This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/343c963c-2a3e-4928-9210-25faa7d2e157.roa
File:                     343c963c-2a3e-4928-9210-25faa7d2e157.roa (raw, json)
Hash identifier:          /etXCIwUCxDqSbSUsgXPu1J07HMEYgBXIKGmvwejPCc=
Subject key identifier:   FD:49:A7:F8:A0:0A:E5:CF:A5:62:BF:D9:6D:C6:8F:DC:A2:86:B0:70
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2D79C70CF45FA9FF235A7E4AFF8999BA1BBF9A46
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/343c963c-2a3e-4928-9210-25faa7d2e157.roa
Signing time:             Sat 29 Nov 2025 01:11:16 +0000
ROA not before:           Sat 29 Nov 2025 01:11:16 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.248.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:79:c7:0c:f4:5f:a9:ff:23:5a:7e:4a:ff:89:99:ba:1b:bf:9a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 01:11:16 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=5e028a73e6af2455bfaee3636764e2ccd2f0d5b0aadf639858f50df9988aff1e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:b4:02:dd:e8:28:b7:7a:22:dd:fb:2e:1f:
                    b2:af:15:cd:a2:df:2c:b1:bd:3d:1b:1e:f4:17:51:
                    59:3b:ca:f0:37:fd:bb:3e:cd:e4:a6:54:c4:f9:d5:
                    2d:a1:da:f9:61:56:41:5e:ed:7e:55:5d:f8:d7:1f:
                    46:98:92:ad:99:c5:2f:2b:c7:d8:51:00:24:05:37:
                    b2:d0:51:dd:3e:31:85:0f:03:33:77:43:d3:44:72:
                    1f:ad:b3:35:9c:d6:45:49:29:31:d0:78:82:b0:c9:
                    00:7a:0c:a5:fe:ef:8f:89:67:1a:34:3e:01:83:e5:
                    6e:59:79:1a:ec:f2:e1:9d:80:63:8c:a2:1f:9c:61:
                    1c:36:f3:d7:16:8e:97:02:ec:b9:ca:cd:03:f8:f5:
                    19:67:98:7d:7d:58:0b:91:fe:fd:a5:d9:6e:41:13:
                    ff:3b:0f:a0:0b:b2:fe:0a:a2:fa:bd:d8:ec:7b:d3:
                    ed:46:5e:e6:96:1a:e0:0d:4f:63:a0:72:f0:8e:5e:
                    f2:2f:07:f7:91:bb:35:dd:22:d5:07:42:31:e7:6f:
                    a0:73:2f:a7:ef:46:5e:5b:c1:56:69:fc:27:53:51:
                    74:2c:50:79:fc:78:be:b4:e5:17:0f:fe:be:bf:93:
                    58:f2:d2:46:51:4f:ad:04:f9:b5:e7:68:b4:dc:b8:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:49:A7:F8:A0:0A:E5:CF:A5:62:BF:D9:6D:C6:8F:DC:A2:86:B0:70
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/343c963c-2a3e-4928-9210-25faa7d2e157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.248.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:e5:11:01:4d:c5:3d:ce:28:79:98:02:a5:37:49:1c:df:85:
         16:c5:b6:f1:7e:16:35:0a:f1:c2:a8:4b:fc:9e:48:a0:05:58:
         12:3f:78:63:b4:6e:27:23:a7:68:e4:fc:12:09:28:81:42:28:
         cc:da:d5:c2:ea:d6:14:e7:e8:67:9b:37:4d:0a:fd:14:0b:07:
         b6:84:79:e1:95:b1:ad:6e:f6:cb:7f:74:1f:d4:cf:3f:42:d9:
         7d:ec:bb:f9:28:81:d5:1e:16:11:22:c0:38:83:b8:d7:6d:e9:
         b0:df:b3:a8:75:eb:ec:1b:7e:11:e9:e6:86:01:7c:73:dc:c6:
         07:c7:2d:77:fe:d4:3b:06:5a:09:7a:ab:f4:cc:db:98:7d:bf:
         3b:c7:c6:58:8e:67:9f:2a:20:ef:56:38:47:33:49:b4:5d:7b:
         71:ad:ce:99:b3:43:02:08:e1:72:7a:c3:80:46:61:be:6f:68:
         74:d0:fa:9e:4b:86:5f:d0:c2:c1:ef:a9:f8:fb:15:d6:91:22:
         f1:54:49:e6:42:c4:a7:94:65:dd:22:25:df:08:0f:d1:eb:1f:
         d9:38:c6:99:a4:57:65:f4:52:69:40:94:ca:1b:21:2d:6d:aa:
         bd:ed:43:61:c9:bd:a4:89:b9:f9:3d:45:cd:79:ee:f5:bb:22:
         7b:46:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:59:18 2025 by rpki-client