This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a10b1120-af4c-48df-ab14-87ac28166552.roa
File:                     a10b1120-af4c-48df-ab14-87ac28166552.roa (raw, json)
Hash identifier:          tIl/Vlb3XtQDJwiQih19UWYf0DPQW7UlDBd1H9GqR5c=
Subject key identifier:   AE:73:FD:04:4B:49:3B:61:C0:CC:0B:D4:C2:07:35:B4:44:F1:B0:33
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       70863F70C171AD8DA60DE25B1C1608C272254174
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a10b1120-af4c-48df-ab14-87ac28166552.roa
Signing time:             Fri 14 Nov 2025 00:20:52 +0000
ROA not before:           Fri 14 Nov 2025 00:20:52 +0000
ROA not after:            Fri 19 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.170.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:86:3f:70:c1:71:ad:8d:a6:0d:e2:5b:1c:16:08:c2:72:25:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 14 00:20:52 2025 GMT
            Not After : Dec 19 23:59:59 2025 GMT
        Subject: serialNumber=c65697779664555cf026fe8c63e3a2df57426ee9735b05d7135df8a0edda595b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:67:d1:88:66:08:64:87:21:2c:61:78:a5:
                    ae:10:64:64:a0:9e:5a:7f:2b:9a:9b:bc:b6:40:6c:
                    3c:ba:68:e7:ba:e5:45:0d:8d:91:a6:98:02:dd:d8:
                    d5:a8:1f:3f:ca:89:a3:52:07:cb:18:7b:c5:af:b5:
                    5e:ad:29:98:29:f9:65:29:97:2d:6e:ad:37:16:e9:
                    70:65:97:ac:b3:6b:91:80:eb:a3:aa:c9:4a:3c:b8:
                    aa:37:16:a3:92:38:fa:87:0c:0a:4b:02:58:d8:0a:
                    2c:59:f3:0a:90:77:61:cf:63:19:cc:52:56:7b:63:
                    1e:c6:26:0f:93:9e:60:86:a2:ce:a6:c5:4c:18:5c:
                    79:e6:42:10:46:bc:a4:33:c1:38:f3:57:85:2e:84:
                    ca:24:f9:0c:a9:98:3f:a8:c6:af:10:9e:6c:65:00:
                    d9:2a:27:4b:cc:78:54:1d:f3:4a:39:97:73:a0:6a:
                    ba:bf:9f:76:a1:38:9c:13:c6:34:19:26:88:94:b1:
                    17:1b:a3:6e:f7:29:81:39:58:fd:b2:55:e0:6f:cb:
                    ee:71:11:e6:66:ab:4e:c5:8d:32:5b:ac:c2:90:8f:
                    ac:6b:b3:ef:2a:91:33:ee:df:5f:42:3e:5e:f9:99:
                    35:29:56:e7:04:27:ea:88:26:0c:a7:29:63:dd:7b:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:73:FD:04:4B:49:3B:61:C0:CC:0B:D4:C2:07:35:B4:44:F1:B0:33
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a10b1120-af4c-48df-ab14-87ac28166552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.170.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:c2:21:ef:bb:d0:16:7a:9f:da:41:9a:04:34:4e:11:44:
         39:c8:bf:65:80:25:42:bf:e3:fb:03:dc:af:31:68:c9:81:ad:
         55:64:65:b6:18:45:00:65:ae:be:ce:77:d9:3d:d7:97:34:e3:
         30:b5:76:40:3a:a0:e5:49:b9:bf:d1:4d:41:77:61:19:14:db:
         18:9a:c3:5d:95:f4:71:9e:4a:d9:7d:06:44:04:91:29:a4:4e:
         e7:4a:fe:a4:de:ed:03:38:ef:e5:1d:b2:7b:12:39:66:eb:14:
         97:ac:5a:20:e2:23:4c:0b:7c:a0:3c:7f:ba:79:63:a6:06:3e:
         2a:f4:9c:dd:37:62:3d:12:d8:25:cf:e8:ab:64:ed:20:7c:39:
         8b:5b:5c:9b:31:1b:41:50:12:cc:a8:0d:02:19:46:5b:6f:3b:
         4e:63:fc:4e:c0:20:46:3e:72:50:ba:c4:4e:84:cc:22:58:37:
         68:d5:43:8a:1a:67:44:b5:83:c2:99:3f:ed:86:0e:4e:fc:4c:
         d0:33:c5:47:58:8d:a6:4c:86:5a:03:a2:17:eb:ae:48:47:96:
         cc:0c:75:af:8c:3a:b0:cb:ad:25:4b:98:23:8b:aa:78:29:8a:
         f7:8c:f4:21:fc:fd:f8:e8:0d:b3:c4:4d:7c:ef:f3:ee:94:a1:
         19:62:5c:6d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcIY/cMFxrY2mDeJbHBYIwnIlQXQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTE0MDAyMDUyWhcNMjUxMjE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNjU2OTc3Nzk2NjQ1NTVjZjAyNmZlOGM2M2UzYTJkZjU3
NDI2ZWU5NzM1YjA1ZDcxMzVkZjhhMGVkZGE1OTViMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZVWfRiGYIZIchLGF4pa4QZGSgnlp/K5qbvLZAbDy6aOe6
5UUNjZGmmALd2NWoHz/KiaNSB8sYe8WvtV6tKZgp+WUply1urTcW6XBll6yza5GA
66OqyUo8uKo3FqOSOPqHDApLAljYCixZ8wqQd2HPYxnMUlZ7Yx7GJg+TnmCGos6m
xUwYXHnmQhBGvKQzwTjzV4UuhMok+QypmD+oxq8QnmxlANkqJ0vMeFQd80o5l3Og
arq/n3ahOJwTxjQZJoiUsRcbo273KYE5WP2yVeBvy+5xEeZmq07FjTJbrMKQj6xr
s+8qkTPu319CPl75mTUpVucEJ+qIJgynKWPde9FbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrnP9BEtJO2HAzAvUwgc1tETxsDMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2ExMGIxMTIwLWFmNGMtNDhkZi1hYjE0LTg3YWMyODE2NjU1Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEDqs4wDQYJKoZIhvcNAQELBQADggEBAIBewiHvu9AWep/aQZoENE4RRDnI
v2WAJUK/4/sD3K8xaMmBrVVkZbYYRQBlrr7Od9k915c04zC1dkA6oOVJub/RTUF3
YRkU2xiaw12V9HGeStl9BkQEkSmkTudK/qTe7QM47+UdsnsSOWbrFJesWiDiI0wL
fKA8f7p5Y6YGPir0nN03Yj0S2CXP6Ktk7SB8OYtbXJsxG0FQEsyoDQIZRltvO05j
/E7AIEY+clC6xE6EzCJYN2jVQ4oaZ0S1g8KZP+2GDk78TNAzxUdYjaZMhloDohfr
rkhHlswMda+MOrDLrSVLmCOLqngpiveM9CH8/fjoDbPETXzv8+6UoRliXG0=
-----END CERTIFICATE-----
Generated at Wed Dec 3 17:59:25 2025 by rpki-client