This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0a3f1e9-c05d-40d7-9e25-b25dbd8781e7.roa
File:                     a0a3f1e9-c05d-40d7-9e25-b25dbd8781e7.roa (raw, json)
Hash identifier:          Q+E1yrF5lz9t0n6UEuhNYAo+Gp/Dm7ndTBUOKyVxqw4=
Subject key identifier:   3F:95:D8:97:91:77:AA:80:A8:28:F4:9B:DB:5A:FF:CF:55:9A:42:8B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       24534417BC3B33EBF7F94023E4AE19651F795A87
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0a3f1e9-c05d-40d7-9e25-b25dbd8781e7.roa
Signing time:             Thu 13 Nov 2025 01:30:13 +0000
ROA not before:           Thu 13 Nov 2025 01:30:13 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.94.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:53:44:17:bc:3b:33:eb:f7:f9:40:23:e4:ae:19:65:1f:79:5a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 13 01:30:13 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=87c7ea93c73f13730d0318ba52657c1a3b6aabb2782ec454422753ca97ae7df5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e1:af:22:2d:9e:33:4d:f2:60:39:08:3d:2b:
                    e3:06:d1:3d:c6:a3:d3:6f:3a:45:33:bb:3f:b7:3d:
                    03:5b:bc:ee:aa:98:e6:b5:2a:7d:4c:f4:ef:fb:72:
                    dd:2c:1a:48:7f:1d:fa:86:16:2e:fe:3f:26:a7:53:
                    32:73:c4:79:66:d3:5a:8c:aa:05:37:95:6c:4a:4e:
                    99:db:24:9b:ae:cf:97:97:fe:bd:2a:8f:ec:04:9c:
                    7c:37:64:0a:1e:f4:1e:4f:cc:9f:51:f6:cb:40:7e:
                    a8:c3:80:4a:c9:00:29:e8:e8:91:b3:a7:e5:c9:af:
                    c0:f1:96:67:2e:c8:10:d2:88:59:89:a6:43:10:c9:
                    97:a6:91:97:40:22:8a:05:86:7a:0b:42:05:2a:bf:
                    72:9a:f0:f8:83:2a:7b:0f:06:b2:b1:a6:e4:95:6e:
                    6b:cf:7a:75:c6:d0:c3:1d:0e:16:8b:94:58:b6:c4:
                    69:07:9e:b8:8c:14:a0:09:db:1f:f9:8c:c9:17:6d:
                    42:34:26:28:fb:5e:9b:07:e9:89:df:12:16:cb:5e:
                    31:c9:b3:ae:af:00:38:89:c4:7b:13:39:32:2d:9e:
                    0b:6a:02:0e:8e:8a:72:f6:2b:ae:da:d1:ed:6c:78:
                    f5:09:e6:2a:41:60:1d:35:61:56:52:4c:6f:ef:c7:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:95:D8:97:91:77:AA:80:A8:28:F4:9B:DB:5A:FF:CF:55:9A:42:8B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0a3f1e9-c05d-40d7-9e25-b25dbd8781e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:f8:20:db:9e:ae:e0:90:54:03:2f:26:e6:ce:cb:4b:cd:
         68:dc:45:8f:1d:bb:da:05:33:19:6b:96:5f:09:1f:f3:5a:a9:
         a7:41:45:4d:2e:94:ec:3b:a1:5f:ea:6f:07:7d:ba:56:9b:86:
         cb:06:97:4f:0b:a1:0c:72:1f:56:78:8a:06:5b:6c:cd:55:08:
         ff:cf:35:1e:b8:3a:17:ce:3a:f5:8b:3a:ca:73:0f:65:ec:fa:
         5f:3e:54:f3:19:96:75:f7:4d:7e:15:6c:1c:70:84:f4:fe:a3:
         0c:01:77:1b:20:9e:89:42:c5:c4:00:b5:f8:e5:95:f4:25:4d:
         10:5a:6f:4f:91:4f:f5:2e:f9:22:3b:ad:d3:c5:8a:6f:57:2c:
         84:8f:83:6e:f2:18:d7:79:09:43:5c:89:31:fb:82:ad:6f:be:
         b2:a1:a8:ac:6a:67:96:bf:7e:e7:40:c7:2d:cc:ef:7d:5d:40:
         13:2c:00:83:90:28:c8:e4:fc:3c:c8:3d:64:dd:7a:26:2d:28:
         7e:76:e3:12:e7:41:aa:67:24:7d:2f:cc:c0:d6:2a:cb:8f:b8:
         9c:d3:90:24:8f:e1:b7:68:17:6b:65:13:1f:58:78:54:a6:74:
         93:f2:cd:2b:23:27:ac:64:50:f4:05:7d:1c:18:2b:17:26:0f:
         05:d7:a9:f8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJFNEF7w7M+v3+UAj5K4ZZR95WocwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTEzMDEzMDEzWhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4N2M3ZWE5M2M3M2YxMzczMGQwMzE4YmE1MjY1N2MxYTNi
NmFhYmIyNzgyZWM0NTQ0MjI3NTNjYTk3YWU3ZGY1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDv4a8iLZ4zTfJgOQg9K+MG0T3Go9NvOkUzuz+3PQNbvO6q
mOa1Kn1M9O/7ct0sGkh/HfqGFi7+PyanUzJzxHlm01qMqgU3lWxKTpnbJJuuz5eX
/r0qj+wEnHw3ZAoe9B5PzJ9R9stAfqjDgErJACno6JGzp+XJr8DxlmcuyBDSiFmJ
pkMQyZemkZdAIooFhnoLQgUqv3Ka8PiDKnsPBrKxpuSVbmvPenXG0MMdDhaLlFi2
xGkHnriMFKAJ2x/5jMkXbUI0Jij7XpsH6YnfEhbLXjHJs66vADiJxHsTOTItngtq
Ag6OinL2K67a0e1sePUJ5ipBYB01YVZSTG/vxxq/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUP5XYl5F3qoCoKPSb21r/z1WaQoswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2EwYTNmMWU5LWMwNWQtNDBkNy05ZTI1LWIyNWRiZDg3ODFlNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XsgwDQYJKoZIhvcNAQELBQADggEBAB82+CDbnq7gkFQDLybmzstLzWjc
RY8du9oFMxlrll8JH/NaqadBRU0ulOw7oV/qbwd9ulabhssGl08LoQxyH1Z4igZb
bM1VCP/PNR64OhfOOvWLOspzD2Xs+l8+VPMZlnX3TX4VbBxwhPT+owwBdxsgnolC
xcQAtfjllfQlTRBab0+RT/Uu+SI7rdPFim9XLISPg27yGNd5CUNciTH7gq1vvrKh
qKxqZ5a/fudAxy3M731dQBMsAIOQKMjk/DzIPWTdeiYtKH524xLnQapnJH0vzMDW
KsuPuJzTkCSP4bdoF2tlEx9YeFSmdJPyzSsjJ6xkUPQFfRwYKxcmDwXXqfg=
-----END CERTIFICATE-----
Generated at Wed Dec 3 17:59:24 2025 by rpki-client