This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3397b2c1-e129-473f-bfd1-538ea087781e.roa
File:                     3397b2c1-e129-473f-bfd1-538ea087781e.roa (raw, json)
Hash identifier:          7UyseZkbkkwoOt1x0s0dFwz9qWdyxz1X+FbgVGAs0A4=
Subject key identifier:   25:5E:84:D9:66:F4:A3:63:B3:89:65:48:0F:29:45:E9:59:7E:3F:E2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0EDB79C5AC234144ACAC8C899D4013DC39C226D4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3397b2c1-e129-473f-bfd1-538ea087781e.roa
Signing time:             Sat 29 Nov 2025 01:22:07 +0000
ROA not before:           Sat 29 Nov 2025 01:22:07 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        34.252.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:db:79:c5:ac:23:41:44:ac:ac:8c:89:9d:40:13:dc:39:c2:26:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 01:22:07 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=be8627a13122b76793dcbed3fac4dc9d4e887e14878df72ab3a5f7de5af49294, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:77:00:dd:c8:62:4b:89:a6:ce:9d:48:87:3a:
                    20:2c:46:23:bb:cd:ec:34:50:83:4b:5c:a5:41:9c:
                    e7:74:d2:8e:4a:9d:4e:53:6e:0f:55:89:ff:c0:a7:
                    33:cb:79:f8:41:f7:1b:b8:bb:dc:ee:8c:90:61:2e:
                    46:14:a8:60:02:97:40:0c:98:40:35:27:3a:59:4d:
                    b8:fb:cc:b7:99:b5:5d:70:5a:2b:55:bb:99:81:af:
                    1a:3e:d3:78:da:40:46:15:3d:19:b4:78:64:9b:c6:
                    11:51:3e:a5:ee:2e:f3:3b:12:bd:52:48:ab:eb:ba:
                    e8:10:97:71:21:a3:58:e1:d1:b8:af:e0:1f:94:3d:
                    19:c4:aa:c1:d4:61:27:87:01:ec:8d:21:7a:5d:20:
                    b8:4c:5f:ae:5b:38:8a:3e:5f:e8:7a:00:d2:00:11:
                    40:1c:99:4d:21:4a:02:a0:59:f0:b7:c6:60:8e:aa:
                    ec:df:ad:d3:e3:dc:2c:54:67:e5:b1:b4:3f:08:a1:
                    a8:2e:37:56:5d:42:a6:d3:12:c2:29:29:da:e4:ae:
                    55:29:d5:27:f3:49:70:17:b3:3f:1f:af:be:ce:5e:
                    51:9d:1a:d8:72:84:a2:e9:c4:17:9f:1e:49:e1:71:
                    5a:09:7c:6a:6d:73:04:44:e3:c4:2d:7b:99:0e:82:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5E:84:D9:66:F4:A3:63:B3:89:65:48:0F:29:45:E9:59:7E:3F:E2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3397b2c1-e129-473f-bfd1-538ea087781e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.252.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         09:1e:d6:0c:95:81:a4:1e:be:73:da:08:d9:dc:bc:59:83:93:
         56:71:ed:a1:a1:67:ca:65:a5:0e:ce:e9:17:aa:6b:a2:50:d6:
         d9:32:49:27:7c:59:ac:45:68:e7:be:e5:31:21:32:95:4b:6f:
         77:a9:3c:4d:77:16:fd:9b:11:8c:12:6c:05:f5:bb:46:7c:c5:
         e3:1d:23:23:b5:ce:45:5e:b5:e4:c8:78:72:5a:f5:18:4f:c7:
         ba:c0:65:06:c7:ee:6a:3c:51:ca:85:b1:19:b8:12:03:ee:0f:
         7f:e3:a3:3b:12:e2:98:e8:28:f8:86:e7:d7:0b:57:dc:f7:14:
         41:1d:61:35:95:ac:66:63:87:1a:ef:db:db:12:d0:cd:e6:ba:
         76:8a:62:a8:4d:fc:eb:b6:29:6f:c9:44:bf:11:74:4e:eb:13:
         d8:be:7f:e7:55:4a:b3:50:e9:7e:5e:82:14:ae:3f:06:24:42:
         8b:9f:16:88:1f:d1:b7:89:c5:10:22:c4:28:75:04:e4:b4:fa:
         0f:d6:eb:40:cd:43:83:84:73:05:ec:be:78:2a:26:8e:03:f3:
         f3:67:c9:b4:9f:ed:fa:67:ed:b0:8e:d2:eb:87:c5:62:cd:9f:
         43:a4:51:e3:6d:95:a7:c5:73:37:6c:30:16:41:0f:14:cf:3c:
         14:60:07:de
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDtt5xawjQUSsrIyJnUAT3DnCJtQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTI5MDEyMjA3WhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiZTg2MjdhMTMxMjJiNzY3OTNkY2JlZDNmYWM0ZGM5ZDRl
ODg3ZTE0ODc4ZGY3MmFiM2E1ZjdkZTVhZjQ5Mjk0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCDdwDdyGJLiabOnUiHOiAsRiO7zew0UINLXKVBnOd00o5K
nU5Tbg9Vif/ApzPLefhB9xu4u9zujJBhLkYUqGACl0AMmEA1JzpZTbj7zLeZtV1w
WitVu5mBrxo+03jaQEYVPRm0eGSbxhFRPqXuLvM7Er1SSKvruugQl3Eho1jh0biv
4B+UPRnEqsHUYSeHAeyNIXpdILhMX65bOIo+X+h6ANIAEUAcmU0hSgKgWfC3xmCO
quzfrdPj3CxUZ+WxtD8IoaguN1ZdQqbTEsIpKdrkrlUp1SfzSXAXsz8fr77OXlGd
GthyhKLpxBefHknhcVoJfGptcwRE48Qte5kOgiGzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJV6E2Wb0o2OziWVIDylF6Vl+P+IwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzMzOTdiMmMxLWUxMjktNDczZi1iZmQxLTUzOGVhMDg3NzgxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYi/AAwDQYJKoZIhvcNAQELBQADggEBAAke1gyVgaQevnPaCNncvFmDk1Zx
7aGhZ8plpQ7O6Reqa6JQ1tkySSd8WaxFaOe+5TEhMpVLb3epPE13Fv2bEYwSbAX1
u0Z8xeMdIyO1zkVeteTIeHJa9RhPx7rAZQbH7mo8UcqFsRm4EgPuD3/jozsS4pjo
KPiG59cLV9z3FEEdYTWVrGZjhxrv29sS0M3munaKYqhN/Ou2KW/JRL8RdE7rE9i+
f+dVSrNQ6X5eghSuPwYkQoufFogf0beJxRAixCh1BOS0+g/W60DNQ4OEcwXsvngq
Jo4D8/NnybSf7fpn7bCO0uuHxWLNn0OkUeNtlafFczdsMBZBDxTPPBRgB94=
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:37:31 2025 by rpki-client