This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78d822d8-ba7e-4e49-a922-24d84f2b7360.roa
File:                     78d822d8-ba7e-4e49-a922-24d84f2b7360.roa (raw, json)
Hash identifier:          fcvPJEsJvztrgYqjNGr1Qh1u1TbvRmX5IU4eiPkeeI8=
Subject key identifier:   31:E7:34:F1:7B:5A:74:CF:FE:CB:F9:AF:BE:0B:8D:A1:90:4F:D4:25
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1A6C293A6869D170553F2EE6ED3EDBBAE52A37
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78d822d8-ba7e-4e49-a922-24d84f2b7360.roa
Signing time:             Mon 10 Nov 2025 00:31:39 +0000
ROA not before:           Mon 10 Nov 2025 00:31:39 +0000
ROA not after:            Mon 15 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.144.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6c:29:3a:68:69:d1:70:55:3f:2e:e6:ed:3e:db:ba:e5:2a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 10 00:31:39 2025 GMT
            Not After : Dec 15 23:59:59 2025 GMT
        Subject: serialNumber=3668773d43da4e11e4a0539b3b2ead40b66015f98258965b90fd6bb28703bdee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:88:94:bc:30:07:52:c8:1f:bd:dd:3f:8f:42:
                    d7:0a:0a:2b:c5:e5:05:f1:d7:34:5e:33:07:c6:d4:
                    a4:8d:f0:e6:85:ee:44:88:70:ee:fd:05:f7:42:de:
                    39:98:07:f6:a2:77:16:9a:18:06:9a:b7:b0:01:80:
                    40:0e:7b:94:2b:f8:9b:51:9a:4c:7e:97:33:49:7a:
                    ab:f6:4f:fe:ee:81:2d:29:18:30:fc:3b:2f:a8:10:
                    47:85:4b:fa:77:15:a8:58:59:5e:9c:8c:3c:c9:94:
                    67:54:15:35:2c:d5:76:c4:9f:5c:bc:ab:7c:c2:13:
                    0a:0f:4a:97:92:0d:d0:9a:14:57:65:ef:20:ed:40:
                    2d:e8:da:b5:58:1d:35:18:47:5d:76:39:f7:7b:91:
                    a0:38:5b:9b:2e:52:7a:f1:33:85:44:46:27:c6:ea:
                    86:11:e9:ff:12:7c:89:04:0e:a1:d9:17:c7:f6:dc:
                    b1:eb:fb:b7:78:f7:06:50:87:1f:7e:75:74:d8:e7:
                    b7:32:a6:fa:c6:68:81:ea:04:a2:37:4f:3e:b5:dd:
                    a1:f4:f8:2b:ff:08:c7:9f:ca:72:e1:42:78:94:5d:
                    93:e8:d0:77:4b:72:c2:49:a2:54:07:49:34:88:89:
                    94:f1:db:24:f9:59:5a:2d:da:65:c3:37:82:6d:e8:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E7:34:F1:7B:5A:74:CF:FE:CB:F9:AF:BE:0B:8D:A1:90:4F:D4:25
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78d822d8-ba7e-4e49-a922-24d84f2b7360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.144.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         86:59:c8:1f:09:72:a2:f6:63:33:9d:94:ee:02:58:e1:4c:46:
         72:f1:a5:9b:dd:62:0a:f9:70:ae:fa:99:61:d5:f0:d9:41:aa:
         17:14:59:a8:cd:ce:11:61:2d:96:fc:67:c2:e9:32:1e:2e:7c:
         3e:7f:0e:26:40:2d:87:75:8a:76:0f:d4:e3:aa:23:85:f3:86:
         75:93:1c:b8:d3:31:8e:b4:3a:11:ae:03:06:07:9d:c0:47:ee:
         e2:d0:f3:02:03:04:89:c9:73:4e:76:1b:2e:00:0c:b7:5d:48:
         85:80:43:1b:72:83:72:de:81:a8:60:2f:c2:96:c3:8d:50:66:
         86:f6:59:f4:d6:ed:68:73:04:9e:98:c5:4d:ea:f9:2c:8e:82:
         e1:25:84:26:79:50:90:1d:78:b2:6d:81:77:16:ca:1d:be:ef:
         a8:c6:65:4b:39:6c:e1:6e:7f:52:20:81:74:bd:25:be:3a:26:
         3a:50:06:d9:71:80:73:3e:f2:23:1b:55:95:29:e5:77:ef:4f:
         f6:f5:99:d7:7f:35:83:8f:a5:4a:63:db:aa:aa:a8:a0:21:22:
         50:fd:b0:bc:c5:e4:fc:7b:c1:85:40:ed:9e:26:f6:da:4c:06:
         dd:d0:73:06:8d:66:6c:a6:a3:9f:96:c7:89:2c:4d:ec:da:05:
         fc:e7:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:01:21 2025 by rpki-client