This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d46d09f-7329-4d64-85b2-cda5bb3b5a17.roa
File:                     8d46d09f-7329-4d64-85b2-cda5bb3b5a17.roa (raw, json)
Hash identifier:          xJuoGkSi96yTjE57R+Dx2Uc1EE1bIgnlur5j6HuuH/E=
Subject key identifier:   58:E4:57:10:AC:22:BD:31:F2:4B:DC:41:09:19:E7:B9:B2:D7:CE:01
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       329157935151D5D9F8FE4B3DE349D49B0E6F1F70
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d46d09f-7329-4d64-85b2-cda5bb3b5a17.roa
Signing time:             Mon 08 Dec 2025 01:30:48 +0000
ROA not before:           Mon 08 Dec 2025 01:30:48 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.152.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:91:57:93:51:51:d5:d9:f8:fe:4b:3d:e3:49:d4:9b:0e:6f:1f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  8 01:30:48 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=20d3d9f003ea92f17f26bd02e946d5994ad07ee44b308e3575ec6a470ff0562a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:1d:22:ee:1c:4b:ea:5e:04:75:72:7e:53:
                    5f:2f:b3:05:06:cb:43:ee:3f:71:67:f5:ac:a3:81:
                    d3:a3:4b:f7:67:2c:84:96:5d:c1:37:b2:30:74:fa:
                    ca:0d:71:0d:04:5a:46:46:cb:7a:78:67:1e:e0:93:
                    1c:c8:bc:08:b7:10:84:db:d2:c1:65:a8:18:a2:e5:
                    74:6b:eb:6d:79:73:ba:22:ba:a7:f4:6d:02:5b:9c:
                    53:df:6b:4f:0f:4e:57:99:18:2d:d3:98:0d:fc:e8:
                    76:fd:f5:0f:d5:60:02:8a:1c:ea:d3:90:86:98:ec:
                    73:e7:ef:ec:22:55:cd:ab:50:a6:20:c9:6b:3b:9f:
                    c3:e1:6c:6d:eb:ed:50:b9:3e:f3:a0:20:e7:1d:7a:
                    a0:dd:09:f4:da:e5:8a:a8:d8:ae:58:1e:a4:26:ad:
                    ff:30:c2:2f:72:91:2a:1b:e6:1f:e4:0d:8f:df:90:
                    f5:e9:86:07:c9:53:2e:8b:ab:e6:55:2d:4f:de:5c:
                    ff:eb:9f:3d:ec:ed:49:f8:5c:5a:9e:57:87:9b:7d:
                    56:33:d5:32:e5:ac:51:ce:b5:70:e5:ff:2f:8b:f4:
                    5d:e6:a2:05:56:30:b3:d2:43:4b:00:b5:0f:2d:7f:
                    65:67:50:58:c0:a3:39:33:3f:4f:8f:35:3f:03:80:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E4:57:10:AC:22:BD:31:F2:4B:DC:41:09:19:E7:B9:B2:D7:CE:01
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d46d09f-7329-4d64-85b2-cda5bb3b5a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.152.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:75:f1:0a:32:a4:4c:6b:03:ae:74:70:4e:47:c4:c4:e1:
         d1:a0:2a:48:ff:51:0e:07:93:15:d9:a1:a9:25:64:19:17:08:
         7d:ca:f7:49:26:9d:83:64:94:5d:cd:94:67:79:e3:9e:6d:7f:
         53:de:86:96:93:32:60:04:d9:dc:da:47:67:2c:ce:c1:c7:67:
         95:f5:38:7f:fa:27:7e:33:d4:07:f4:6b:25:76:e5:c1:0d:15:
         e0:61:b9:c9:ad:a3:89:c0:a2:fc:c2:82:77:62:04:ca:ec:0a:
         fd:0d:ef:ba:fd:00:3a:af:9c:27:0e:75:9e:fd:f0:fe:25:8f:
         71:8c:f2:fc:cb:1e:91:a8:11:99:13:88:97:e0:c7:be:8f:b6:
         96:a4:e5:ba:c4:41:4d:6a:32:d7:fe:0b:9a:7e:04:b3:db:52:
         c9:4a:a8:4c:cd:bb:0c:44:52:5e:18:ad:8d:5f:8b:c2:01:e9:
         83:04:03:61:78:d8:53:86:31:86:5d:a0:7c:3c:d3:8b:2f:5b:
         f3:78:57:9c:cd:55:7a:34:9c:36:73:c1:d1:b0:b2:e1:b4:ee:
         54:6f:57:f4:e7:ff:c8:10:d1:93:9d:95:ae:88:b6:05:7c:0c:
         6a:0e:cd:ce:bc:ea:0b:79:c1:9d:e8:31:eb:33:db:dc:e3:ee:
         d0:d0:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:47:29 2025 by rpki-client