This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25d1778a-9121-4e26-8dc8-e7eed6e82870.roa
File:                     25d1778a-9121-4e26-8dc8-e7eed6e82870.roa (raw, json)
Hash identifier:          azYmeJJH6+tEzmTHiq1ok79Zz0IyIV1jSuM6nzro02Q=
Subject key identifier:   4A:AD:E5:0D:E6:69:C4:17:B6:24:C0:9A:EF:F0:80:8E:7C:B2:4A:C1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       10DF385590D13971F749F2ADF9D2CD05656EDB64
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25d1778a-9121-4e26-8dc8-e7eed6e82870.roa
Signing time:             Sat 29 Nov 2025 01:40:43 +0000
ROA not before:           Sat 29 Nov 2025 01:40:43 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.181.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:df:38:55:90:d1:39:71:f7:49:f2:ad:f9:d2:cd:05:65:6e:db:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 01:40:43 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=e7c92640778bbad291c4bfdcec85f192813cdd75db3677a5f16b357a6afe263b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:6a:d0:0c:22:00:02:d3:15:93:a3:57:84:
                    e7:40:16:cb:a6:2c:aa:89:41:83:fa:31:2a:1a:4f:
                    a3:af:4f:c5:87:a0:f0:02:2e:a1:f7:b8:52:8f:da:
                    a1:6b:72:63:0f:5d:61:24:2e:6c:af:43:2e:07:d3:
                    56:dd:28:6e:2c:01:79:29:07:73:70:08:3a:41:18:
                    0e:78:cc:de:70:41:d3:04:c5:72:b0:4f:34:d9:2a:
                    b3:a2:90:23:32:d8:f0:b2:1f:38:b6:b5:ec:0b:1c:
                    69:6b:17:9d:b5:70:72:58:1c:54:a8:a9:24:53:60:
                    be:1f:3a:d7:41:8a:9e:24:13:ef:06:c2:c5:44:70:
                    36:65:8d:fe:fe:c0:d0:ab:f2:50:80:55:17:63:0f:
                    32:15:5d:ec:63:9f:2c:e6:2e:3f:e4:53:73:c9:c3:
                    c8:83:f0:67:34:5b:e8:4d:ad:7e:73:7a:90:6a:cc:
                    bd:89:c4:2e:4c:11:24:99:71:09:4e:94:03:f3:53:
                    49:0d:e0:14:a4:86:5c:37:71:3c:4b:d1:e7:8e:9d:
                    4a:6e:76:e0:e7:09:d9:12:80:31:b3:8a:d9:dd:67:
                    f5:76:da:ba:c8:c3:c0:0f:cd:4f:48:3f:dd:32:03:
                    2e:72:bb:c8:69:81:c5:31:92:a9:ef:9e:c5:e1:77:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AD:E5:0D:E6:69:C4:17:B6:24:C0:9A:EF:F0:80:8E:7C:B2:4A:C1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25d1778a-9121-4e26-8dc8-e7eed6e82870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:57:15:5a:13:68:d9:c9:87:70:ab:98:de:6c:ad:2d:62:
         f8:db:35:64:f4:0c:1e:92:68:8d:ea:88:70:f8:41:b3:ea:67:
         e1:aa:9c:22:c2:1a:57:f0:98:eb:a5:9e:82:83:17:94:fb:2e:
         7e:01:59:01:ef:11:e4:cb:cb:32:6a:16:0a:0d:a4:85:7e:43:
         f0:ba:86:fc:f7:e6:30:7f:14:50:06:1f:97:60:83:67:60:e9:
         23:a7:06:a6:56:f8:5c:a7:ea:61:6e:c8:c0:dd:01:92:7e:fa:
         67:68:85:97:b6:6b:e9:2b:f3:a5:2c:94:20:6d:90:db:2f:b1:
         eb:15:bd:94:3f:f3:a5:9f:17:2d:e9:6d:9f:89:b6:80:96:e8:
         70:44:81:56:b2:bc:18:b0:36:fe:4a:3a:f2:c7:ee:05:e0:c6:
         72:bb:69:0b:f4:1e:f7:68:de:3a:a5:53:9d:dc:e2:74:76:f5:
         4d:f7:00:a3:38:36:b0:d7:93:b0:65:35:74:a7:69:f0:46:76:
         bc:87:ab:b5:9f:30:8a:cb:e2:31:b7:8d:a2:ee:68:8c:8c:0f:
         1d:50:f2:07:2b:84:d5:66:14:2c:83:a7:ce:20:72:be:dc:e9:
         dc:52:4f:d3:24:76:22:ab:61:c3:54:67:ee:76:4c:57:cd:90:
         6e:6e:27:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:37:31 2025 by rpki-client