This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9726032-5914-4d64-af65-99fa3331da41.roa
File:                     a9726032-5914-4d64-af65-99fa3331da41.roa (raw, json)
Hash identifier:          cljo5TFLZ+AJToggnQzgBKFjrUWN3Fp7PbOm4CAXhc0=
Subject key identifier:   40:6B:57:B0:E0:48:36:72:B0:C7:D7:62:FF:C4:F7:45:AC:C0:25:0E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       59B0488EDAC07B8D3F77778B38887DA5241FE373
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9726032-5914-4d64-af65-99fa3331da41.roa
Signing time:             Sat 15 Nov 2025 04:20:50 +0000
ROA not before:           Sat 15 Nov 2025 04:20:50 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.167.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b0:48:8e:da:c0:7b:8d:3f:77:77:8b:38:88:7d:a5:24:1f:e3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 04:20:50 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=330cc679a177f991d1f3dfffe074a6f96ad3e42e50bbc0a7266cac4bd6ac0a71, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:02:91:18:ad:c7:c6:48:73:3b:33:0e:c7:
                    bb:b3:8b:bb:c3:c5:da:ab:5f:08:47:bc:d2:ab:85:
                    ee:5e:99:d4:c4:67:a9:b7:78:5a:99:a4:ff:00:91:
                    b7:39:74:dd:09:45:39:37:5e:bc:db:9f:d8:08:01:
                    7c:b5:18:83:e1:12:14:f4:4d:86:fb:4b:c2:06:1d:
                    97:49:81:93:52:d6:57:c1:f4:9d:29:74:69:09:eb:
                    a6:87:b6:d8:c4:4c:82:57:ee:27:6c:c6:07:d9:db:
                    d2:a0:25:09:b5:6d:0a:e9:67:58:38:96:98:13:83:
                    3a:40:5c:6d:d3:1b:f4:2a:58:68:9b:20:60:6b:22:
                    43:94:45:af:04:8a:4d:43:a7:1c:80:58:91:a6:73:
                    41:6b:d0:d6:21:1d:c0:d9:c7:9e:73:09:b0:be:eb:
                    fd:cb:6c:7d:39:07:88:39:6f:01:eb:83:bf:de:be:
                    2b:37:18:16:62:90:bd:fb:b4:90:b4:63:a9:2e:4e:
                    94:92:5c:1c:a6:a3:5b:20:65:60:84:b6:dc:7d:8c:
                    74:b4:b5:c8:6d:13:70:ab:c2:21:a7:49:d5:08:ea:
                    96:bd:9c:78:e7:ef:d3:71:83:2e:1e:69:9d:5d:84:
                    37:83:d1:8e:d0:a1:58:3f:71:35:e3:c6:59:2e:00:
                    dc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6B:57:B0:E0:48:36:72:B0:C7:D7:62:FF:C4:F7:45:AC:C0:25:0E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9726032-5914-4d64-af65-99fa3331da41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.167.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:e4:49:70:42:1e:6f:ed:01:11:3d:cf:20:ef:68:45:f2:
         df:16:15:8c:9b:25:3b:ad:88:0b:8e:83:ad:50:e7:c4:42:bd:
         d9:2f:8d:9c:93:c5:12:40:1e:da:e5:27:0f:a1:a0:c1:ca:86:
         46:dc:57:0b:32:36:39:a8:8d:b4:1b:4b:3a:37:4f:3b:4e:1b:
         1c:33:03:1e:cc:35:6f:2c:02:d5:c7:19:84:96:49:43:3a:1e:
         70:f2:d7:5f:00:9c:7c:52:b9:a5:71:ff:b0:49:a7:ea:7f:10:
         b2:0d:16:40:cd:9c:43:d7:33:9f:ee:da:08:38:db:d6:42:c4:
         bd:26:7b:af:0e:8a:55:54:a0:92:3d:56:b7:69:08:65:78:64:
         27:1d:c7:3c:b7:47:6b:a6:06:f4:86:f1:9f:93:38:2c:c2:7c:
         cc:80:80:fe:a3:c9:ca:b9:ec:e7:bc:87:49:88:23:95:65:57:
         69:9c:c0:9c:fb:df:72:f8:19:bc:8a:2d:95:52:4d:6c:c2:6e:
         d1:ba:a4:34:67:35:e2:2c:c9:f7:98:dd:ac:88:dd:54:41:f5:
         e7:32:eb:87:7c:6b:4e:96:26:36:bf:ca:c9:7c:f6:62:0c:d7:
         7f:1a:30:c7:84:5c:85:a5:3b:6f:d3:90:3e:4d:d6:fd:af:74:
         25:a6:b5:ac
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWbBIjtrAe40/d3eLOIh9pSQf43MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTE1MDQyMDUwWhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMzBjYzY3OWExNzdmOTkxZDFmM2RmZmZlMDc0YTZmOTZh
ZDNlNDJlNTBiYmMwYTcyNjZjYWM0YmQ2YWMwYTcxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEegKRGK3HxkhzOzMOx7uzi7vDxdqrXwhHvNKrhe5emdTE
Z6m3eFqZpP8Akbc5dN0JRTk3Xrzbn9gIAXy1GIPhEhT0TYb7S8IGHZdJgZNS1lfB
9J0pdGkJ66aHttjETIJX7idsxgfZ29KgJQm1bQrpZ1g4lpgTgzpAXG3TG/QqWGib
IGBrIkOURa8Eik1DpxyAWJGmc0Fr0NYhHcDZx55zCbC+6/3LbH05B4g5bwHrg7/e
vis3GBZikL37tJC0Y6kuTpSSXBymo1sgZWCEttx9jHS0tchtE3CrwiGnSdUI6pa9
nHjn79Nxgy4eaZ1dhDeD0Y7QoVg/cTXjxlkuANy5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQGtXsOBINnKwx9di/8T3RazAJQ4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2E5NzI2MDMyLTU5MTQtNGQ2NC1hZjY1LTk5ZmEzMzMxZGE0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQDpwAwDQYJKoZIhvcNAQELBQADggEBAABa5ElwQh5v7QERPc8g72hF8t8W
FYybJTutiAuOg61Q58RCvdkvjZyTxRJAHtrlJw+hoMHKhkbcVwsyNjmojbQbSzo3
TztOGxwzAx7MNW8sAtXHGYSWSUM6HnDy118AnHxSuaVx/7BJp+p/ELINFkDNnEPX
M5/u2gg429ZCxL0me68OilVUoJI9VrdpCGV4ZCcdxzy3R2umBvSG8Z+TOCzCfMyA
gP6jycq57Oe8h0mII5VlV2mcwJz733L4GbyKLZVSTWzCbtG6pDRnNeIsyfeY3ayI
3VRB9ecy64d8a06WJja/ysl89mIM138aMMeEXIWlO2/TkD5N1v2vdCWmtaw=
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:52 2025 by rpki-client