This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa6ddc00-f794-41e5-9fc2-4bd22fc303ad.roa
File:                     aa6ddc00-f794-41e5-9fc2-4bd22fc303ad.roa (raw, json)
Hash identifier:          4fSk3tYaDET3ZBP3mKmXy+LWfDTdKCFslHG0uuS8Pc8=
Subject key identifier:   06:A8:A8:C1:06:0B:BA:59:5F:DB:3A:0F:41:C9:B6:D5:AA:AF:00:0D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0CDB7DF63B555366FDE7A503DEB7B612BF55F412
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa6ddc00-f794-41e5-9fc2-4bd22fc303ad.roa
Signing time:             Tue 11 Nov 2025 03:51:00 +0000
ROA not before:           Tue 11 Nov 2025 03:51:00 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.227.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:db:7d:f6:3b:55:53:66:fd:e7:a5:03:de:b7:b6:12:bf:55:f4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 11 03:51:00 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=5c58f3032b2ca2fb9b2e3745a082b66be65bde98d412e3aeaff026d99b4c990c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:c7:04:28:c6:2b:21:8f:05:16:37:4b:31:
                    31:1a:90:d6:91:71:16:4f:c5:16:72:d5:6d:18:42:
                    5f:b4:5e:e5:0f:7f:e7:b4:48:34:77:37:73:53:db:
                    fc:32:85:8a:2e:ae:85:52:05:6d:f1:f8:f8:b8:3a:
                    c2:25:02:c5:f7:a0:82:9d:f0:fd:94:1d:f7:dc:74:
                    31:35:45:c7:43:2c:19:13:33:71:86:1a:78:a5:9d:
                    4c:57:60:6c:99:af:1b:64:bd:6d:9c:34:6f:86:c4:
                    e0:76:94:66:4e:f5:e5:47:67:ed:36:4e:82:f7:63:
                    ec:fe:1b:90:71:7e:fd:bc:21:70:ec:07:28:51:2a:
                    3f:65:a2:c5:ba:3d:79:e2:b7:c3:82:90:cc:13:6d:
                    62:8f:ed:eb:bc:2c:ee:ca:a2:76:1b:47:b2:32:32:
                    62:a7:be:8f:13:2b:4e:d8:0a:26:ec:29:2c:e1:cf:
                    90:64:69:36:9c:76:c5:59:d0:da:e6:8f:95:61:fe:
                    81:b6:e6:99:fd:60:3f:f9:2f:ad:cb:c2:33:1d:9b:
                    47:7a:38:c7:7d:6a:33:a4:b0:e9:69:fb:a4:36:04:
                    8f:6f:35:4b:05:a4:54:8a:46:33:5a:24:7b:05:f9:
                    c9:a2:50:61:2b:65:77:b9:53:ae:c2:c4:10:6e:44:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A8:A8:C1:06:0B:BA:59:5F:DB:3A:0F:41:C9:B6:D5:AA:AF:00:0D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa6ddc00-f794-41e5-9fc2-4bd22fc303ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.227.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         17:1e:21:87:35:4d:da:d3:ef:a2:1f:15:58:5a:31:fe:94:19:
         10:eb:e1:86:1e:7d:c6:a2:68:70:d1:1f:b8:11:8a:87:cb:77:
         b8:8d:51:89:27:16:09:9f:91:c7:b6:e4:96:4b:6e:88:39:73:
         cf:ab:9d:6f:a9:fc:7b:43:78:65:ea:8e:18:1c:70:f9:22:d2:
         77:d3:bf:81:92:a5:37:fd:73:3f:5e:4e:1a:a4:54:d3:06:1b:
         8d:99:ed:6f:80:f3:9b:e3:19:a6:c0:d7:1e:01:b8:d7:37:5d:
         26:8c:74:5a:96:39:ce:85:ab:93:e7:b9:53:ad:4e:b6:12:06:
         39:d5:05:4e:c0:e1:d3:77:fc:54:04:69:dc:47:0c:32:8c:fe:
         aa:cb:fb:f9:a9:11:d3:f0:46:55:78:94:86:3e:c9:dc:f3:15:
         b0:7a:e6:5b:4b:f7:c5:e4:8d:ee:f6:e3:7a:cd:f9:b8:58:4c:
         99:98:c7:1c:8d:0c:39:a3:52:a3:e5:40:72:ab:bf:db:d4:71:
         57:7a:60:55:a1:86:58:eb:53:fc:31:f9:fe:a5:3e:0e:ca:31:
         f6:30:e0:42:ad:01:bf:40:34:26:a4:3c:d8:68:6f:6f:fe:69:
         a5:50:0b:9b:fc:79:98:04:82:a0:7b:07:6e:ad:c3:e2:51:66:
         c3:1c:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 13:47:34 2025 by rpki-client