This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4dae6737-4913-4954-9e53-77f772bb7b64.roa
File:                     4dae6737-4913-4954-9e53-77f772bb7b64.roa (raw, json)
Hash identifier:          vw5nseQ2CsA343Az2HxKJOHub4Va0rMaqavSpNlbjs8=
Subject key identifier:   84:62:3A:EB:97:FE:C0:10:1F:7A:03:8A:74:41:98:88:F2:AD:C9:C0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2B3058039F4714994D3C0368834A18FD182E00EB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4dae6737-4913-4954-9e53-77f772bb7b64.roa
Signing time:             Thu 13 Nov 2025 01:21:01 +0000
ROA not before:           Thu 13 Nov 2025 01:21:01 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.93.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:30:58:03:9f:47:14:99:4d:3c:03:68:83:4a:18:fd:18:2e:00:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 13 01:21:01 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=4be7e9ad4ef5b15f2c315dd71b0f106f4ea3826312a94f634613013a710d9249, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:8a:81:90:09:a4:56:70:cb:ed:9e:66:9f:
                    15:92:d3:df:ee:c2:0f:78:47:37:f2:6a:82:70:74:
                    a0:32:c9:04:43:92:6d:4d:4e:eb:3b:6e:6b:ed:a3:
                    79:06:46:24:3d:94:39:57:62:99:14:aa:29:a1:e6:
                    c1:a2:36:95:57:55:1a:21:7a:a7:1b:2b:72:2a:43:
                    0e:57:f1:45:9d:45:77:f7:f6:c3:79:9b:93:7a:34:
                    76:4f:cc:20:15:dc:50:8f:df:0c:86:a2:ac:30:29:
                    97:59:56:b1:ff:46:66:0f:47:74:24:9f:9b:aa:11:
                    e1:a4:35:12:e9:02:60:01:e8:95:b9:75:b2:ab:36:
                    9e:9b:42:35:dc:be:9f:c9:2b:81:a4:3d:f5:98:ac:
                    75:42:d8:92:9a:68:94:37:39:97:a0:be:04:3f:df:
                    8b:3f:e4:78:47:38:e2:12:8f:36:2a:8b:31:d2:ba:
                    f5:bc:d6:47:c9:ec:27:10:54:b2:a2:94:ee:7e:70:
                    e6:ff:ff:90:67:76:e7:1d:02:95:fd:4a:9b:fc:39:
                    60:c9:03:02:e3:c9:62:1f:6a:70:6f:06:4f:14:99:
                    76:50:03:1f:9a:1d:7f:c6:07:7d:25:e4:d3:fb:50:
                    13:cb:76:50:d7:42:99:be:3e:78:d5:d0:83:66:90:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:62:3A:EB:97:FE:C0:10:1F:7A:03:8A:74:41:98:88:F2:AD:C9:C0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4dae6737-4913-4954-9e53-77f772bb7b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.93.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:37:b2:8e:f6:15:ed:4e:cd:98:1c:0e:03:6f:14:3c:38:86:
         3d:fa:23:6e:fd:88:6b:f5:cd:cc:8b:1e:41:61:0e:dc:59:c2:
         48:7a:e4:ee:86:d5:9e:68:61:f8:95:d1:d1:76:65:78:3e:68:
         f7:02:8c:1c:8b:ee:84:70:67:36:0e:f2:78:24:eb:af:8e:50:
         29:3a:38:5d:b1:d4:49:d4:b1:84:62:e4:40:8e:12:ff:3b:cb:
         69:73:5a:55:46:3d:87:d5:83:d5:9e:28:2c:2a:a0:37:0f:c4:
         5b:85:9b:9f:52:06:62:68:3e:ec:b4:a8:39:95:30:8a:57:aa:
         19:8a:ab:42:59:d2:52:a6:d2:35:ca:4c:0d:5d:c4:73:39:53:
         56:4a:3f:39:6c:31:a5:ca:c4:71:24:32:52:04:6d:56:4d:2e:
         a9:3a:97:93:fa:19:c2:af:d4:19:b3:cb:5b:81:47:5a:5f:0e:
         58:1c:aa:10:b4:e2:30:94:f0:08:c0:eb:26:6c:77:1b:f9:c4:
         ed:c9:8b:dd:63:5e:86:fd:06:55:cb:0b:e4:7e:7f:44:57:06:
         73:c1:5b:1c:52:99:db:10:ce:02:46:46:c5:51:0a:1c:3e:8d:
         bb:f8:0a:bc:fa:db:3c:50:cf:f8:52:5c:bb:88:17:a8:36:e3:
         e0:7e:d2:8f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKzBYA59HFJlNPANog0oY/RguAOswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTEzMDEyMTAxWhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YmU3ZTlhZDRlZjViMTVmMmMzMTVkZDcxYjBmMTA2ZjRl
YTM4MjYzMTJhOTRmNjM0NjEzMDEzYTcxMGQ5MjQ5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWe4qBkAmkVnDL7Z5mnxWS09/uwg94RzfyaoJwdKAyyQRD
km1NTus7bmvto3kGRiQ9lDlXYpkUqimh5sGiNpVXVRoheqcbK3IqQw5X8UWdRXf3
9sN5m5N6NHZPzCAV3FCP3wyGoqwwKZdZVrH/RmYPR3Qkn5uqEeGkNRLpAmAB6JW5
dbKrNp6bQjXcvp/JK4GkPfWYrHVC2JKaaJQ3OZegvgQ/34s/5HhHOOISjzYqizHS
uvW81kfJ7CcQVLKilO5+cOb//5BnducdApX9Spv8OWDJAwLjyWIfanBvBk8UmXZQ
Ax+aHX/GB30l5NP7UBPLdlDXQpm+PnjV0INmkLcLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhGI665f+wBAfegOKdEGYiPKtycAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzRkYWU2NzM3LTQ5MTMtNDk1NC05ZTUzLTc3Zjc3MmJiN2I2NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XQQwDQYJKoZIhvcNAQELBQADggEBAAI3so72Fe1OzZgcDgNvFDw4hj36
I279iGv1zcyLHkFhDtxZwkh65O6G1Z5oYfiV0dF2ZXg+aPcCjByL7oRwZzYO8ngk
66+OUCk6OF2x1EnUsYRi5ECOEv87y2lzWlVGPYfVg9WeKCwqoDcPxFuFm59SBmJo
Puy0qDmVMIpXqhmKq0JZ0lKm0jXKTA1dxHM5U1ZKPzlsMaXKxHEkMlIEbVZNLqk6
l5P6GcKv1Bmzy1uBR1pfDlgcqhC04jCU8AjA6yZsdxv5xO3Ji91jXob9BlXLC+R+
f0RXBnPBWxxSmdsQzgJGRsVRChw+jbv4Crz62zxQz/hSXLuIF6g24+B+0o8=
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:03:04 2025 by rpki-client