This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39d6237c-6396-4aa2-aac8-3044077d719a.roa
File:                     39d6237c-6396-4aa2-aac8-3044077d719a.roa (raw, json)
Hash identifier:          xlz8/4ihVRra1L8KmR9khgJi8RRZvK+Wisdbt0lQfiI=
Subject key identifier:   B0:78:7A:0D:A6:92:0C:C0:A1:94:12:79:1D:57:C6:EB:48:D2:F8:9D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       51F70BF95EAAECCA88466A587E9391B6D25C1EBA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39d6237c-6396-4aa2-aac8-3044077d719a.roa
Signing time:             Mon 10 Nov 2025 00:20:08 +0000
ROA not before:           Mon 10 Nov 2025 00:20:08 +0000
ROA not after:            Mon 15 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.182.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f7:0b:f9:5e:aa:ec:ca:88:46:6a:58:7e:93:91:b6:d2:5c:1e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 10 00:20:08 2025 GMT
            Not After : Dec 15 23:59:59 2025 GMT
        Subject: serialNumber=af02cacb24e32323d2942e3d1aa45e29a369f4fb3c539e700fa78a1e3ef231f1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b4:99:ba:82:d0:73:8b:1f:2f:41:43:fb:6b:
                    e5:9e:0d:f5:22:e3:ef:f9:f6:54:de:bf:50:fc:59:
                    e3:10:bc:a1:43:40:9c:c3:8f:be:81:a0:ff:ff:a7:
                    c9:b1:4b:a1:b4:b2:37:80:06:cd:e5:2f:9e:ef:a9:
                    83:01:eb:dd:07:79:6b:26:14:79:10:d7:32:b2:7e:
                    ab:eb:33:e4:5c:a7:71:1d:3d:30:d9:51:ad:9d:8b:
                    b8:ca:40:82:f7:1f:98:f6:ac:cb:ef:14:ea:89:be:
                    ad:8d:a1:4d:21:f4:b0:32:b7:eb:16:6d:7d:34:10:
                    55:a6:5c:4f:7f:af:8f:7a:12:46:01:de:78:e1:e8:
                    79:82:43:d3:30:f7:71:21:ed:c0:c7:6d:8e:bf:b6:
                    ad:fd:8c:d4:06:66:e0:60:74:e9:66:86:f2:35:21:
                    9d:3e:66:d1:75:73:98:ea:17:d1:bb:67:6b:9a:37:
                    b7:f6:6b:6a:36:73:66:37:84:07:36:70:93:a0:40:
                    21:40:25:be:47:36:9e:57:1a:1c:24:4b:e3:23:15:
                    f2:a3:53:39:57:cd:a6:0c:45:51:d9:b1:17:16:75:
                    87:2a:e7:9b:0f:77:2d:9b:47:be:b4:7c:c4:87:1c:
                    fc:80:8f:94:f2:99:19:bd:7a:8f:41:ff:97:66:23:
                    44:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:78:7A:0D:A6:92:0C:C0:A1:94:12:79:1D:57:C6:EB:48:D2:F8:9D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39d6237c-6396-4aa2-aac8-3044077d719a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.182.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:77:c8:bb:e1:62:d9:58:c5:06:b8:cc:93:93:97:76:aa:f1:
         de:91:b1:ab:b2:70:18:1b:2f:c6:f3:14:75:93:01:5f:c4:68:
         f7:0e:5b:46:a0:d6:51:6b:51:63:48:4d:5c:af:07:69:c1:1f:
         83:92:ad:2d:d8:08:74:db:aa:d9:2c:79:47:e0:37:30:ac:1e:
         0e:af:94:0e:bb:34:07:4e:b3:08:ce:61:45:1f:3a:dc:89:59:
         45:2a:a7:c2:81:bb:de:1b:7a:e1:18:3e:2e:e2:d3:81:17:f0:
         2b:85:d0:0a:71:b5:fc:d1:7e:a3:11:e1:f9:0f:eb:ef:22:22:
         2c:bb:e0:48:c8:8b:48:2d:3a:17:b2:95:bf:ff:42:af:b1:fa:
         42:54:20:47:02:f7:a9:50:6a:7a:02:9e:f6:3b:96:49:99:ac:
         95:62:38:cd:6c:89:2e:3c:00:33:d9:cf:51:b1:5c:c8:76:1a:
         f0:a4:57:16:d5:ef:73:bb:f6:46:c0:1f:00:f2:3e:94:0c:f8:
         41:b2:58:f3:0d:3f:dd:0f:2c:33:91:91:3a:17:9c:6d:1e:8f:
         a8:69:c5:36:33:d4:43:3f:ad:1d:01:dc:7e:1d:51:87:92:10:
         15:ac:c4:68:67:54:c4:a3:32:a5:c0:a3:9e:34:e8:94:66:31:
         de:00:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:00:58 2025 by rpki-client