This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aa61979-d2a7-4700-91c4-b733ecf7bca7.roa
File:                     1aa61979-d2a7-4700-91c4-b733ecf7bca7.roa (raw, json)
Hash identifier:          L9KTNkwPi2U+OPAr/9ila+bL2kYDu8rbAeFbvi8a138=
Subject key identifier:   5B:0E:E3:97:66:18:87:AE:4D:39:CC:27:7F:F6:A8:3C:08:BE:9A:2A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1FAF61B04F855A3529F8BC594F006200F7A0385F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aa61979-d2a7-4700-91c4-b733ecf7bca7.roa
Signing time:             Thu 13 Nov 2025 01:40:07 +0000
ROA not before:           Thu 13 Nov 2025 01:40:07 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.248.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:af:61:b0:4f:85:5a:35:29:f8:bc:59:4f:00:62:00:f7:a0:38:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 13 01:40:07 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=d311626ad74809b0e7b2e196b70df8207359f7cbdd3f757de8090c7c4315cab5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:10:0b:d9:27:5e:84:e1:80:03:a0:d8:d6:
                    7e:99:02:45:47:88:e0:48:52:60:45:7a:3a:77:38:
                    02:a3:5c:53:b4:41:af:04:25:a0:0b:47:76:58:06:
                    16:a6:bf:2b:9b:f9:b4:3d:59:fa:2b:20:ea:fc:c1:
                    e4:3b:5f:ff:b8:11:b2:2c:e6:74:fd:d3:9d:d1:67:
                    ff:7b:98:09:3c:7e:76:80:ab:ea:dd:f7:17:57:42:
                    b8:e9:78:b7:f8:cc:05:1e:5f:e2:b9:16:7c:e7:64:
                    2d:a2:ac:03:b1:cc:4c:57:74:7c:29:7e:db:c1:6b:
                    32:d1:d5:09:ac:5f:5a:d2:d1:a0:a6:3e:e9:98:c8:
                    51:ba:42:82:6d:70:06:36:ba:14:20:56:c2:3c:ef:
                    5c:d4:91:fe:ee:69:b2:42:14:7a:0e:4b:c5:aa:a7:
                    88:23:b7:99:3f:f3:4b:d4:66:87:74:1e:b1:e5:65:
                    1f:af:8c:84:df:f9:f4:f2:8e:ca:3d:14:04:8a:1d:
                    7c:a6:bd:20:51:f1:96:45:8d:b6:e2:e4:01:5a:60:
                    d5:e5:a4:bb:7c:ef:50:41:60:1b:9f:35:cb:5f:6b:
                    15:5e:7d:24:9e:06:de:fe:e9:4d:52:d9:ba:ed:e9:
                    51:37:ba:82:4a:b8:82:61:fc:8d:3e:92:05:bf:e2:
                    47:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0E:E3:97:66:18:87:AE:4D:39:CC:27:7F:F6:A8:3C:08:BE:9A:2A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aa61979-d2a7-4700-91c4-b733ecf7bca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:7f:f9:4b:b0:7b:6d:9c:a7:2d:48:5f:66:3b:81:83:22:
         be:da:b1:ff:61:e2:9d:68:f4:67:f4:57:82:dc:a4:06:d8:4b:
         cc:e0:8a:6a:01:68:07:b5:27:61:04:2f:92:ea:6d:e9:eb:86:
         64:24:3e:ce:45:9e:1a:e7:b5:72:a8:e6:07:b5:0c:93:40:1c:
         8a:6d:e5:a6:50:23:0f:ae:23:7e:4f:1e:45:ec:bf:d0:4c:1e:
         91:eb:be:cd:98:19:f6:19:f8:30:a4:5e:53:40:98:9c:e4:3c:
         89:bf:b0:c7:00:16:1a:80:50:6e:21:10:a4:3c:58:b1:56:1a:
         86:2c:de:3b:a1:67:65:94:77:0d:7d:44:1d:d7:9c:33:41:dc:
         75:f0:32:71:87:a2:15:35:08:24:e2:4d:39:3d:17:82:74:72:
         b1:33:35:82:16:bd:0f:3f:3f:9b:f1:15:a5:fe:f3:2e:67:1a:
         36:e1:cc:0f:01:0f:fb:fb:7b:83:9c:e4:9c:22:10:3e:ca:03:
         ba:05:60:f4:a6:a7:76:ac:9b:5c:60:30:f0:22:2c:fc:14:75:
         e9:f6:2f:e4:f9:2e:4a:46:00:51:fb:56:9d:a0:2b:f1:fe:10:
         ad:c7:43:7b:6d:6f:8b:f6:6b:c3:2c:a4:f0:e0:27:0e:f8:e9:
         ae:a8:17:f3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUH69hsE+FWjUp+LxZTwBiAPegOF8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTEzMDE0MDA3WhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMzExNjI2YWQ3NDgwOWIwZTdiMmUxOTZiNzBkZjgyMDcz
NTlmN2NiZGQzZjc1N2RlODA5MGM3YzQzMTVjYWI1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtGBAL2SdehOGAA6DY1n6ZAkVHiOBIUmBFejp3OAKjXFO0
Qa8EJaALR3ZYBhamvyub+bQ9WforIOr8weQ7X/+4EbIs5nT9053RZ/97mAk8fnaA
q+rd9xdXQrjpeLf4zAUeX+K5FnznZC2irAOxzExXdHwpftvBazLR1QmsX1rS0aCm
PumYyFG6QoJtcAY2uhQgVsI871zUkf7uabJCFHoOS8Wqp4gjt5k/80vUZod0HrHl
ZR+vjITf+fTyjso9FASKHXymvSBR8ZZFjbbi5AFaYNXlpLt871BBYBufNctfaxVe
fSSeBt7+6U1S2brt6VE3uoJKuIJh/I0+kgW/4kfHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWw7jl2YYh65NOcwnf/aoPAi+miowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzFhYTYxOTc5LWQyYTctNDcwMC05MWM0LWI3MzNlY2Y3YmNhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIN+BwwDQYJKoZIhvcNAQELBQADggEBAAovf/lLsHttnKctSF9mO4GDIr7a
sf9h4p1o9Gf0V4LcpAbYS8zgimoBaAe1J2EEL5LqbenrhmQkPs5FnhrntXKo5ge1
DJNAHIpt5aZQIw+uI35PHkXsv9BMHpHrvs2YGfYZ+DCkXlNAmJzkPIm/sMcAFhqA
UG4hEKQ8WLFWGoYs3juhZ2WUdw19RB3XnDNB3HXwMnGHohU1CCTiTTk9F4J0crEz
NYIWvQ8/P5vxFaX+8y5nGjbhzA8BD/v7e4Oc5JwiED7KA7oFYPSmp3asm1xgMPAi
LPwUden2L+T5LkpGAFH7Vp2gK/H+EK3HQ3ttb4v2a8MspPDgJw746a6oF/M=
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:00:16 2025 by rpki-client