This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea135c76-071a-48c5-b6a9-52ccd2df266b.roa
File:                     ea135c76-071a-48c5-b6a9-52ccd2df266b.roa (raw, json)
Hash identifier:          69yNJM8kkg6ClWU0B727YjW8ZpfFb9mS26TrCdh3v/U=
Subject key identifier:   41:14:95:68:C4:36:E0:57:CC:77:0C:DC:45:02:95:A4:BD:9D:32:1A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0707BB703CFE4F37F9D49C7B321C80B034CBC950
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea135c76-071a-48c5-b6a9-52ccd2df266b.roa
Signing time:             Fri 05 Dec 2025 00:50:39 +0000
ROA not before:           Fri 05 Dec 2025 00:50:39 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.182.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:07:bb:70:3c:fe:4f:37:f9:d4:9c:7b:32:1c:80:b0:34:cb:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 00:50:39 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=923c311e735738af4eb1ff8c90a4095adcfba9bfeada5c11b07d66e4dc3c1f88, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:27:92:6e:5a:c5:62:5f:9b:0b:1f:7f:56:49:
                    40:e8:c1:76:c0:71:a5:37:54:78:24:01:4a:df:63:
                    9d:69:41:55:5d:70:d2:7c:46:8b:d1:ab:57:15:e1:
                    31:90:e9:c6:35:ac:5f:b9:08:8a:5d:e7:4e:fd:47:
                    6b:aa:8f:0b:6b:88:92:32:e2:df:36:d3:3d:9c:d0:
                    fc:fc:e2:7c:d0:5c:ee:9a:70:a8:e4:e0:0b:9e:33:
                    dc:a3:5e:9a:09:bf:cd:ba:74:34:2a:a1:8e:6f:b0:
                    2d:d5:76:47:68:09:25:50:d2:03:32:3d:25:0a:e9:
                    cc:26:50:e9:09:9d:64:ad:74:85:99:97:3c:ec:ef:
                    ce:0f:2b:8a:a5:b6:b5:30:5e:5c:b0:c4:92:36:14:
                    76:3d:12:37:57:3e:f3:8e:19:92:b0:80:1c:49:f3:
                    37:58:5a:15:1f:1a:f7:dc:30:d6:90:55:24:3a:7c:
                    61:01:8f:77:24:71:8f:8c:77:b2:0b:bc:cc:a6:5f:
                    74:87:38:aa:de:d6:15:61:85:15:65:f1:d1:3e:d7:
                    a3:c2:b4:a1:77:5f:f2:f0:f2:64:06:5f:49:b0:3c:
                    12:d1:f8:81:31:bc:97:27:61:80:1f:61:5d:fe:02:
                    0c:03:f2:9f:26:24:42:5c:5c:c0:9b:57:2a:db:20:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:14:95:68:C4:36:E0:57:CC:77:0C:DC:45:02:95:A4:BD:9D:32:1A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea135c76-071a-48c5-b6a9-52ccd2df266b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.182.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:87:7e:a5:78:c3:4d:9a:d1:ed:00:93:8b:3a:e6:58:fb:40:
         8c:ca:a9:5e:eb:5a:5f:cd:9d:b1:01:d7:12:56:34:ea:91:7b:
         4b:bc:b2:3b:b5:b1:13:df:05:96:b6:91:81:38:30:2b:73:29:
         ee:3b:19:10:dd:10:37:bf:3f:cd:4c:7e:a5:4f:a1:73:ca:5c:
         0d:f0:4e:fd:e6:cd:64:15:1a:31:ed:a5:3b:fe:70:b9:f0:04:
         ef:28:38:dd:72:4a:e9:d6:8b:62:1f:66:37:fb:93:7a:8b:e1:
         90:29:74:02:e1:b0:4e:02:0a:57:2a:4c:f8:fb:bb:e2:46:ef:
         b1:43:fd:d3:bf:7c:ef:ab:39:e2:55:17:54:34:50:6b:62:d8:
         c3:54:52:e4:83:48:4e:e5:7b:f3:c5:bb:c4:7a:77:10:b2:61:
         bc:a9:4c:d9:52:5f:ec:87:82:97:db:1b:cc:a9:93:6f:5d:f7:
         79:b3:47:2b:8c:cb:b9:df:c9:b5:d3:d2:b6:fc:5f:a9:22:7b:
         1f:4f:37:f3:fb:c8:33:72:dc:c4:76:a2:77:f1:db:a1:57:61:
         d9:2d:14:17:7e:09:c1:3b:38:ee:1f:c5:14:94:14:72:a8:0b:
         9a:5b:ba:9f:be:b1:2c:2a:89:f2:9e:81:a3:b5:11:1b:a3:96:
         a8:63:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:08:00 2025 by rpki-client