This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71d6fc9b-9b22-41df-b4d3-dd916e9addb9.roa
File:                     71d6fc9b-9b22-41df-b4d3-dd916e9addb9.roa (raw, json)
Hash identifier:          SRviIBU0630kvADkKOQR9ZrOe6qN/cnQ9iGQwKhKARA=
Subject key identifier:   86:53:81:25:D6:02:E6:B5:38:DF:AA:7E:D4:EE:E7:BB:B2:1B:00:3B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5ED5438E28E350BFE88CF921BCF38AD678EB9A55
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71d6fc9b-9b22-41df-b4d3-dd916e9addb9.roa
Signing time:             Wed 12 Nov 2025 02:40:48 +0000
ROA not before:           Wed 12 Nov 2025 02:40:48 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.252.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d5:43:8e:28:e3:50:bf:e8:8c:f9:21:bc:f3:8a:d6:78:eb:9a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 12 02:40:48 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=9bede63f7a81f77f2797e3d47e44bc4771040b57104afa38fee500d7004eda04, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:9a:96:0b:5b:29:58:7d:70:cb:e6:d9:4b:
                    8f:b7:99:77:6d:d9:a8:1e:ec:5b:e0:a5:3f:23:46:
                    55:df:87:e0:66:0a:55:22:fa:4b:7a:56:51:a3:27:
                    d7:34:d8:bb:e4:0f:a8:24:a4:d5:38:fc:e8:3d:d5:
                    28:3f:86:44:eb:ad:4d:6b:b7:74:89:03:06:99:bc:
                    ad:2c:97:da:d4:29:98:24:33:90:a8:c3:40:ab:7e:
                    c2:6b:69:a3:96:6f:4d:6c:9c:46:ef:7d:d4:c5:d1:
                    73:8e:e0:2c:6f:cb:ec:2b:09:a4:08:1d:f6:74:3f:
                    4f:55:d0:f9:04:71:6e:49:88:b2:3c:20:0b:b4:68:
                    71:43:3a:ef:68:a5:b0:ec:e1:eb:9b:a2:bc:11:c0:
                    b1:25:34:aa:54:90:bb:dc:8b:59:7e:3e:e8:0b:8b:
                    90:05:91:52:54:24:42:0b:73:3f:19:68:82:e7:6c:
                    79:f5:8e:06:4b:7f:69:e1:6d:c6:18:85:9c:7e:9a:
                    ee:41:59:71:a6:56:e4:0b:6b:8f:75:0b:c7:63:de:
                    a2:c0:59:b9:cf:94:b3:63:c7:c9:ac:78:3b:26:13:
                    b2:39:93:25:e1:78:1d:8f:61:57:41:4f:22:79:91:
                    7b:92:ea:ba:3a:11:0d:f4:88:84:8d:8e:01:94:3c:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:53:81:25:D6:02:E6:B5:38:DF:AA:7E:D4:EE:E7:BB:B2:1B:00:3B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71d6fc9b-9b22-41df-b4d3-dd916e9addb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.252.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:bb:91:99:d2:95:2d:8f:d6:58:18:93:27:fb:ff:82:45:f9:
         24:39:f4:78:ce:7b:39:b2:02:d7:14:b3:d1:50:67:8e:0f:2e:
         71:b9:a9:c0:0a:55:54:f0:34:6d:51:a1:e2:8a:39:1f:36:e1:
         a3:cb:33:bd:e0:34:f0:6d:b8:ba:7d:4f:ec:38:88:41:06:2d:
         40:9b:e6:11:58:83:f0:04:a0:0d:33:33:6d:b2:1a:46:ff:a4:
         01:55:32:05:76:29:db:f6:9b:61:f6:af:50:15:69:ee:d8:77:
         94:3f:9c:f9:a4:fa:3c:2f:11:eb:5a:42:8f:eb:57:81:fa:e4:
         a0:47:61:e7:93:f2:09:f9:db:8a:5d:ff:48:b9:cd:51:c7:b8:
         d9:91:ee:b2:cf:38:fa:c2:b1:a1:6c:ed:c2:a6:7a:e2:9a:8c:
         57:e6:d7:73:fe:4c:75:6d:70:41:dd:0c:e8:22:e7:97:5f:14:
         b6:cd:df:b1:3f:f2:61:1a:c6:c4:78:f0:a7:b0:04:99:d9:4f:
         89:77:3e:d3:35:07:3a:89:83:ad:4f:ea:37:b8:ad:cd:e0:27:
         18:fb:35:ae:de:4c:0c:a3:7e:9a:41:ea:56:cf:cd:be:60:a0:
         87:b6:8e:d3:f7:9e:d8:9b:1d:97:8d:1b:71:1e:c4:7d:00:af:
         df:b1:b7:31
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXtVDjijjUL/ojPkhvPOK1njrmlUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTEyMDI0MDQ4WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YmVkZTYzZjdhODFmNzdmMjc5N2UzZDQ3ZTQ0YmM0Nzcx
MDQwYjU3MTA0YWZhMzhmZWU1MDBkNzAwNGVkYTA0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2PZqWC1spWH1wy+bZS4+3mXdt2age7FvgpT8jRlXfh+Bm
ClUi+kt6VlGjJ9c02LvkD6gkpNU4/Og91Sg/hkTrrU1rt3SJAwaZvK0sl9rUKZgk
M5Cow0CrfsJraaOWb01snEbvfdTF0XOO4Cxvy+wrCaQIHfZ0P09V0PkEcW5JiLI8
IAu0aHFDOu9opbDs4euborwRwLElNKpUkLvci1l+PugLi5AFkVJUJEILcz8ZaILn
bHn1jgZLf2nhbcYYhZx+mu5BWXGmVuQLa491C8dj3qLAWbnPlLNjx8mseDsmE7I5
kyXheB2PYVdBTyJ5kXuS6ro6EQ30iISNjgGUPAyPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhlOBJdYC5rU436p+1O7nu7IbADswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzcxZDZmYzliLTliMjItNDFkZi1iNGQzLWRkOTE2ZTlhZGRiOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2/AEwDQYJKoZIhvcNAQELBQADggEBAIq7kZnSlS2P1lgYkyf7/4JF+SQ5
9HjOezmyAtcUs9FQZ44PLnG5qcAKVVTwNG1RoeKKOR824aPLM73gNPBtuLp9T+w4
iEEGLUCb5hFYg/AEoA0zM22yGkb/pAFVMgV2Kdv2m2H2r1AVae7Yd5Q/nPmk+jwv
EetaQo/rV4H65KBHYeeT8gn524pd/0i5zVHHuNmR7rLPOPrCsaFs7cKmeuKajFfm
13P+THVtcEHdDOgi55dfFLbN37E/8mEaxsR48KewBJnZT4l3PtM1BzqJg61P6je4
rc3gJxj7Na7eTAyjfppB6lbPzb5goIe2jtP3ntibHZeNG3EexH0Ar9+xtzE=
-----END CERTIFICATE-----
Generated at Wed Dec 3 17:59:02 2025 by rpki-client