This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cafc145-cc20-43ba-8d8d-31718235fe5c.roa
File:                     8cafc145-cc20-43ba-8d8d-31718235fe5c.roa (raw, json)
Hash identifier:          2CCBFrUx6KFI8K6jCh21ogQ2EjW7MOX/pOa3s7TdEdE=
Subject key identifier:   FD:20:DD:25:6F:8C:2E:74:74:07:05:B0:88:3A:A6:B0:25:0A:10:BD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       530FC13331E8BED52D70955DACF1AFBA77B60944
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cafc145-cc20-43ba-8d8d-31718235fe5c.roa
Signing time:             Sat 15 Nov 2025 01:40:10 +0000
ROA not before:           Sat 15 Nov 2025 01:40:10 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.119.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0f:c1:33:31:e8:be:d5:2d:70:95:5d:ac:f1:af:ba:77:b6:09:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 01:40:10 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=0dc43ad5502e6b5e7d48dc65cc9f75640b7c9daae8fbc76cd872363ebe2cb740, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:c4:c1:15:36:dc:50:b7:35:df:26:b8:f6:
                    91:4e:4a:73:11:b5:15:a9:32:71:fe:d6:4c:d4:59:
                    09:e3:e5:f7:32:03:d6:a4:04:56:84:30:11:ae:ad:
                    ad:69:7e:f5:d8:60:ae:9a:33:bb:6c:71:67:4a:7d:
                    b4:d6:37:12:99:2f:82:72:7f:42:b7:44:a5:91:07:
                    5f:cf:16:ab:6d:88:57:80:e4:ba:22:29:b9:08:67:
                    b6:63:9e:08:57:d8:b6:19:a3:5f:db:99:87:bb:e1:
                    6b:40:92:c5:b1:fb:43:50:f1:f5:d8:7a:14:9b:3f:
                    94:be:bb:05:13:51:63:5f:50:f2:08:e8:6f:4b:44:
                    e9:ab:fa:cb:2b:4c:a0:c4:c5:b4:21:71:7e:b6:6b:
                    be:f5:ca:56:ff:6f:9a:b6:8a:e7:e3:ca:39:c9:95:
                    86:3b:29:0f:f0:5b:41:d2:60:52:00:2c:93:9e:34:
                    ce:5b:25:66:0e:74:a5:4c:07:d8:a5:bb:f1:ea:d8:
                    68:0b:fa:00:13:0d:be:13:39:79:7d:ad:8e:ba:64:
                    0d:fa:28:36:3e:1d:fa:95:1c:f8:a2:5e:25:70:23:
                    c0:12:93:aa:50:cd:c2:f2:06:65:50:d3:b6:af:70:
                    c6:42:4b:0e:68:7e:68:d5:77:f7:97:7c:35:91:e7:
                    4e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:20:DD:25:6F:8C:2E:74:74:07:05:B0:88:3A:A6:B0:25:0A:10:BD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cafc145-cc20-43ba-8d8d-31718235fe5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:5b:b2:58:60:4f:2d:66:29:1f:f2:5a:fb:a6:c1:04:2a:d5:
         e8:6d:8a:69:08:ed:61:4f:a8:52:93:8a:66:fa:17:35:59:4b:
         8b:20:da:0c:93:c2:84:46:67:c6:b6:49:cd:d0:72:8a:a0:ae:
         c5:a2:4e:2e:8b:3e:91:95:cf:51:96:25:36:80:5a:f7:bf:3f:
         bf:7f:7a:4a:7a:26:f9:bd:a9:10:99:c8:92:3f:93:0f:7b:23:
         a1:fd:03:54:06:1d:89:10:fc:c8:71:b3:2c:44:33:76:ce:66:
         83:58:8c:da:8e:b0:65:a6:c8:e6:dd:3c:75:58:0c:eb:35:26:
         70:c3:4a:b9:02:63:e3:d9:ef:a9:67:71:e5:2a:02:b2:da:02:
         f2:4e:0d:cc:83:48:d0:6a:eb:eb:8c:e5:6f:1c:3d:58:80:6d:
         d7:bb:8a:b1:b8:1e:c1:63:28:89:fc:22:03:77:30:dd:f9:c0:
         27:df:c6:6e:2f:30:31:39:c7:f7:b7:77:ed:cf:29:6f:96:90:
         a8:15:79:3d:d2:2f:c6:68:70:fc:40:48:93:d9:ec:f6:38:4e:
         7f:a9:d1:b6:38:78:48:2f:10:02:09:2c:10:58:31:03:1e:26:
         6f:00:7a:c0:e4:d5:e3:27:a5:b8:d6:62:48:ba:ba:df:8f:1c:
         3f:98:d8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:22 2025 by rpki-client