This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e243997-8dc6-40fa-8d22-5d7bbbf761c9.roa
File:                     5e243997-8dc6-40fa-8d22-5d7bbbf761c9.roa (raw, json)
Hash identifier:          rTViO8i+XlkC6rIWH9MwR8CVKGe+CmoFpEpNervC2Ns=
Subject key identifier:   9D:BD:32:FA:0E:3C:E4:3A:70:33:E5:37:65:20:9A:89:98:90:ED:77
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6143ED542FABC21885DD7C8DF8A198557D1B638F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e243997-8dc6-40fa-8d22-5d7bbbf761c9.roa
Signing time:             Sat 29 Nov 2025 02:00:11 +0000
ROA not before:           Sat 29 Nov 2025 02:00:11 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.192.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:43:ed:54:2f:ab:c2:18:85:dd:7c:8d:f8:a1:98:55:7d:1b:63:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 02:00:11 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=8fc4f31c7503ac56faa97bbddbecb880332a306d0c53c50f081ef9d45798d6b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:44:c4:14:d9:dc:a3:6f:ed:fb:2f:79:4e:5e:
                    15:f9:5f:9c:46:da:4b:4b:c1:85:82:66:6f:44:4f:
                    6d:a5:0e:64:f9:cd:84:af:4a:0e:df:75:bf:eb:5d:
                    9c:39:3a:58:4d:1d:2e:51:b8:9b:cb:d8:45:d9:b5:
                    15:d1:8f:6c:02:d8:bd:c8:9e:db:69:dc:9c:2e:4d:
                    38:7a:b5:1b:b3:68:ff:c4:de:21:fe:00:79:00:81:
                    d6:a2:6e:46:45:19:73:eb:ff:d2:0e:5d:62:78:7d:
                    66:09:35:ad:73:ce:e7:a6:bc:58:0a:86:e6:81:77:
                    2d:82:3a:24:fd:aa:b2:b0:d4:d2:37:04:c9:11:56:
                    d8:bd:f3:9c:3e:c1:15:83:d6:43:6c:b2:97:e7:1d:
                    b2:9d:4f:bb:cd:ad:50:23:a3:a7:7e:5d:2a:d8:12:
                    d1:32:0d:d3:33:df:56:3a:a1:2f:4b:ce:ee:21:a3:
                    71:02:b5:18:c6:49:68:81:36:5c:32:3e:c9:82:40:
                    d9:69:34:6b:8a:43:23:bc:d5:c7:93:af:85:3f:03:
                    7f:09:dc:37:ee:1e:93:d8:d0:25:e4:d4:5d:b1:c6:
                    82:72:9d:22:2e:20:11:38:e4:de:4b:c4:b6:92:a4:
                    0a:cf:f3:aa:9a:73:fa:0a:8a:99:fc:db:ad:4a:4d:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BD:32:FA:0E:3C:E4:3A:70:33:E5:37:65:20:9A:89:98:90:ED:77
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e243997-8dc6-40fa-8d22-5d7bbbf761c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.192.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         42:96:0c:6a:85:ee:ad:be:a1:dd:70:64:0a:5f:b0:75:f3:69:
         35:82:5b:24:52:a3:1e:c4:a8:94:2a:05:5a:af:d3:c1:e3:3d:
         d5:d2:3b:05:f7:b0:f7:67:d0:17:e5:e4:1d:fb:69:11:d2:9a:
         94:cc:71:eb:52:7f:d1:46:cc:2f:c6:4f:6a:78:55:27:10:07:
         88:93:b8:b5:4c:6c:fe:ad:e9:ca:94:db:24:d6:1f:cb:7c:13:
         75:3e:16:39:da:38:d7:a1:89:0e:1f:85:02:d2:4e:4d:cc:35:
         29:d6:72:42:8a:42:09:93:2e:c0:d9:eb:7e:8f:f8:e4:f5:52:
         77:1d:d2:72:1d:07:b0:c6:aa:92:a3:00:47:79:b5:db:11:4d:
         c5:ef:34:dd:01:39:db:6c:34:07:ce:39:c3:43:2d:3c:83:15:
         d7:f5:53:3f:0d:46:84:4e:96:03:52:81:24:62:e5:41:2f:30:
         5e:6e:1b:10:98:09:ee:75:1a:45:2c:e3:62:23:03:01:b1:6b:
         75:5f:10:4f:91:39:51:c9:4e:98:35:5e:b6:5d:17:c8:a1:0e:
         9a:83:71:40:a3:a5:05:61:87:05:bf:8e:54:bd:05:35:58:5d:
         12:51:48:05:44:0a:f5:31:ff:1c:21:c6:02:34:b6:64:5e:5c:
         7f:84:b1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:01:20 2025 by rpki-client