This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7901a52-fafe-4093-9c53-967f8bae84da.roa
File:                     d7901a52-fafe-4093-9c53-967f8bae84da.roa (raw, json)
Hash identifier:          +RoS1EEws9Z1yCFqJ1ixweR/h+KwPulhixC2xFjVhOM=
Subject key identifier:   A1:D1:C6:35:3C:01:29:C3:B2:1E:3B:23:18:A6:3C:6A:0F:FB:F8:F8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       788F12597D899696C782ABBF10755600EB6635EB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7901a52-fafe-4093-9c53-967f8bae84da.roa
Signing time:             Sat 06 Dec 2025 03:20:53 +0000
ROA not before:           Sat 06 Dec 2025 03:20:53 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.250.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8f:12:59:7d:89:96:96:c7:82:ab:bf:10:75:56:00:eb:66:35:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  6 03:20:53 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=33f3d1ff35b358032d4957df18dbd01d1a76f20a0f0113cc7aeef142e46449fb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a5:e9:4c:33:03:f9:fe:0d:e1:c1:7e:b1:b6:
                    b9:a5:9e:6e:70:a0:4f:fe:58:47:cd:87:04:c9:11:
                    80:13:01:d7:2e:91:64:a1:82:6c:79:de:5d:43:8f:
                    64:ae:09:02:d1:9f:bc:65:a8:02:b8:5b:d5:7a:46:
                    fc:1c:f1:25:20:ef:6f:70:cd:c9:4a:b5:17:2b:f6:
                    8c:9f:1a:a5:9d:40:35:89:f9:a5:a2:3d:c4:c4:86:
                    0a:0b:71:fc:5b:12:70:d1:17:50:71:24:07:aa:28:
                    a4:4c:aa:2a:2e:a8:0b:41:42:ed:ca:42:21:08:13:
                    e1:0c:58:41:55:3a:03:ff:7b:9b:dc:f2:76:33:17:
                    43:b2:be:7c:eb:41:4c:16:9c:f1:52:98:3d:5f:f4:
                    ed:2c:b1:7e:ed:7a:42:e4:a6:74:ac:7f:5a:70:cb:
                    88:6d:45:b3:e7:86:fa:88:f6:14:ec:aa:12:50:c0:
                    49:26:88:b2:97:4b:de:03:21:1a:32:a8:0a:17:97:
                    73:4e:9e:ec:f8:67:10:4d:ed:88:e0:1e:66:54:a4:
                    23:f4:cb:d7:2b:0c:8b:db:42:38:aa:2f:39:06:98:
                    0f:fa:41:cb:4f:94:93:43:4c:ef:80:b2:8a:9c:10:
                    1e:8a:8a:f1:c3:28:15:2c:4b:0e:03:a4:c7:e7:6a:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D1:C6:35:3C:01:29:C3:B2:1E:3B:23:18:A6:3C:6A:0F:FB:F8:F8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7901a52-fafe-4093-9c53-967f8bae84da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:98:0f:b3:b4:72:e7:84:72:b5:7a:99:9d:42:2b:07:bd:1a:
         39:38:0b:24:be:1b:94:eb:bb:b3:8f:0f:89:71:78:ec:c9:c5:
         80:22:e4:64:dc:49:fb:1c:2b:ad:79:c8:51:00:b6:ab:59:56:
         66:22:12:00:4d:c3:ee:57:30:18:fd:14:a4:1c:12:ac:94:1b:
         97:5b:47:01:b0:ed:ad:1b:59:84:8e:62:b7:c3:46:97:79:0e:
         b3:00:40:c6:3e:86:22:17:0c:c1:5f:a9:45:f9:87:28:ea:69:
         11:71:98:fd:ad:e1:6a:f6:c6:9d:30:cf:d7:48:0f:87:22:9f:
         cb:7b:82:b9:84:c9:77:2e:5b:a5:06:80:32:af:5e:e6:2b:3f:
         c3:3e:78:36:ee:23:11:e4:93:05:99:c3:d3:a3:1b:67:f7:91:
         b6:fa:25:a8:43:5e:b8:8e:bf:2c:62:14:07:61:c9:8d:fa:2a:
         9f:50:55:ee:55:c9:b0:51:1c:7f:9e:5b:ed:2c:4e:47:91:c3:
         31:79:1a:8b:e9:e7:50:d4:e9:33:1e:e6:d8:b8:98:15:a1:06:
         88:ed:12:07:70:36:a5:17:f5:74:ab:58:ac:cb:1d:45:6d:78:
         78:20:0d:34:9e:1b:3d:f4:2d:f5:dc:ca:7f:d0:de:77:41:cd:
         6b:bc:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:09:27 2025 by rpki-client