This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa
File:                     33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa (raw, json)
Hash identifier:          Yj+qre4ykJw/vHE0PwTFCC9ZHbIOgp65oHvYQDg/jSE=
Subject key identifier:   B6:8A:B1:CD:F3:EA:51:D2:37:56:A4:55:8E:42:43:AB:91:14:A1:99
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1DBE7A194B64DE5D9261F1242F1DB101E5993BFC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa
Signing time:             Sat 15 Nov 2025 03:20:50 +0000
ROA not before:           Sat 15 Nov 2025 03:20:50 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        52.94.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:be:7a:19:4b:64:de:5d:92:61:f1:24:2f:1d:b1:01:e5:99:3b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 03:20:50 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=d25c143b27c68af1b47faa17bd602d264c72aa9bd72dd40a89f4851632d46462, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:40:92:09:41:d1:59:fb:30:0e:12:b4:cb:
                    49:55:4b:28:aa:58:72:ee:e6:d4:cd:b8:d6:65:c7:
                    33:85:c7:47:2c:6b:9a:18:26:71:86:fa:25:86:33:
                    b8:71:a4:e6:cd:2b:48:8f:82:cc:7e:11:a8:b0:86:
                    ad:dc:65:71:64:52:44:b5:78:c0:8a:70:78:8b:18:
                    f5:a0:3f:2c:80:95:0d:eb:c3:97:47:4d:25:c2:8e:
                    b3:87:fe:b7:ff:33:bb:7f:c4:72:c3:16:ca:e5:fc:
                    94:fa:3f:30:78:61:1a:f1:42:42:85:e8:b1:c5:6f:
                    5b:38:ed:7e:ad:da:34:66:02:e7:7f:11:77:ff:3b:
                    ff:84:25:4d:f8:30:bc:74:9b:aa:b9:5b:92:9c:76:
                    50:a3:6e:00:c6:0c:74:3e:6f:91:92:ce:a7:c7:56:
                    4d:c5:cc:a8:2a:23:fa:e8:f5:19:50:f1:ac:c1:95:
                    cb:74:39:87:0d:1a:2c:84:59:26:47:2a:8e:5e:89:
                    60:4c:ae:1f:04:dc:65:45:53:1e:b0:a7:86:82:08:
                    66:14:f8:de:73:89:88:bd:36:85:fa:fe:ad:6e:06:
                    4e:c0:5f:d5:a7:80:bd:21:cd:c9:f7:e5:d7:eb:d0:
                    54:2b:b1:81:14:14:ba:2e:17:73:24:1d:bd:51:43:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8A:B1:CD:F3:EA:51:D2:37:56:A4:55:8E:42:43:AB:91:14:A1:99
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:00:7f:7f:60:c9:8d:a8:72:e0:a6:e9:d9:4f:47:a0:ea:f5:
         3a:29:26:8b:66:c2:b3:be:c3:36:21:62:8a:71:18:f9:a8:87:
         35:e1:d8:82:26:fb:70:96:ed:7d:d1:ad:d1:81:75:e1:f8:4c:
         0d:47:f4:fc:37:38:50:90:78:26:16:88:bf:97:b8:ef:1e:34:
         12:e2:cb:d2:9a:54:a8:81:cb:fe:bc:17:7a:fb:bf:f9:45:9f:
         27:88:ee:26:d8:65:fe:1e:6f:5e:9f:d6:e7:a9:84:18:fc:88:
         0e:ca:4e:0a:b4:c2:22:ce:e8:ab:20:98:71:66:ae:aa:b6:93:
         b5:73:de:1e:e1:69:2b:e3:be:6d:9b:2f:ca:17:d8:d6:b6:84:
         cf:6b:2e:8c:09:e2:5b:9d:62:ab:5c:6f:d6:49:e4:f9:ba:88:
         69:d6:2f:c7:f2:93:af:f6:19:a4:6d:83:3e:f3:ad:d3:3d:1d:
         95:81:82:3a:c2:55:46:2d:1f:3f:48:33:4d:66:ff:98:48:66:
         2a:2c:4b:62:cc:57:68:53:09:d2:fc:92:8d:b8:97:26:04:f0:
         15:96:b3:65:29:06:35:cc:67:37:21:6c:fc:86:58:8f:2e:6c:
         07:51:18:17:54:e7:99:50:d4:ec:21:d3:5a:ac:c9:7b:81:db:
         6d:26:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:32:57 2025 by rpki-client