This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3c3eae-4fcf-4e4c-b855-8c64d135fa53.roa
File:                     6c3c3eae-4fcf-4e4c-b855-8c64d135fa53.roa (raw, json)
Hash identifier:          Kupn8i18iEQqBnuZDWUP4tBA+I7NnfenS5lx05KdN58=
Subject key identifier:   B1:75:E0:24:DF:2A:76:16:B2:8D:0D:B9:06:76:12:D2:13:A0:28:2B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       48C25F759B4CB796F3B19E80A2239318BCAA676F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3c3eae-4fcf-4e4c-b855-8c64d135fa53.roa
Signing time:             Sat 15 Nov 2025 03:50:11 +0000
ROA not before:           Sat 15 Nov 2025 03:50:11 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.94.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c2:5f:75:9b:4c:b7:96:f3:b1:9e:80:a2:23:93:18:bc:aa:67:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 03:50:11 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=d55a0fc6145d5ff8880cbf99b42b485790e6bd6994c9621714bd1a6931110e18, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:72:87:dd:ed:45:5d:5b:8f:e4:15:e7:29:
                    41:07:82:3c:e0:83:ea:dd:3c:e7:40:7c:5e:b9:8e:
                    73:11:4e:7d:90:ab:8a:e4:1c:4e:8f:4b:0d:62:7c:
                    e8:44:47:a9:9d:26:4a:71:53:e4:c6:c8:1f:48:80:
                    17:d7:ca:98:9a:b9:ed:ed:7f:69:20:1a:9f:47:34:
                    d5:bb:e0:10:c7:96:54:02:f4:04:b6:00:45:22:b0:
                    83:14:95:21:2f:9a:44:fe:70:3a:4b:9a:cd:e2:58:
                    25:47:af:76:a9:2c:56:41:75:78:02:2e:07:64:77:
                    db:2a:f0:3d:f8:94:07:8b:d2:8f:d1:f0:b0:0f:db:
                    0d:0e:32:1f:31:f6:6f:03:c9:7f:e0:d7:a2:4e:7c:
                    85:ee:17:da:5b:b7:21:d4:13:81:e8:8f:4e:ef:75:
                    1b:57:9d:23:de:d4:06:ed:57:1b:1d:c3:1f:48:32:
                    7e:17:9f:d6:de:b2:2e:85:ec:2a:e4:72:b5:f5:39:
                    dc:bb:be:16:58:b7:fe:ab:e2:f0:8f:ba:03:0b:a0:
                    0e:27:d9:ad:4f:c3:93:0e:81:ae:73:fa:55:66:90:
                    14:c8:0e:4c:b9:ae:83:2b:8a:1d:54:73:4c:94:90:
                    c1:e6:5f:5d:62:ca:55:62:22:dc:3b:07:55:f2:a5:
                    f0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:75:E0:24:DF:2A:76:16:B2:8D:0D:B9:06:76:12:D2:13:A0:28:2B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3c3eae-4fcf-4e4c-b855-8c64d135fa53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:99:9a:24:dc:b9:7e:a0:73:3d:49:d6:6e:b9:a6:23:e8:12:
         01:31:35:bd:5b:de:d7:35:49:a6:e9:e2:24:14:18:ef:20:ee:
         5a:4b:6a:7a:13:20:03:6a:ac:3d:b6:bc:b8:39:2b:3d:78:ee:
         f6:52:81:4f:85:d5:fe:ce:f3:45:51:6e:8d:ed:3e:6e:a4:66:
         26:eb:2d:91:74:5c:79:b3:1d:db:d3:61:16:c7:77:33:6f:fa:
         56:5a:ea:e2:0b:24:cc:2d:f1:c0:0c:f4:03:f0:28:57:69:16:
         2c:f2:c5:a2:28:2c:b2:4d:bc:5e:e9:ad:81:ce:94:47:17:75:
         19:6d:3d:d3:0f:33:d3:72:a1:d9:8a:6a:fc:6d:e4:75:9b:f6:
         6c:b5:ee:17:a9:70:c3:61:2b:17:b1:8b:44:40:92:77:3c:49:
         07:68:08:f2:3e:7a:fa:8a:d2:86:00:c4:ae:06:92:3d:9d:44:
         ec:18:30:3e:02:b5:1e:cd:a7:0c:fb:a6:33:06:f5:29:6d:ac:
         82:91:16:ee:ba:5b:0c:a1:af:01:30:c2:5b:55:59:7f:db:37:
         bd:7d:6b:a4:14:c7:eb:17:0e:d7:dc:51:ed:d0:7b:92:2c:bf:
         2d:35:a6:c5:24:31:ef:43:62:8a:68:42:00:74:37:f6:bb:bd:
         b0:46:95:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:59:26 2025 by rpki-client