This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5eeb6c17-6b56-4f3e-8f7c-e6946dca2cac.roa
File:                     5eeb6c17-6b56-4f3e-8f7c-e6946dca2cac.roa (raw, json)
Hash identifier:          IGCJN1q2gOJMVEcvXFPV+Fxm1L5YA7SvrUyjmEK9fIg=
Subject key identifier:   41:F0:92:CD:89:D1:53:A9:29:3E:53:10:68:C8:C5:67:AE:3D:CE:56
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       48F478FBE8BD9750ADDEEA741D682037954E7430
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5eeb6c17-6b56-4f3e-8f7c-e6946dca2cac.roa
Signing time:             Tue 11 Nov 2025 02:40:04 +0000
ROA not before:           Tue 11 Nov 2025 02:40:04 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.227.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f4:78:fb:e8:bd:97:50:ad:de:ea:74:1d:68:20:37:95:4e:74:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 11 02:40:04 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=79e513c9fe8ca8bcc2d3fc4cd8c500cb3872ac477216a269104bcdbeacfc0f80, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:e1:f6:58:b7:a4:74:06:1a:ef:0c:82:6e:
                    9b:e9:63:a5:80:7a:af:b2:15:34:4b:31:51:d0:82:
                    5b:94:c1:df:0c:7c:dc:33:f9:72:df:5e:54:18:1e:
                    c0:c1:50:1c:bf:b4:47:7c:33:dc:26:f9:3f:8c:1b:
                    67:41:05:cd:f4:ec:54:55:20:28:32:c7:b5:d6:eb:
                    21:94:bf:af:77:74:27:62:b9:f1:b6:60:da:85:f8:
                    c0:8c:44:b9:1c:d1:83:92:ee:54:24:30:96:49:2f:
                    4d:34:b6:64:7f:07:c6:98:40:08:64:02:15:0f:12:
                    62:59:8d:f9:2c:18:12:68:4b:b1:a3:6e:e0:2f:6e:
                    28:20:1c:44:ce:82:13:0d:49:4a:43:9f:fe:ba:2f:
                    ad:5e:d3:35:67:80:c5:d1:d2:d2:30:9b:e3:6a:64:
                    0c:b8:0f:f5:cf:60:7f:33:20:5a:85:7a:fa:d1:c2:
                    b4:8f:03:94:5f:43:3c:e6:0c:3d:a7:b4:1e:12:04:
                    d6:c6:7d:32:bb:41:e4:c0:bd:c3:b6:1f:ef:e5:03:
                    88:ff:da:01:07:6a:e4:64:5f:a7:16:8e:af:38:67:
                    73:63:8b:fc:bd:a3:65:17:d3:8c:86:07:49:84:ee:
                    d6:e7:a7:5c:6a:36:56:db:d9:41:85:c4:00:58:00:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F0:92:CD:89:D1:53:A9:29:3E:53:10:68:C8:C5:67:AE:3D:CE:56
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5eeb6c17-6b56-4f3e-8f7c-e6946dca2cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.227.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:4f:e1:b8:b5:c1:5d:f5:e7:7b:f2:1a:14:5d:31:dd:eb:b4:
         f2:69:56:f3:ec:e9:02:52:ba:6a:f2:15:a4:92:9d:3f:c5:2e:
         3a:ba:82:c0:0f:2d:95:ee:1d:cb:50:bc:9c:08:cc:6e:b1:ab:
         65:ad:58:c5:6d:4e:1e:c7:a2:77:e4:91:14:5c:26:f5:80:c1:
         f2:92:af:f3:c8:54:5f:28:7e:8a:cb:41:31:da:b2:9f:8c:ef:
         0c:29:10:d9:47:75:91:75:0f:ae:e9:a3:fb:d7:91:60:65:55:
         f1:3c:88:8d:32:a3:d8:d8:21:fc:33:a7:75:2f:18:62:20:ad:
         60:61:5a:f6:92:40:c7:ef:7b:fd:bc:5b:ec:0e:1b:a8:16:1f:
         aa:c6:0f:23:49:4d:8e:dd:3b:17:de:44:bc:7e:c1:c1:59:da:
         77:bf:7f:30:97:3e:8e:3b:a8:2c:72:11:61:5d:2b:e5:dd:10:
         01:1b:50:91:16:6d:27:f9:7f:f1:5b:b6:4d:2d:97:96:ea:11:
         9d:1a:47:54:ea:46:b6:c5:41:55:27:2d:48:bb:29:d4:ad:da:
         fc:50:4b:d3:1a:59:d2:79:f7:61:95:ec:c3:9b:4c:f7:38:12:
         39:7b:13:c8:c1:78:f4:dd:37:88:67:72:d1:bf:e2:e9:83:50:
         3a:bb:0c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:40:09 2025 by rpki-client