This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f0ca743-e7db-4656-a951-8407ee466b28.roa
File:                     4f0ca743-e7db-4656-a951-8407ee466b28.roa (raw, json)
Hash identifier:          nURsYgeeM1jTu7XopxRdHcHqogr1ylueJlZUGq/tfTo=
Subject key identifier:   83:79:0E:FC:CC:D9:B2:EB:41:6C:16:BA:F1:0D:9C:46:F5:8B:2D:1A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2F36AB00ECCB18F84CD0D7EE1B6E5FCA9AE471FD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f0ca743-e7db-4656-a951-8407ee466b28.roa
Signing time:             Sat 29 Nov 2025 00:50:09 +0000
ROA not before:           Sat 29 Nov 2025 00:50:09 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.215.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:ab:00:ec:cb:18:f8:4c:d0:d7:ee:1b:6e:5f:ca:9a:e4:71:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 00:50:09 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=a8c8ccfbcdf74b14b9abbea72a70aa213037beb2cc13c14d8a849c9e8bf9b62f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:8c:08:9b:94:b2:26:28:e4:cb:b9:44:a0:
                    f2:2c:e1:10:4d:43:66:47:27:a7:a0:f0:9f:5a:06:
                    55:3f:78:c4:65:d3:9c:28:64:ca:62:af:d3:37:43:
                    03:2d:20:6a:71:3a:3f:b5:2f:4f:a7:19:f1:ee:4a:
                    fd:fe:d4:8c:18:98:e8:53:eb:00:5e:94:22:21:88:
                    d4:5e:eb:21:60:5f:ab:22:94:b7:1e:ec:d2:6f:4b:
                    5d:64:b8:8e:de:0e:c1:75:fa:59:13:8f:4a:1d:40:
                    9b:77:c1:4e:dc:77:64:bd:83:b8:af:68:eb:38:91:
                    76:d9:23:20:ac:4e:3b:3c:40:24:7b:58:b9:a0:20:
                    89:0e:5f:e1:f3:f3:10:49:01:dc:cf:93:4a:03:97:
                    65:70:a9:64:ac:ba:bf:59:1a:67:50:16:de:b5:48:
                    6e:90:98:db:32:e0:5d:67:50:04:96:51:a8:30:d2:
                    f1:04:c7:7e:ed:b6:89:07:e9:6a:b5:ab:c5:58:c4:
                    57:71:2f:2a:29:7b:54:92:69:5d:90:39:9c:3f:a0:
                    fd:9c:cb:c0:26:bf:88:f2:c4:c1:22:3b:b5:3e:83:
                    6e:4a:14:e4:d7:fe:2d:ce:0e:cb:e5:86:d7:d2:db:
                    b1:dc:54:d9:ab:15:0d:df:9e:dc:70:dd:06:21:89:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:79:0E:FC:CC:D9:B2:EB:41:6C:16:BA:F1:0D:9C:46:F5:8B:2D:1A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f0ca743-e7db-4656-a951-8407ee466b28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.215.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:48:45:36:26:0b:cd:cb:0e:ba:aa:ae:77:43:0e:20:29:3e:
         d9:79:c1:d6:78:23:2c:06:49:8e:52:55:f3:6b:10:3c:02:a4:
         9d:9f:37:d4:14:e7:ca:91:07:ca:47:b1:b8:7b:39:4b:5f:a0:
         13:18:2c:dc:17:5d:0c:eb:99:60:7e:a8:13:01:8d:17:fd:9e:
         22:3e:ca:22:8f:44:54:ac:12:ee:a4:15:e5:aa:3b:02:33:f2:
         87:e1:90:c8:45:f4:e7:9d:3a:5e:6b:4f:20:75:93:cf:c7:96:
         3a:da:bc:a7:de:c7:bb:38:70:5a:e0:bd:ac:c9:e3:65:49:16:
         70:7c:a3:e8:99:74:49:4e:6e:99:8d:bb:85:a2:c5:17:47:af:
         35:8b:e3:8b:f4:5b:78:a4:29:5f:5a:31:96:6d:7f:37:29:ef:
         9c:e8:74:bd:ec:59:10:0b:79:b5:08:7c:e6:64:3e:bf:50:90:
         e6:cc:f9:ee:59:ea:d4:6e:5b:c0:27:30:13:07:61:4e:00:e1:
         4c:7c:8a:c3:de:ed:02:41:fb:1f:70:64:c6:fd:62:28:19:ba:
         54:0a:80:16:29:6e:50:6d:c0:b9:69:2d:7b:c0:e1:b5:c3:6a:
         fa:35:cc:bf:36:9d:66:a4:44:6a:15:6c:48:f6:e4:27:b3:52:
         05:c8:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:00:25 2025 by rpki-client