This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d56ad2d6-08de-4108-a4dc-69e3e902a0e0.roa
File:                     d56ad2d6-08de-4108-a4dc-69e3e902a0e0.roa (raw, json)
Hash identifier:          s0U0cL7I4b2ItK/zGQdOYX8d3IH67kVNmpbAY4NRWVw=
Subject key identifier:   CB:CF:44:77:69:B9:C1:2F:80:EE:3F:D1:6A:45:D3:3E:F4:32:FF:F4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2C93E8BAB79D57295C95128A1898DAC0E5629BEE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d56ad2d6-08de-4108-a4dc-69e3e902a0e0.roa
Signing time:             Mon 01 Dec 2025 21:36:53 +0000
ROA not before:           Mon 01 Dec 2025 21:36:53 +0000
ROA not after:            Sun 01 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        15.193.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:93:e8:ba:b7:9d:57:29:5c:95:12:8a:18:98:da:c0:e5:62:9b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  1 21:36:53 2025 GMT
            Not After : Mar  1 23:59:59 2026 GMT
        Subject: serialNumber=eb48caf6b65e116ba3580a4578eed0f18628f8f36577c7a805cc484b03be3a37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:0c:0b:90:80:87:73:45:ed:5c:d6:b2:26:
                    b1:38:23:df:8d:1c:b0:59:20:c9:ef:84:66:6d:e2:
                    a7:24:81:a2:e3:9d:b6:d4:0a:c6:f4:87:6b:75:46:
                    1a:11:6e:d0:37:29:49:ff:13:b1:9f:94:07:97:a4:
                    89:a0:fe:19:d6:5a:cb:1d:86:d4:91:51:99:38:d9:
                    0e:19:54:39:2a:7e:20:d3:42:b6:76:75:d6:55:69:
                    90:d8:b6:4e:a8:69:dc:6e:de:83:4d:4d:fe:8f:80:
                    65:cb:97:bb:af:44:54:b4:aa:ed:d7:95:5a:e2:54:
                    0a:8e:5c:18:7f:a0:db:9d:2b:16:05:38:fc:92:2e:
                    8e:be:c0:ef:ae:1a:5e:db:d9:aa:58:ce:96:39:5e:
                    ce:86:3d:8e:c0:bc:4b:32:87:d6:5b:c1:fc:38:82:
                    d0:c1:2b:6d:cd:76:d9:62:18:89:37:ad:e6:e5:79:
                    e9:fb:01:a1:0c:36:ca:0e:fd:bd:48:08:b6:32:5b:
                    b5:89:ad:cf:24:b3:e4:ff:48:7e:d9:2c:3d:01:94:
                    e6:c4:0f:6e:0d:9b:29:e2:dd:e8:52:4a:3c:cc:94:
                    2f:1e:ba:4c:94:a1:1c:a9:58:8e:77:14:99:f5:49:
                    e6:e6:09:6f:52:3d:6f:b5:e3:c0:23:ac:cb:6a:1a:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CF:44:77:69:B9:C1:2F:80:EE:3F:D1:6A:45:D3:3E:F4:32:FF:F4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d56ad2d6-08de-4108-a4dc-69e3e902a0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.193.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:20:3f:b0:b6:dd:ee:34:47:2b:42:d6:22:aa:df:7f:30:2c:
         f3:df:8b:c4:49:e0:1b:5f:73:59:55:18:59:99:a3:ae:01:c0:
         1a:b3:8f:7a:7b:55:76:d5:a1:4f:c6:19:9b:43:e8:e2:79:48:
         e4:08:02:e8:75:27:ba:c8:05:97:3d:72:83:93:99:06:81:55:
         e3:dc:78:c4:cf:68:e8:a3:b1:95:72:52:28:f6:12:ed:fc:c1:
         cd:bc:40:ae:ab:cd:75:29:09:20:8d:db:13:b7:0f:bc:fe:ff:
         f2:01:ef:67:19:1b:6a:e0:6f:87:32:e7:d3:c2:ef:ce:b0:15:
         f6:85:84:41:ef:39:d2:2c:7d:d0:29:79:02:fe:da:a8:80:a7:
         cb:6b:d4:d2:86:af:03:f1:0a:fd:df:e1:09:d9:a0:12:2c:e9:
         ed:0a:71:64:04:82:79:d0:e5:f0:1a:aa:30:d6:04:ba:91:1a:
         f4:06:99:01:5e:9d:14:f4:d7:65:b5:90:56:d3:3e:e6:31:20:
         b8:67:b9:2e:2b:a0:3b:b0:4e:69:f2:1b:b6:76:0c:8b:50:57:
         c4:f0:46:1f:3c:3d:aa:de:a5:00:b1:47:cd:07:98:15:83:b4:
         61:e5:f0:9c:06:be:0a:9d:ce:6f:ec:e1:ec:46:87:23:89:7b:
         8b:1a:57:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:33 2025 by rpki-client