This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a4a4f9b-72d6-4579-bcad-189673783658.roa
File:                     6a4a4f9b-72d6-4579-bcad-189673783658.roa (raw, json)
Hash identifier:          FOx/xrDbrdP8d3vFGVaI6/6PQIXJXNyKHxYcYPP3dJg=
Subject key identifier:   7E:59:7B:85:3A:22:BE:BD:7F:4B:9F:04:D9:6D:98:1A:B3:6D:C2:59
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       795A6FEC03E7C66349DCF08D56AB328629330D9A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a4a4f9b-72d6-4579-bcad-189673783658.roa
Signing time:             Mon 10 Nov 2025 01:01:36 +0000
ROA not before:           Mon 10 Nov 2025 01:01:36 +0000
ROA not after:            Mon 15 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.124.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5a:6f:ec:03:e7:c6:63:49:dc:f0:8d:56:ab:32:86:29:33:0d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 10 01:01:36 2025 GMT
            Not After : Dec 15 23:59:59 2025 GMT
        Subject: serialNumber=e49ff8aab3069b62e0e9cf191852fd9f9203e64e1b3caf096118cf2c8c62e9d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:d7:0a:e3:59:0e:81:aa:7c:cc:eb:63:a0:
                    28:45:4c:dc:ca:82:5a:93:17:04:29:a5:84:ad:89:
                    27:fc:ab:0b:4f:3c:ea:9e:98:52:4b:fb:ac:e7:6b:
                    59:0b:b1:02:42:05:aa:48:f1:23:4a:22:fa:4d:1d:
                    f5:96:b9:4a:08:fb:32:a7:b5:8f:d8:63:ab:fd:e8:
                    ae:19:44:0a:0a:b1:3e:40:8c:e9:4e:cd:c4:39:59:
                    24:6b:04:fe:d9:98:44:d2:b7:ac:60:09:84:d0:31:
                    86:8a:45:cc:0e:b3:04:53:39:b0:c1:ed:6a:46:66:
                    2c:f6:20:7d:94:8a:58:33:eb:b3:b8:19:e0:2c:2c:
                    89:63:70:dc:85:a0:ae:1a:33:d1:54:62:4b:c7:ac:
                    80:bd:fe:37:d1:eb:14:80:72:62:2a:e1:8e:f5:ff:
                    53:4e:23:bf:b8:fc:05:b0:98:a6:4e:d4:32:d9:f1:
                    ef:40:8b:a4:82:9f:ea:0b:9b:76:77:c7:78:a6:dd:
                    e9:94:5a:66:ab:67:ed:89:bc:1e:cf:03:7a:23:26:
                    78:2a:8d:6c:0e:ba:1d:bb:43:ce:ff:40:57:90:b8:
                    84:02:ea:1c:e2:1c:d8:4e:ad:a6:37:44:77:03:63:
                    46:33:09:3b:96:4f:28:43:91:1d:b0:cd:12:ee:56:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:59:7B:85:3A:22:BE:BD:7F:4B:9F:04:D9:6D:98:1A:B3:6D:C2:59
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a4a4f9b-72d6-4579-bcad-189673783658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ff:b5:2d:c8:45:6a:17:ea:3b:33:72:04:ce:63:75:1e:bb:
         0c:30:60:3b:4e:f1:7f:57:96:f6:76:c8:13:46:e0:1a:9d:42:
         dd:85:aa:de:ad:e3:55:01:04:25:71:76:fc:19:24:93:15:f0:
         69:01:d0:df:9c:61:bd:d7:d0:74:3c:3f:8c:b9:9d:c0:6e:17:
         9b:9f:60:42:a9:a3:ab:ad:17:17:68:3e:be:e7:a4:4b:00:bf:
         43:fb:10:c0:71:94:75:91:f6:73:a3:91:a9:96:5d:6f:45:e4:
         19:a9:7c:77:c4:b1:51:41:54:f1:a8:a3:5f:e6:3d:53:9e:14:
         a0:7e:61:ff:b2:23:3b:1b:be:3b:48:49:5d:04:5d:0b:65:a1:
         f6:b3:1b:d0:8f:3b:f1:cb:ca:07:7b:a1:e7:a8:60:b5:a8:05:
         e6:a6:09:31:7a:62:47:7a:8d:14:83:9f:4b:d5:3b:85:da:6d:
         2a:44:64:07:ae:28:7a:27:8e:d0:cb:27:d2:7f:fd:83:df:70:
         e0:f8:cc:00:c0:38:48:26:be:74:9d:c8:ce:18:eb:81:c6:91:
         11:68:51:40:80:7e:bf:07:70:8b:63:db:84:c1:82:55:b8:e1:
         f6:92:61:f4:d9:c4:41:fd:c2:42:3d:4d:28:48:96:0e:7a:7e:
         9e:a6:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:03:02 2025 by rpki-client