This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa
File:                     273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa (raw, json)
Hash identifier:          wOpeUoM5IORhmFEYZPs4yAopsU0VSthG5RI27A+t7uA=
Subject key identifier:   BE:80:44:6D:51:6E:CB:F6:42:05:F1:C9:ED:2F:83:1F:F5:B6:36:F0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4A3DCFEF3DD04BDB67C05E250EB90E4472E0FA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa
Signing time:             Sat 15 Nov 2025 04:30:17 +0000
ROA not before:           Sat 15 Nov 2025 04:30:17 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.94.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3d:cf:ef:3d:d0:4b:db:67:c0:5e:25:0e:b9:0e:44:72:e0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 04:30:17 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=5182d5055e25a8c046b17de5debcee6c09f6b5a7dd73ad714adb94652c263bcd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:72:13:84:80:e0:08:29:3e:88:0c:7d:5a:
                    be:ad:a9:54:d1:72:80:3f:0e:63:a8:bc:a5:79:83:
                    dc:4b:23:ff:fd:81:da:23:5d:54:bc:2c:26:97:60:
                    75:f1:4d:52:46:44:df:03:07:c5:85:9a:d8:d0:42:
                    d3:f5:4e:85:e0:ce:e4:d2:05:2d:58:93:06:7c:27:
                    9c:bf:8a:76:aa:f2:dd:64:2f:51:1c:f3:71:37:e1:
                    9a:21:ae:0e:91:2a:bd:21:d1:fd:55:37:73:95:d9:
                    e0:01:66:9c:15:21:63:d3:50:94:0a:94:08:e3:17:
                    da:ce:71:61:53:f1:b3:e2:65:81:da:41:d6:5f:a5:
                    02:82:5a:a9:af:66:96:fe:07:d2:3a:81:aa:39:18:
                    73:5e:e1:46:24:38:b9:1a:85:2b:5e:91:c7:92:88:
                    11:af:d1:72:c3:33:8e:cf:d6:a6:6e:96:8c:9a:39:
                    58:1e:9c:51:7e:e4:a4:8a:ab:5b:2f:30:be:25:cb:
                    0f:14:cb:1f:9d:e4:7b:aa:06:86:10:db:28:15:67:
                    e9:08:b7:62:e3:c1:f3:38:2f:c3:69:1c:0a:a2:9d:
                    8b:57:77:9a:8b:1f:73:e7:64:5c:9a:57:40:a6:69:
                    62:c4:bb:78:b6:81:5d:3c:1b:c2:45:da:86:58:a5:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:80:44:6D:51:6E:CB:F6:42:05:F1:C9:ED:2F:83:1F:F5:B6:36:F0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:d3:35:72:8a:c7:bc:f8:d0:fc:33:36:e6:43:c5:80:06:a8:
         fc:6d:1b:6f:c2:7a:29:19:ed:44:55:a0:17:6b:21:c7:6c:40:
         d2:62:9c:0b:db:76:fd:4b:7e:a3:38:43:ec:e5:05:4f:08:de:
         34:af:c9:91:92:63:5b:26:62:b0:68:20:50:37:0b:ff:d9:c3:
         82:d7:d6:9e:b7:a2:91:20:bc:a8:d3:68:13:83:fc:46:4b:f1:
         c1:28:a5:3b:49:fd:20:79:75:41:38:5c:31:2e:b7:90:ea:0f:
         c0:37:1f:ed:8b:45:3b:3e:9e:d3:1f:08:54:ef:08:22:e8:69:
         04:6f:45:e3:30:c4:e7:28:61:7f:e7:db:80:e6:b2:c4:0a:94:
         96:34:01:67:d9:d4:0a:ca:ac:20:27:04:7b:9c:60:a1:a1:c9:
         a7:47:51:19:18:0a:77:9b:1b:b0:12:81:d9:f3:d0:90:d1:2a:
         23:ce:a6:92:b0:71:9a:28:ee:40:81:4b:1d:f4:69:87:31:2d:
         7a:6d:48:03:7a:9f:8d:f9:83:54:82:a7:5a:40:f1:c0:fa:4a:
         7b:66:55:29:f6:6d:06:5e:3e:cb:88:9c:64:c0:e3:2d:7d:0a:
         e2:1c:98:5b:21:cc:4c:1a:79:45:ad:d4:4c:38:34:2c:08:a5:
         2e:a1:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:39:26 2025 by rpki-client