This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50767251-a434-47e8-aaa4-6818dde30f2c.roa
File:                     50767251-a434-47e8-aaa4-6818dde30f2c.roa (raw, json)
Hash identifier:          qhhTtGKNXFQ4/B3MtGufWwP8suKGEiKRl0eP77Ghy6g=
Subject key identifier:   3F:DD:BF:02:12:F4:E4:00:DE:A6:05:A0:D6:29:FE:A6:8A:25:E9:01
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5AD4DD2C11C5B8511463C8BA890B05A467CB2242
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50767251-a434-47e8-aaa4-6818dde30f2c.roa
Signing time:             Sat 15 Nov 2025 02:40:12 +0000
ROA not before:           Sat 15 Nov 2025 02:40:12 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.150.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d4:dd:2c:11:c5:b8:51:14:63:c8:ba:89:0b:05:a4:67:cb:22:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 02:40:12 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=059f718c620ded0af250dcfa38d6ab9db183eda90c5ed4f9982fdc0f73a1d516, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:e4:52:44:1f:82:fb:e0:90:7e:9d:ef:80:
                    ba:4c:34:71:53:73:9c:af:e2:db:76:dd:82:dc:b9:
                    1d:8b:bf:a1:da:50:28:ce:05:fe:f4:d7:78:15:7f:
                    ac:6a:0a:20:1c:a2:e4:ae:6d:a2:ad:1a:2b:e3:5e:
                    b9:e0:07:dd:39:72:c5:e4:5d:19:ff:09:dc:05:6d:
                    96:c0:42:81:95:aa:20:10:86:0d:c2:ed:67:5e:8b:
                    3e:1a:40:6f:76:f6:e5:d4:75:d1:c6:32:f9:b5:f6:
                    ed:4b:db:e7:fc:c5:50:43:a2:31:9f:44:97:52:a2:
                    70:55:dd:3b:bc:87:21:20:f1:9d:bc:83:a1:63:8d:
                    51:bd:83:a6:f1:9b:aa:e1:e6:83:f6:e7:aa:aa:eb:
                    ef:36:2a:6e:61:82:8f:f1:ec:98:2a:59:38:c5:e7:
                    61:1f:39:e6:2c:74:59:93:32:0e:39:d5:52:aa:80:
                    ac:7b:0c:e5:b8:7f:4f:d1:71:9c:59:e8:44:68:c3:
                    74:4d:3c:e6:67:a5:56:f5:a6:34:b7:db:40:57:70:
                    95:89:65:6c:54:5c:07:72:38:27:3f:41:c5:e0:13:
                    8b:8b:b0:a7:f6:80:45:f4:6e:3b:c6:c3:b1:92:7a:
                    ac:46:92:82:ec:ad:bd:68:fb:8b:61:96:c1:0c:0f:
                    1a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DD:BF:02:12:F4:E4:00:DE:A6:05:A0:D6:29:FE:A6:8A:25:E9:01
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50767251-a434-47e8-aaa4-6818dde30f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:b3:95:6e:9f:9d:16:02:10:59:c6:f2:f8:22:72:50:c8:
         5f:3b:e0:b4:5e:92:0c:d5:d5:14:6c:d7:8a:21:82:43:a0:3f:
         9c:24:fe:82:3b:21:9d:d6:eb:e3:e2:86:4e:f0:64:2d:59:9c:
         8c:db:06:61:30:13:3f:af:53:13:63:36:1c:20:64:fd:8c:08:
         8a:07:41:bb:dc:82:7d:60:c1:c9:af:3c:d5:bb:74:19:48:9d:
         a0:cc:a3:2e:65:7e:63:1e:29:bd:7f:83:be:51:11:bc:45:6c:
         0b:0e:55:ae:6a:73:c5:24:2c:50:5e:1e:ea:97:ba:fb:ab:31:
         8d:1f:65:d1:aa:ed:44:de:f9:f4:39:d2:18:7f:1c:8c:2f:83:
         7f:54:94:50:8b:4c:50:02:42:4c:2f:cc:fa:46:ad:48:54:f8:
         99:d9:94:c9:39:61:ab:c8:b3:f0:32:50:db:a1:4c:f4:07:73:
         0a:8f:7f:51:17:84:c7:9f:55:d4:e5:7f:8e:11:d0:81:5c:eb:
         c0:8a:09:e0:cf:4e:77:a5:1c:95:b3:bd:81:8d:bf:ed:b8:87:
         25:d6:fe:74:fb:dd:72:95:6e:fc:cd:b1:40:d3:a1:15:b3:39:
         87:f1:b6:bb:06:94:ca:72:f8:8e:9e:46:78:8f:7c:51:6f:59:
         68:af:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:00:12 2025 by rpki-client