This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d997d40-5423-4f39-a3a2-b9e9cbd1a476.roa
File:                     2d997d40-5423-4f39-a3a2-b9e9cbd1a476.roa (raw, json)
Hash identifier:          HI7FA+PwGZA0m0pJ307jNpu7YmTFmWjlCXAvcaNguSE=
Subject key identifier:   69:F2:3B:2A:91:F7:98:BB:A1:8E:C6:5A:0E:CA:EC:0D:8A:76:62:0C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       14FB8CDF4FA719699344CD30C0B44CE5B71E16EE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d997d40-5423-4f39-a3a2-b9e9cbd1a476.roa
Signing time:             Mon 10 Nov 2025 02:30:15 +0000
ROA not before:           Mon 10 Nov 2025 02:30:15 +0000
ROA not after:            Mon 15 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.150.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fb:8c:df:4f:a7:19:69:93:44:cd:30:c0:b4:4c:e5:b7:1e:16:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 10 02:30:15 2025 GMT
            Not After : Dec 15 23:59:59 2025 GMT
        Subject: serialNumber=3eeddf390e9e1be532078b1d48b08929b1bc8bd4efed27ce19aedad1161df67a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:a9:3e:49:f5:6a:08:a5:96:36:b8:f2:ef:
                    1f:4d:8a:31:fd:15:73:bc:6b:d2:56:bd:7d:68:fd:
                    57:0a:e1:d3:3c:da:08:a3:0d:ff:9b:33:98:98:43:
                    7f:19:77:25:c7:64:8c:e7:7b:8d:b6:4d:e7:9a:9f:
                    23:c6:b2:9e:db:d7:7a:de:31:73:21:e8:35:b8:60:
                    cb:cc:35:e7:d5:64:62:ea:74:ce:65:7d:5c:17:69:
                    0b:4b:f2:db:6d:7a:89:f1:2a:0d:4f:10:bc:55:69:
                    ca:11:2d:cc:c6:1e:9f:8b:36:33:63:28:8a:c3:5a:
                    be:b9:f3:46:05:6f:67:bd:8b:ed:fa:8b:be:aa:72:
                    4d:ca:10:44:41:45:8d:be:0c:8a:59:93:4d:86:9b:
                    d1:8d:48:95:a2:58:21:f1:a1:22:47:64:4e:63:f6:
                    20:a0:a9:e7:ac:4b:bf:2d:b9:95:b9:d4:88:4e:f7:
                    6d:c5:5b:fb:da:6f:58:61:5f:f7:2b:b3:41:dc:b5:
                    7d:38:03:00:3f:c8:d6:55:c2:ae:a0:9e:67:85:22:
                    88:04:16:a8:eb:1a:6c:1c:2b:7c:e2:08:11:5e:13:
                    05:09:0c:79:be:34:97:3e:07:a2:33:5e:42:5c:ec:
                    44:2b:a2:66:29:0e:a5:ad:68:49:ba:73:b8:85:dc:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F2:3B:2A:91:F7:98:BB:A1:8E:C6:5A:0E:CA:EC:0D:8A:76:62:0C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d997d40-5423-4f39-a3a2-b9e9cbd1a476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.150.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         76:80:8c:a1:cc:30:c9:bf:49:20:43:94:81:9c:53:73:5f:a2:
         85:44:62:d6:9b:38:5b:31:1d:99:ed:7a:db:04:0c:27:f0:b6:
         e9:46:50:14:0a:36:a5:58:5a:52:39:18:f5:7c:83:9f:ab:27:
         17:36:9b:7b:a5:ff:25:63:73:2e:9b:d1:f3:94:30:cb:70:9f:
         fc:41:42:34:2a:05:26:e5:3b:92:92:9b:82:bb:b1:38:d4:14:
         7a:b6:93:65:4f:04:62:78:55:eb:23:c3:e0:a3:58:df:4a:12:
         f5:6b:b6:46:be:a7:eb:ff:c1:43:18:20:04:1e:51:eb:35:bc:
         aa:df:8b:8e:82:c6:14:a2:a6:ad:0f:46:0a:44:1d:21:a9:46:
         89:b6:bb:c4:1b:9e:ed:ef:49:06:2a:fb:cc:b8:07:a9:f8:9d:
         6b:81:07:1a:ba:b3:1b:b5:e8:bd:9e:90:26:d1:89:00:72:12:
         ef:50:96:84:45:5d:6a:10:6b:86:f6:be:47:cb:3c:a8:a9:79:
         d0:38:21:2b:6a:a8:8b:73:88:97:e7:58:84:e0:0e:6a:65:0b:
         2e:9d:de:6b:5f:7c:0f:92:2a:2a:e1:03:fd:e7:33:0f:e9:dc:
         9d:da:cf:bc:ab:a5:32:d1:cb:dc:f7:cc:e4:42:bc:cb:7a:89:
         50:88:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:40:10 2025 by rpki-client