55:41:8f:24:1c:
         20:bc:1b:97:21:5e:79:79:7a:33:38:78:c4:70:97:56:f0:d9:
         09:80:c4:ea:01:26:66:9c:b7:43:ac:4f:3d:a8:3a:77:07:86:
         68:b8:fc:28:2f:88:6f:35:5d:6b:d6:92:f3:5f:fd:7a:7c:88:
         5f:05:42:ed:a6:d1:3d:45:74:9a:32:c4:a6:8f:05:96:f5:26:
         a2:9e:9a:95:0f:8e:b9:dd:91:7f:1e:fa:d4:59:cc:66:b0:55:
         67:56:ae:55:29:56:65:0f:73:9b:6b:20:38:37:56:0d:d8:10:
         a2:a6:eb:fb:62:a8:e3:21:47:7a:56:88:61:72:13:0f:3c:11:
         12:9c:67:b7:47:1d:c4:e1:08:40:8b:6a:53:94:46:52:97:14:
         22:76:09:8d:0b:0e:24:2b:46:f7:9b:bd:eb:36:1d:be:bf:83:
         d6:1b:80:e7:61:ad:a1:ed:8a:46:0a:33:b7:84:38:59:a2:44:
         3b:23:43:68:0a:05:eb:e3:9e:d0:76:20:ce:41:82:3e:b4:6d:
         51:46:b7:60:9c:1d:d3:e8:1f:c5:e5:23:b4:a1:0e:e0:b9:44:
         b3:e5:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:59:26 2025 by rpki-client