This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9671b3fd-17f9-4051-9e11-55bea5a8385b.roa
File:                     9671b3fd-17f9-4051-9e11-55bea5a8385b.roa (raw, json)
Hash identifier:          YBWiItgO2h0mfAcnVlZv/1EK4cugkZt+nr8fgV76gOk=
Subject key identifier:   2D:A7:25:83:C1:AA:29:DE:B4:E7:62:71:C9:3D:51:97:9E:7D:72:9B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       15D0D6BD82B70DE8DE6DB1CEC5EDAC4A360B1645
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9671b3fd-17f9-4051-9e11-55bea5a8385b.roa
Signing time:             Sat 15 Nov 2025 03:00:10 +0000
ROA not before:           Sat 15 Nov 2025 03:00:10 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d0:d6:bd:82:b7:0d:e8:de:6d:b1:ce:c5:ed:ac:4a:36:0b:16:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 03:00:10 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=e25cd6d113774c01843a0b69a5f2bff963f687fd029182ad1b3b410865bd09f4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:56:fe:f1:aa:37:1a:73:0f:d7:1c:17:af:2b:
                    3e:45:77:7d:dd:c1:77:f3:37:6a:0d:54:45:25:db:
                    31:a2:06:13:dc:96:d0:58:ce:fa:60:39:d7:ee:6c:
                    4c:24:07:45:25:b7:99:76:4f:6a:c5:68:74:5c:69:
                    a2:35:92:f5:78:f6:09:98:40:60:1e:ec:29:44:f3:
                    22:c2:a6:d7:51:85:06:b4:b4:c9:cc:5c:b1:2e:c9:
                    9c:e7:40:e3:ca:f8:58:1c:45:41:f2:f4:af:52:c8:
                    28:fb:22:7d:ae:67:57:8c:f9:2f:78:35:49:75:be:
                    ce:ae:44:9c:e8:85:d1:08:c8:cd:11:51:54:48:da:
                    52:28:fc:21:ee:fb:d4:53:fc:f5:78:3b:07:4b:76:
                    6c:9b:12:49:68:65:9a:73:66:54:92:4e:fb:30:d6:
                    29:7a:96:1b:bc:4f:2f:fd:12:79:21:07:5a:cc:27:
                    c4:1f:8c:1a:71:45:ab:cf:03:7e:f6:65:2a:41:46:
                    29:4e:28:36:0a:68:6c:37:87:a1:ba:32:3a:13:f0:
                    ce:46:e6:45:fc:51:bc:57:97:3c:a0:ab:fa:53:82:
                    f9:63:e1:29:f4:0a:dd:11:16:b0:2f:93:e4:78:88:
                    44:d3:95:b9:a7:91:24:e7:ce:75:bf:ac:59:53:8a:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A7:25:83:C1:AA:29:DE:B4:E7:62:71:C9:3D:51:97:9E:7D:72:9B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9671b3fd-17f9-4051-9e11-55bea5a8385b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:04:5d:b8:ef:8d:53:57:c0:cc:19:e3:b3:b3:d8:14:c2:
         82:e0:49:f9:7c:5c:ef:f0:43:2e:3d:66:56:d8:c3:aa:8a:01:
         6a:28:6c:c4:f2:83:ba:ce:06:12:d1:c5:a0:6c:a8:74:28:c8:
         c9:c1:bc:f9:31:aa:be:b9:61:e6:db:8e:44:9c:0e:08:60:b4:
         cd:c9:6c:95:91:f4:34:aa:f3:66:14:8b:ab:1c:e0:a8:80:e0:
         0f:63:2b:7b:12:c1:cd:a7:c3:26:4c:38:75:2e:a2:a7:30:7f:
         d6:36:c3:bb:65:98:58:11:e5:e0:8b:d4:a0:dc:e7:a7:c7:6e:
         1d:3e:96:48:af:94:a3:8b:ee:6a:e2:56:88:d1:21:11:37:76:
         49:bf:bc:47:53:98:1d:80:89:5c:5f:2e:c9:9d:3c:a4:89:fe:
         51:fc:06:da:15:0a:1f:8e:58:9f:bf:3b:26:82:04:4b:bc:6b:
         cc:47:52:21:29:28:43:35:ac:c9:16:29:6b:09:26:8a:e1:65:
         93:f8:4d:0a:c7:08:37:95:23:7c:b8:53:85:b0:e0:48:bd:2a:
         16:4d:4b:ee:3d:66:77:64:72:16:20:2e:28:04:09:17:c4:c0:
         33:18:b3:40:23:26:9a:c8:c8:ab:cc:8a:10:74:c5:d3:51:59:
         42:89:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:01:16 2025 by rpki-client