This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676edaf9-eefc-4d15-806d-4e0758a8314a.roa
File:                     676edaf9-eefc-4d15-806d-4e0758a8314a.roa (raw, json)
Hash identifier:          JNrKxxx83qA5YpB0wrw1ml0uMdPyBIIOmX/sMEvuERk=
Subject key identifier:   3A:AE:D6:DD:CB:CD:44:BA:F9:C3:73:0F:38:85:79:7C:5B:46:9F:9C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       181E3DE24A08B95818F7600C22BD33C376FCD560
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676edaf9-eefc-4d15-806d-4e0758a8314a.roa
Signing time:             Sat 29 Nov 2025 02:01:22 +0000
ROA not before:           Sat 29 Nov 2025 02:01:22 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.215.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1e:3d:e2:4a:08:b9:58:18:f7:60:0c:22:bd:33:c3:76:fc:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 02:01:22 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=333c979e22e03d527088dcba7a2dc5765dc8d756339d02397b62b26bcc4257ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:7b:00:39:63:46:bb:4a:8a:80:c3:e3:0e:
                    54:2c:57:4d:56:70:5a:e0:3f:8a:77:88:de:b6:4b:
                    d9:28:bd:c8:3e:b8:75:00:38:c3:2b:8a:ba:15:6b:
                    af:57:8e:d0:95:e7:11:36:fd:cd:31:00:49:ff:6a:
                    4a:91:25:1c:77:ea:fd:3f:42:7f:5b:9b:33:cc:cf:
                    27:34:27:d4:39:9a:d8:e0:53:e0:9d:2e:a1:78:df:
                    75:90:9d:3e:3d:70:db:6a:76:d5:38:68:43:6c:4b:
                    fa:d9:2c:8c:06:37:58:ca:58:4c:08:6f:ee:10:ea:
                    2b:c0:d7:8a:0f:f6:be:96:b8:3b:51:4a:60:62:39:
                    52:3e:05:5b:f9:94:55:94:d4:7c:00:ff:1b:ce:08:
                    91:e2:df:89:91:f8:fb:ab:11:81:63:d8:4a:b2:70:
                    91:ae:1f:9e:06:d3:9c:a6:76:d3:db:8b:f1:3d:54:
                    c4:5e:5e:0f:81:0f:2a:80:3f:3b:f8:13:fd:74:8d:
                    cd:9d:af:13:fb:48:91:48:ee:11:f3:2c:08:b2:38:
                    af:38:30:77:57:53:0d:68:95:aa:c1:62:60:f0:ec:
                    ad:48:ca:63:27:d1:ce:8d:16:3a:cb:82:c3:36:df:
                    bb:f0:78:75:3e:80:f3:7f:25:07:fd:d7:45:d7:6c:
                    35:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AE:D6:DD:CB:CD:44:BA:F9:C3:73:0F:38:85:79:7C:5B:46:9F:9C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676edaf9-eefc-4d15-806d-4e0758a8314a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.215.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:84:38:fb:18:0f:24:22:7f:35:88:53:a8:5d:56:18:7d:4c:
         1f:4e:c9:aa:25:6f:48:ce:fd:4a:f6:3b:36:62:ab:6f:2e:90:
         70:5d:98:b1:4e:35:3a:b6:02:8b:09:6c:44:08:d4:cc:10:e3:
         84:ac:68:1c:90:53:2e:d6:f3:27:37:b8:43:4b:b0:93:5c:0c:
         11:d5:72:51:a4:7d:d7:80:b5:c3:63:52:a6:66:ca:db:e6:d8:
         25:1d:90:92:19:34:86:ff:a9:59:a0:2c:f9:fb:57:ef:06:97:
         b6:1e:e4:24:fd:26:3f:77:1f:cf:12:6d:fb:5a:b3:52:2e:af:
         a2:db:49:a1:dd:b0:0d:15:31:1f:8e:d4:10:4c:95:cf:a0:bb:
         56:56:3d:26:9f:ba:35:6e:a5:cd:e0:df:2a:b8:22:43:83:a3:
         2a:8f:23:b0:43:d9:e6:7d:25:a9:b9:84:fe:d4:b6:9c:0f:f1:
         73:4a:79:6f:63:e1:3d:36:b0:af:1c:22:99:3c:86:4d:7a:28:
         67:01:6f:9d:5f:50:ca:ad:83:7b:ad:88:f0:85:18:de:2d:60:
         5c:16:ba:8b:72:a4:d5:98:df:d4:e7:f7:a7:6c:0f:44:2c:79:
         b5:ab:7b:c9:46:2f:20:01:af:cd:72:1e:49:27:5a:e5:4b:0c:
         39:9c:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:59:23 2025 by rpki-client