This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baa4fad9-de42-4250-aa7c-828bcb5751ca.roa
File:                     baa4fad9-de42-4250-aa7c-828bcb5751ca.roa (raw, json)
Hash identifier:          NOLjy/uu90bduhVKTms12mH98qekZdjp+IT2UrnRYvE=
Subject key identifier:   28:CB:CF:AF:FD:AD:60:E5:3B:55:85:B4:3D:A1:0A:3A:0A:F7:0E:54
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       072B973906499FCF0EFE8EFCE19C7D1252599676
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baa4fad9-de42-4250-aa7c-828bcb5751ca.roa
Signing time:             Wed 12 Nov 2025 02:50:54 +0000
ROA not before:           Wed 12 Nov 2025 02:50:54 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.255.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2b:97:39:06:49:9f:cf:0e:fe:8e:fc:e1:9c:7d:12:52:59:96:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 12 02:50:54 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=7028f9f01db40958a86674032c69c1782c13ea20142c63530ced558f4c219ae0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:f9:3c:f1:32:f5:bf:c9:f3:40:43:8e:ec:
                    96:fe:b8:c8:0d:ba:6b:e3:ea:04:09:58:3a:33:b5:
                    79:2e:f8:7c:69:24:c1:a2:b4:64:4f:9a:2d:6a:21:
                    c1:18:22:53:a7:db:d2:d8:29:c3:c0:3a:c8:cd:12:
                    1d:df:f8:0e:50:db:41:ac:c7:fb:f1:0e:3f:b5:c4:
                    59:7d:9d:9d:be:e3:a1:72:dc:68:84:b3:ed:a6:f7:
                    36:64:39:39:71:d8:cc:4b:84:75:b6:e1:95:0c:61:
                    a4:1d:a1:05:3a:fb:1c:e3:cc:81:ec:dc:66:2f:bd:
                    af:ab:18:b8:76:01:ac:ca:6a:6f:33:a0:cb:9a:7a:
                    fb:ed:59:27:da:de:3b:37:55:6b:6d:ae:93:3e:03:
                    8c:6f:a6:d6:96:ee:64:17:ce:86:ba:37:0e:59:d5:
                    a1:99:32:07:d5:b5:c9:42:b4:bb:dc:96:55:a3:7e:
                    49:f2:67:45:d2:97:9d:74:bb:4c:f1:6e:4d:6f:13:
                    b5:eb:ec:17:77:ff:89:dc:f2:8d:be:e2:7f:16:89:
                    6b:6d:7d:94:8a:89:84:d1:d9:97:af:33:81:7e:ab:
                    ff:83:bc:3d:7b:f1:cb:93:e3:75:cc:b4:6f:e8:70:
                    42:34:3c:f2:cc:bb:c6:30:12:1c:ea:37:86:b5:67:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:CF:AF:FD:AD:60:E5:3B:55:85:B4:3D:A1:0A:3A:0A:F7:0E:54
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baa4fad9-de42-4250-aa7c-828bcb5751ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         15:7d:d7:ee:d6:38:9e:2a:bc:bc:83:5d:cd:05:bb:83:e3:90:
         4b:db:1a:13:fa:80:08:78:66:e1:2b:42:68:3c:39:f7:9a:fb:
         c4:2c:cd:19:e3:8b:7e:89:33:cc:2c:11:a3:30:b2:f0:64:4f:
         ec:3f:22:c6:a6:9d:c8:2f:18:fc:87:b0:80:b2:ec:93:63:00:
         f9:57:75:cf:5f:cb:ad:cd:78:00:77:95:b7:ed:72:00:e5:0f:
         f2:b4:b1:20:69:9b:94:0a:0f:dd:b6:ed:b7:47:f9:07:52:a7:
         1e:e0:a9:42:10:e1:20:1e:09:11:21:84:b6:fc:6e:68:58:87:
         7d:ab:c8:20:2f:35:c2:6d:ff:fd:b6:68:ef:d5:c5:46:ed:26:
         12:4d:67:b0:8c:ab:99:24:ab:88:ff:04:25:50:a7:6e:31:c8:
         d3:d3:b2:0e:d4:03:f4:2b:a2:c1:44:9c:07:be:d3:3e:8d:a8:
         8e:67:a1:a6:94:bb:61:93:5b:09:86:1e:77:72:66:08:08:f7:
         83:05:ec:63:18:a5:7c:b5:9d:1e:5e:aa:f6:05:be:f8:a2:1c:
         f0:e4:1c:a5:8a:07:65:6c:23:86:20:8f:57:a0:36:d8:85:6b:
         44:50:a8:60:d0:ae:2d:7e:b8:3b:61:72:1c:ab:8a:ca:55:73:
         14:c5:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:08:05 2025 by rpki-client