This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/250d59b0-8e99-4c0b-a5cf-a3a7150e6d62.roa
File:                     250d59b0-8e99-4c0b-a5cf-a3a7150e6d62.roa (raw, json)
Hash identifier:          2s2zpT0NQNWVsS5AGmpCRlkLu1LqPSBInRDHZvLaaUo=
Subject key identifier:   B0:C5:6C:13:FC:E0:15:5C:A7:AD:34:8B:2D:B2:80:1C:64:89:FC:95
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6CBA4FD8F71803FA9739DA1A61A63988E90EE096
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/250d59b0-8e99-4c0b-a5cf-a3a7150e6d62.roa
Signing time:             Mon 10 Nov 2025 00:30:45 +0000
ROA not before:           Mon 10 Nov 2025 00:30:45 +0000
ROA not after:            Mon 15 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.146.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ba:4f:d8:f7:18:03:fa:97:39:da:1a:61:a6:39:88:e9:0e:e0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 10 00:30:45 2025 GMT
            Not After : Dec 15 23:59:59 2025 GMT
        Subject: serialNumber=818b2168814d68a9b1e16cde23e3c6f2953d808cbad45fdcbbbff2b7516acc0a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:bd:06:ef:59:f1:9c:25:a6:fb:9f:8f:75:
                    17:c5:d0:40:62:dc:92:b6:b3:89:23:75:a6:9a:0d:
                    4e:b4:d5:22:60:fb:37:80:54:9c:28:0a:10:b8:00:
                    86:fc:ab:67:fc:9a:31:8e:c7:24:6b:57:10:84:ac:
                    39:22:c5:51:9f:19:57:2d:d6:ee:fb:c2:58:22:e2:
                    2c:67:e3:a6:39:e1:af:4a:21:3e:7d:8e:83:15:ab:
                    d7:92:07:7e:9c:b6:a0:66:b0:71:12:0d:5b:ed:49:
                    9c:53:d7:cc:44:c3:39:3b:7e:47:26:0a:dd:3a:49:
                    5b:b1:8b:29:5a:92:49:ed:0a:64:33:3e:db:3a:f0:
                    df:4c:db:4c:e3:6d:fb:41:45:73:fd:79:e2:30:f8:
                    f6:00:cf:cc:8f:3d:3b:2e:40:21:51:54:43:5f:42:
                    6b:11:10:78:0e:87:d4:d4:89:e3:90:9b:76:29:d3:
                    7d:e2:ee:62:aa:ec:2f:24:26:ee:1c:fa:41:47:fd:
                    8f:31:14:c8:38:bd:03:cd:ed:6d:7d:0a:33:5d:af:
                    d1:eb:cd:c6:3e:b1:f2:54:d3:e3:c4:2f:f8:b7:b1:
                    1e:9c:29:b5:18:14:51:93:d3:bc:45:fb:e3:d1:fe:
                    16:be:9b:84:b2:41:ee:f7:5a:d0:c7:ee:48:80:eb:
                    a6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C5:6C:13:FC:E0:15:5C:A7:AD:34:8B:2D:B2:80:1C:64:89:FC:95
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/250d59b0-8e99-4c0b-a5cf-a3a7150e6d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.146.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:cd:c8:66:9d:00:13:6f:b5:1d:65:7b:11:d5:38:17:ee:18:
         81:72:13:56:aa:c8:0f:2b:94:21:df:38:28:8c:c1:84:98:ca:
         70:67:f8:1f:93:e9:fb:ed:20:47:58:c5:67:ef:1e:fe:08:28:
         a5:a8:3a:53:3b:1c:a0:84:4a:bb:a2:d3:cf:ab:1d:e5:45:b0:
         76:5f:45:b2:dd:09:0a:a0:8c:f7:a3:ec:ee:eb:dc:8e:39:89:
         a2:3a:73:f4:75:d3:29:7d:e2:11:02:b2:b9:c4:c8:52:19:62:
         f8:b3:d4:00:fc:43:05:26:ba:33:53:c2:74:4d:ee:a6:64:4d:
         19:df:fc:3e:6c:38:98:4a:9d:28:d4:be:d5:fc:00:47:c9:98:
         18:ba:16:5c:aa:d3:f4:e6:9c:83:ad:a9:47:ac:29:70:dc:de:
         84:dd:28:7a:0a:a6:da:a0:9c:43:ac:d8:22:29:cf:a9:90:7c:
         65:85:b2:8e:ba:ae:8c:8e:8c:94:aa:06:91:b9:f7:76:44:62:
         64:79:54:9f:3d:b7:8f:a5:49:41:7d:60:ea:f3:20:4b:2a:cd:
         38:25:2c:22:f1:82:47:b8:65:c0:7b:e8:21:08:61:65:b6:23:
         be:ad:de:cf:be:9a:2e:e0:7e:8d:6e:16:1f:e4:13:cf:50:a5:
         9f:7e:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:58:48 2025 by rpki-client