This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/380eee99-99c9-4ca5-95e3-d588e1af6898.roa
File:                     380eee99-99c9-4ca5-95e3-d588e1af6898.roa (raw, json)
Hash identifier:          SwLn5D5mYQfmeUBE0XU4Bk4P32EksZXJYlfJUC6lP84=
Subject key identifier:   BD:95:0D:4D:BC:24:2F:C3:D9:6C:69:2F:D8:3E:F2:95:C4:75:DF:49
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       47869E1F6D9FA1A6E3DE3FCE274B681607D4C686
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/380eee99-99c9-4ca5-95e3-d588e1af6898.roa
Signing time:             Wed 10 Dec 2025 03:41:06 +0000
ROA not before:           Wed 10 Dec 2025 03:41:06 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.114.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:86:9e:1f:6d:9f:a1:a6:e3:de:3f:ce:27:4b:68:16:07:d4:c6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 03:41:06 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=c384364fe9e698a98f646fda7f766a5c7beb287febf7cd137d5820f6780e004f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:7e:00:a5:2b:55:0e:0b:b2:aa:e7:38:98:
                    f4:06:40:40:24:c4:7d:39:58:63:c9:8a:6e:d6:ef:
                    dd:cf:67:62:ff:25:6d:e2:1b:be:a7:7a:54:f7:4b:
                    21:1a:c2:a0:a9:84:b6:6e:d7:b8:d6:27:97:59:06:
                    59:cd:09:ad:b3:1b:14:97:9d:05:fc:2e:e9:57:da:
                    f6:2b:6e:34:14:4e:52:f7:e5:57:97:bc:42:f3:25:
                    f6:0c:12:61:22:76:57:d9:55:23:04:12:23:dd:f4:
                    8d:63:7d:c9:46:dd:87:81:dc:45:94:a7:d6:d4:c1:
                    24:8c:72:15:ce:ac:e0:18:a4:61:16:51:aa:92:65:
                    86:22:14:f8:fc:0f:11:d4:19:5c:ca:c5:bf:0d:a9:
                    7b:64:f4:23:38:1d:ca:8e:f6:2d:48:91:19:cd:4d:
                    34:f1:4a:b0:59:c1:87:ee:4d:5e:40:34:15:54:7f:
                    b7:37:2c:8d:17:b1:e5:64:6c:59:cd:7b:b3:33:ea:
                    85:a2:05:a3:fa:cd:62:fb:07:f8:12:4c:c9:bc:8c:
                    21:28:9d:fb:e2:fd:4e:15:22:9c:13:d5:6c:e2:80:
                    a8:1d:e8:19:fb:66:9f:79:0e:40:70:e4:05:56:64:
                    48:ba:2a:44:0b:67:99:82:de:a9:64:6d:32:10:ad:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:95:0D:4D:BC:24:2F:C3:D9:6C:69:2F:D8:3E:F2:95:C4:75:DF:49
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/380eee99-99c9-4ca5-95e3-d588e1af6898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.114.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:5a:5e:2b:ac:f1:46:c0:4a:82:3b:17:c7:21:43:b7:e3:4b:
         d2:b0:9f:33:fc:b0:e8:01:e5:7b:47:09:cd:a0:3e:b8:b1:9e:
         77:aa:e2:4d:5b:7d:ef:40:d1:e8:1b:e4:0f:6e:30:8d:76:86:
         73:64:1b:e5:f7:a3:a5:c0:c5:b9:5f:7e:74:07:f2:d8:86:2f:
         08:14:97:56:48:55:43:fa:8f:37:de:67:7e:64:5d:e8:a3:07:
         5b:99:d5:03:e7:61:d7:e5:e1:e0:5f:ae:72:25:6e:a9:11:35:
         ec:1a:fc:15:33:54:c3:70:b0:42:36:eb:7c:20:28:0b:3d:ae:
         88:45:3c:b0:d4:b0:8b:6f:f9:18:6d:d8:d2:81:e3:c5:d2:07:
         03:d8:63:dd:13:6d:25:07:0d:6d:8b:b7:a3:ad:c8:1e:45:0f:
         c0:0c:6b:10:63:c2:4b:5f:f8:b2:5d:86:df:af:6b:91:94:c8:
         0f:e3:2c:92:09:88:15:0c:4b:0c:09:c5:e4:41:9a:de:c0:bc:
         d3:93:03:48:05:6e:92:b8:c2:f8:c1:47:d8:11:b1:de:0b:c7:
         54:96:60:9b:0b:4f:3b:55:d2:58:42:db:cd:85:68:7d:40:71:
         17:42:7b:92:dc:ba:72:23:dc:56:86:c1:a7:a2:ec:a9:74:0d:
         14:09:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 09:52:48 2026 by rpki-client