This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cfda1d73-d672-4c18-81b1-8cf7cf163017.roa
File:                     cfda1d73-d672-4c18-81b1-8cf7cf163017.roa (raw, json)
Hash identifier:          MDHPHGeUkYNzGhU+FFO1YFRCpjmjsrB8KXHWiKUKuJM=
Subject key identifier:   3C:19:4E:98:71:9B:09:57:D9:53:86:9C:9E:EC:FD:46:E2:78:42:C8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       384D178E9D8518245E95333616E0C0D31ECC50D3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cfda1d73-d672-4c18-81b1-8cf7cf163017.roa
Signing time:             Sat 29 Nov 2025 01:01:35 +0000
ROA not before:           Sat 29 Nov 2025 01:01:35 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.219.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4d:17:8e:9d:85:18:24:5e:95:33:36:16:e0:c0:d3:1e:cc:50:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 01:01:35 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=b7e7153e0f3ce8b5f7fa2d3c6ca2c1220051e05c081613e34fc09e2ef8520637, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:17:17:18:17:fd:4a:fe:05:83:d7:9c:ae:53:
                    48:94:0f:2f:b6:08:90:d0:5a:06:48:0f:59:cf:0a:
                    87:3e:9f:1b:e7:00:9f:af:71:8b:19:ce:b2:d5:f9:
                    e0:bc:f9:8f:39:89:dd:7b:13:b0:6c:60:3d:90:14:
                    d7:cc:8d:f5:48:7d:d5:46:bb:54:13:f4:82:7a:e0:
                    8b:47:1e:30:79:e1:0b:75:4e:75:6a:d5:81:a2:db:
                    19:da:10:54:f6:9d:95:2c:22:7d:1c:2a:be:d4:87:
                    27:54:c4:85:dd:21:9a:7e:bb:2d:ba:48:45:66:07:
                    c8:58:9a:8d:f5:7d:00:a8:3b:62:1e:40:9a:e5:e0:
                    1a:e2:01:13:ee:c7:d0:26:f5:9d:7c:bc:9f:7b:07:
                    53:11:7c:03:60:b8:66:d0:9e:0f:3e:c2:f1:3e:41:
                    2a:1a:98:96:0d:02:3b:9e:f7:ce:bb:da:93:07:06:
                    56:2e:7b:b5:4c:c1:dd:c0:31:a1:46:b8:ad:1c:ff:
                    3a:69:a9:f2:67:66:ba:72:9b:52:9c:6c:00:3b:1b:
                    89:40:73:06:3c:77:d6:50:35:ec:ce:4e:69:4a:b7:
                    14:b8:42:3a:a8:6f:e6:df:f8:05:30:67:e1:6b:8d:
                    b5:c6:33:8d:61:ed:c9:f6:b6:76:9c:3d:f2:31:a6:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:19:4E:98:71:9B:09:57:D9:53:86:9C:9E:EC:FD:46:E2:78:42:C8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cfda1d73-d672-4c18-81b1-8cf7cf163017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.219.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         83:9f:f8:6b:dd:9c:99:84:80:bb:f6:40:f3:2c:cf:7a:a6:f3:
         69:58:d9:6e:c5:21:82:43:52:f6:db:79:f1:9a:d6:57:a8:2c:
         91:e5:d2:3a:36:95:ae:39:b6:b4:ff:58:4c:e6:a4:e8:42:d5:
         df:26:cf:96:24:44:ac:22:e7:62:86:d6:8a:42:4a:4c:78:4d:
         15:26:9c:cd:b2:6a:cc:f0:01:32:59:63:73:1f:b5:b7:55:07:
         0b:20:23:33:38:ac:48:52:12:80:e5:51:ba:fa:fe:68:cf:99:
         d5:14:92:a8:dc:6d:1f:19:3c:1a:5f:12:46:68:5c:ad:c9:a3:
         48:28:81:32:7e:3f:1d:49:5c:46:f3:9b:66:1d:21:77:b4:0d:
         c8:5e:bb:fe:55:94:3e:7d:b0:20:bd:44:44:25:99:79:43:5a:
         46:0c:83:30:64:bc:f7:94:cc:aa:52:77:ff:35:02:eb:8f:1d:
         76:ab:af:ef:cf:c3:90:dd:fb:ec:c8:1f:e0:c2:be:25:3d:d9:
         68:1a:5f:cd:38:56:2b:35:20:82:25:bc:a9:80:f9:ba:25:21:
         4d:f6:62:dc:6c:b9:3a:3e:44:9f:d8:2d:2f:8f:a3:a5:aa:13:
         1a:14:52:08:6a:bd:91:4d:f3:50:9c:ba:49:c2:2f:be:ee:a7:
         d9:e7:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:07:52 2025 by rpki-client