This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d36608a1-ffda-4c50-87a3-146907aa3481.roa
File:                     d36608a1-ffda-4c50-87a3-146907aa3481.roa (raw, json)
Hash identifier:          34GzlymJ7zLlQNn14NEyp4mIJVnsH9jjMCiz91exMBE=
Subject key identifier:   D9:B5:0D:24:7E:1F:88:F4:63:C8:91:16:79:30:96:F5:3D:AC:F2:51
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7602ADDD2750D25F64FF364E83BA4DA7C6BF1D81
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d36608a1-ffda-4c50-87a3-146907aa3481.roa
Signing time:             Sat 29 Nov 2025 01:30:59 +0000
ROA not before:           Sat 29 Nov 2025 01:30:59 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.88.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:02:ad:dd:27:50:d2:5f:64:ff:36:4e:83:ba:4d:a7:c6:bf:1d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 01:30:59 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=33c21ff4d27313c61dc92ddc59445593b09ede00b5ebe9e4bb634c833dd39897, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ce:f4:75:ce:b1:74:34:18:68:81:04:0c:58:
                    6e:ff:48:5e:83:d5:af:24:68:bf:7b:e4:a7:dc:2e:
                    10:e8:58:f1:ea:84:06:f0:d8:eb:99:96:8d:98:8a:
                    0c:1b:15:2a:fe:5b:17:89:fd:f2:3f:55:2f:42:3b:
                    f5:c4:8d:3c:03:1e:5f:2f:17:ff:ad:b0:be:e8:8d:
                    96:1d:0b:87:8a:b8:49:40:84:cc:28:13:ed:36:46:
                    15:77:9a:a2:d8:86:0b:ba:5e:ef:2a:67:57:53:ea:
                    4c:29:59:cf:3e:16:de:a4:63:e0:73:f3:33:c2:c6:
                    19:14:34:31:1f:65:f4:c2:44:e4:bb:43:b8:13:60:
                    89:45:3f:57:e3:f1:44:d3:81:30:6c:ed:2b:b7:62:
                    2f:8e:aa:a8:c2:a6:a7:ea:e8:04:e7:c7:ab:2a:e9:
                    a6:86:a5:e5:51:04:c2:bb:00:5c:54:3a:6e:c5:c5:
                    70:f2:1c:70:91:55:d2:1a:b0:45:27:50:9a:51:b3:
                    3a:6a:5d:e5:2b:62:81:7f:b5:a2:71:f2:9d:bd:93:
                    fb:06:ff:01:78:03:e7:af:e8:4a:ab:ea:04:05:4e:
                    eb:cd:9c:35:95:e1:93:38:9a:41:02:a6:de:8e:f8:
                    f5:45:ba:a4:73:b5:65:e9:2d:cc:e2:6b:1c:78:a5:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B5:0D:24:7E:1F:88:F4:63:C8:91:16:79:30:96:F5:3D:AC:F2:51
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d36608a1-ffda-4c50-87a3-146907aa3481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.88.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         61:36:8d:2b:90:76:02:83:6b:3a:4a:01:ab:96:31:89:32:dc:
         d2:bc:1c:14:85:74:4b:93:6b:b3:f3:cb:d8:ea:02:9f:6a:b3:
         3d:77:73:c2:b2:a5:d7:e5:98:c7:03:4f:1e:72:81:4a:6f:af:
         5e:fb:67:a6:73:47:3f:de:4b:e1:1d:c8:8e:6a:71:8b:87:c6:
         6a:67:e0:e5:26:fc:c9:41:8c:5d:c3:1c:b4:28:9a:af:f1:a0:
         32:27:7a:83:22:c1:8e:34:2e:b5:17:a6:62:f2:1b:09:f0:a9:
         30:c2:4c:0e:83:ea:91:7e:c8:51:a5:09:a2:47:88:bc:6c:94:
         97:bc:6d:09:6f:f3:ba:86:a0:41:65:d2:72:a2:aa:6f:46:d8:
         5b:2c:0b:89:e0:73:41:84:5f:f2:f1:08:9e:ea:36:88:e8:de:
         9b:cc:9b:b2:db:c6:55:1f:cf:74:9c:41:d5:70:3f:c1:01:fe:
         a8:7e:7b:cc:c7:ee:13:10:f9:ee:30:20:13:3f:09:26:e9:52:
         ba:36:8c:09:3d:f7:30:3e:0d:e6:50:88:e5:82:7c:e2:21:d9:
         f0:6f:db:9f:ba:1e:72:e0:a2:bf:18:83:c2:92:86:6e:81:56:
         8f:5f:f1:ab:d2:a7:63:67:2d:9e:da:7c:54:c4:7b:c9:57:64:
         b4:f5:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:15:09 2025 by rpki-client