This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f6214f5-5257-492d-b6dc-d87e6251a7cc.roa
File:                     2f6214f5-5257-492d-b6dc-d87e6251a7cc.roa (raw, json)
Hash identifier:          SkySbtTk0oUJ61zIAGZzuqblY0tzTMCgfYucn/p56Ow=
Subject key identifier:   BB:8E:A5:E7:00:23:C3:58:E2:6C:56:50:14:F1:BD:F9:24:D5:44:69
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7CBC7A4844CC4041BBE854C28A5C0166C928BF83
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f6214f5-5257-492d-b6dc-d87e6251a7cc.roa
Signing time:             Sat 15 Nov 2025 02:10:11 +0000
ROA not before:           Sat 15 Nov 2025 02:10:11 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.220.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bc:7a:48:44:cc:40:41:bb:e8:54:c2:8a:5c:01:66:c9:28:bf:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 02:10:11 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=3cc6697c7e624a8adfbb0d826595be60a5ddbe53c9679080db2f0a188156b16c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:c1:b7:bf:e6:f1:de:1d:41:14:1a:c2:5b:
                    5a:88:5a:aa:cb:8a:6b:58:63:f9:36:a6:12:05:7a:
                    6a:4f:d9:4f:ab:c3:02:ab:bc:70:c4:60:ff:ee:de:
                    cd:80:98:74:6a:ba:f1:5a:6b:43:32:89:70:b8:92:
                    94:0c:89:a1:16:f8:8c:a9:8f:4a:02:64:8e:d2:b6:
                    bf:06:9c:24:10:bc:ae:7d:ec:d7:f4:0b:09:e3:85:
                    ea:40:c3:00:16:ce:a7:e4:3f:66:34:68:ea:c3:4c:
                    2c:15:fb:f7:6b:87:22:07:7a:31:7f:2e:6d:ae:c2:
                    14:1a:1a:d0:e2:e2:15:8a:c0:3a:bc:1d:b9:52:c0:
                    66:20:a6:93:78:4a:a0:70:83:97:87:81:f0:ce:2a:
                    5e:10:6e:b8:16:ce:5e:92:74:1c:d1:7c:9f:c6:1a:
                    de:67:9d:f5:de:57:2f:a7:f2:d0:f9:3f:8c:44:94:
                    e6:bb:cd:3d:b5:6f:91:02:38:52:ce:57:34:ca:38:
                    57:5e:e8:e9:51:4e:12:b7:6f:da:d8:3d:5a:77:47:
                    3b:80:fb:6c:93:94:7b:ba:2a:c7:ec:df:cd:40:7a:
                    45:fd:9d:54:63:44:4f:23:6e:b3:e3:9e:a1:2a:55:
                    00:56:95:b9:79:90:97:2c:0b:f2:00:89:5a:ac:93:
                    b6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8E:A5:E7:00:23:C3:58:E2:6C:56:50:14:F1:BD:F9:24:D5:44:69
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f6214f5-5257-492d-b6dc-d87e6251a7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.220.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         58:ff:5a:ff:96:15:f1:d8:de:10:37:98:c6:df:29:76:a5:9a:
         39:fe:b7:1b:74:82:6f:eb:80:22:ec:7d:f7:0a:cf:b6:67:c0:
         05:51:f3:0c:d4:ef:92:a1:5a:5a:23:69:4b:16:48:61:eb:f4:
         eb:a1:12:fc:bd:cd:07:10:c1:47:1a:65:bb:cc:34:f5:2b:38:
         03:4f:02:a7:a9:51:6d:a5:01:48:8e:c2:f2:63:69:9a:dd:b4:
         7f:6e:d5:61:bb:12:34:40:fc:23:00:f7:ab:43:c6:d4:23:a6:
         da:9a:a7:6a:54:57:75:0b:8d:41:dd:35:14:27:66:18:24:90:
         6e:b7:70:eb:dc:43:de:1e:4b:ec:e1:36:e4:b6:34:c5:45:cc:
         33:9f:66:fc:ff:f0:8f:21:50:aa:a9:a4:f5:db:4b:a3:9a:28:
         6a:1a:49:6d:4d:12:5b:8a:8a:d3:bf:9e:fe:3b:36:a2:4c:d2:
         18:0c:74:ba:9c:15:d2:b7:e8:a7:0c:51:e9:e4:60:43:ee:bc:
         13:15:ca:f8:0c:6c:d2:09:b5:42:3d:bb:25:dd:03:46:9b:c7:
         c3:c2:2c:a7:83:6f:fd:fb:6e:1d:1d:53:ab:58:38:93:fe:a0:
         d2:ac:2b:b4:5b:c6:50:1d:f7:a6:52:a8:17:9f:d1:ec:f9:d6:
         94:b3:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:36:30 2025 by rpki-client