This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2ebd3bf-70d6-4681-bf05-c2e607aaafb8.roa
File:                     f2ebd3bf-70d6-4681-bf05-c2e607aaafb8.roa (raw, json)
Hash identifier:          gFzl2u1JwPiVAEkynG+E9CL5+6fw0IvOFqpYDp7ri+o=
Subject key identifier:   F5:FD:EC:A2:E2:7D:44:34:39:28:1C:1E:19:BC:45:AA:A7:2C:B7:92
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       35A4CD700278CC53C0C21C303E73106A1EE73691
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2ebd3bf-70d6-4681-bf05-c2e607aaafb8.roa
Signing time:             Sat 15 Nov 2025 01:50:54 +0000
ROA not before:           Sat 15 Nov 2025 01:50:54 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a4:cd:70:02:78:cc:53:c0:c2:1c:30:3e:73:10:6a:1e:e7:36:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 01:50:54 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=0c0d33ec1a2ae69ee0328f2bf582ff141e1ea3b20225c207ea4bbe35ad82ecb2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:33:e0:2c:d4:e0:82:ab:a4:89:48:22:78:
                    b3:6c:72:cf:c4:90:38:ff:d3:cd:5f:a3:07:54:d1:
                    4c:a1:17:d7:1d:45:3c:6a:1c:91:3e:0f:7c:b2:60:
                    a1:ce:51:56:ed:b5:90:11:be:09:32:ca:be:aa:39:
                    bb:3d:ad:d7:c2:da:5f:20:9e:3b:46:13:74:17:6a:
                    04:cb:02:b7:51:a8:84:c0:d8:3f:8e:aa:47:32:71:
                    61:9f:35:87:d8:4f:c8:bd:ef:96:0b:16:36:1a:6a:
                    ea:f5:7b:bf:47:51:20:b9:4e:68:2a:6c:4f:09:62:
                    b4:fa:0d:b4:68:b9:1b:88:64:d2:b6:c8:9d:82:7d:
                    ef:3b:d8:5b:75:e1:bb:0e:2d:13:74:f7:c1:03:ed:
                    29:7f:96:86:14:90:50:1e:30:22:64:53:ba:8a:e1:
                    52:17:36:cd:d4:52:f1:67:c9:08:32:33:1c:b6:b5:
                    53:41:6d:d7:ff:74:5e:8b:37:1e:0f:c3:1b:d6:d0:
                    d4:db:84:e8:ec:b0:fa:07:1a:6a:0c:2c:92:55:1a:
                    f9:56:2e:de:88:54:49:c4:4b:dc:a4:a5:a6:5b:c6:
                    6a:74:2d:39:e2:18:09:60:ee:c0:dd:10:6d:52:d8:
                    37:70:8b:55:5c:dc:ef:4d:49:64:08:28:8e:81:1b:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FD:EC:A2:E2:7D:44:34:39:28:1C:1E:19:BC:45:AA:A7:2C:B7:92
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2ebd3bf-70d6-4681-bf05-c2e607aaafb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:c4:9b:0f:91:dc:14:a7:ff:dd:37:a5:cc:16:22:7e:20:28:
         79:76:b7:6d:8e:ab:1b:ad:d8:a8:63:1a:34:f4:0c:e5:a0:68:
         0b:48:c9:ab:68:e5:ed:4d:49:06:19:91:38:00:80:15:e8:14:
         5d:7e:37:fc:57:10:9d:80:97:75:4e:cf:66:8e:fc:99:7f:47:
         15:40:3a:d8:a1:21:82:ee:4f:be:26:a1:2f:f1:90:01:5a:cb:
         e5:f7:19:d8:d2:de:2f:da:7f:e3:3c:b4:f5:5d:04:92:57:98:
         61:e6:ae:dd:fc:9e:5c:9b:cf:80:85:81:d1:4f:0e:8f:51:22:
         b8:62:b5:56:7a:82:dc:4f:07:84:fc:1b:a2:8d:aa:12:e1:9e:
         6f:39:53:98:12:0c:30:eb:f0:8e:6e:55:71:ed:66:13:e5:99:
         67:35:60:1c:80:9c:8e:e9:8f:e8:fe:88:ad:cf:11:54:6b:b8:
         98:1d:ea:f1:7e:a2:0b:0b:6c:6d:72:f2:30:95:f0:d5:7d:a4:
         07:8e:00:77:30:19:27:4c:18:3a:9c:7c:a8:5c:e1:47:04:34:
         e7:b7:9b:5c:4f:13:57:22:69:7f:f8:0a:c3:77:64:45:1e:01:
         00:bb:47:6b:5a:c0:29:a9:ce:ed:ec:8d:d1:d2:32:30:0f:7f:
         c3:0e:a5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:07:59 2025 by rpki-client