This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc26df5e-bb6f-4182-8ccd-6c8cabdb191d.roa
File:                     fc26df5e-bb6f-4182-8ccd-6c8cabdb191d.roa (raw, json)
Hash identifier:          o5CTv0ijt/AzNlPZ9yzx5AT2CesSBfTe69fZh39ZskM=
Subject key identifier:   18:EB:74:01:9E:6B:AC:01:97:BA:08:08:EE:BB:A6:DC:25:34:CF:26
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       62032D12568C8253339D23E99FD08D24E68134AF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc26df5e-bb6f-4182-8ccd-6c8cabdb191d.roa
Signing time:             Wed 10 Dec 2025 02:11:12 +0000
ROA not before:           Wed 10 Dec 2025 02:11:12 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     3209
IP address blocks:        15.145.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:03:2d:12:56:8c:82:53:33:9d:23:e9:9f:d0:8d:24:e6:81:34:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 02:11:12 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=d6b269864c22a37c4d28c7dc713cb49ea187d1af2c7977f454bd1667f12d66bb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:a1:8b:f4:be:74:1f:5c:9c:ec:c9:b3:71:
                    d8:72:1d:27:3e:db:b9:0e:0e:8c:87:8b:7b:8a:20:
                    1b:89:08:e8:8f:c8:0d:49:14:f9:eb:43:13:12:1f:
                    ac:30:b6:38:3a:bc:0b:df:39:a3:53:bb:75:dc:4e:
                    82:4c:32:1e:33:33:bf:e4:0e:13:f5:63:5d:66:ca:
                    65:71:21:f2:ca:76:a3:2f:4d:38:07:16:fa:4b:95:
                    98:8d:c3:29:65:3c:4b:1e:c6:33:c7:66:bc:e4:ba:
                    50:e2:24:13:c4:40:a5:04:e7:db:98:99:67:02:dc:
                    64:77:58:79:a2:76:e6:90:05:69:0d:88:95:be:89:
                    20:bb:0e:96:25:eb:4d:b8:87:26:07:29:4f:69:e6:
                    ce:e6:08:27:3f:d5:77:69:a1:18:0f:22:46:8f:3d:
                    4d:49:84:92:3c:e4:e4:b6:d0:6e:f1:1d:93:9f:b3:
                    93:a2:53:db:20:1b:f3:cf:5a:cb:34:91:bd:84:3d:
                    2d:d4:83:99:ac:ce:67:e1:54:cb:26:66:d8:a1:a8:
                    01:7d:35:bc:7e:61:bf:e2:25:75:e3:88:69:fa:56:
                    5b:3a:2d:bb:64:51:3f:5e:1f:53:41:73:f3:47:97:
                    66:95:b4:61:26:1f:2d:98:1f:ed:66:2d:b0:50:cb:
                    a0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EB:74:01:9E:6B:AC:01:97:BA:08:08:EE:BB:A6:DC:25:34:CF:26
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc26df5e-bb6f-4182-8ccd-6c8cabdb191d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.145.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:77:20:8c:05:cc:84:71:86:7c:55:ef:bf:45:29:45:c8:6a:
         89:87:a7:fa:63:49:87:0c:7c:59:c3:18:f4:f1:bb:e2:03:59:
         67:6f:63:ab:9e:7e:f3:e6:0f:e3:e9:ca:70:00:41:d3:ef:60:
         d6:b3:fe:14:7b:5f:74:f0:8d:e2:55:12:b3:7a:3c:6d:c7:d0:
         fd:04:cf:b1:2f:58:5e:dc:12:31:97:09:dd:e9:61:5c:50:1b:
         1b:14:10:06:4d:5a:51:37:aa:00:aa:de:a2:3f:49:11:01:38:
         c1:39:bc:84:fa:75:d5:6f:a2:54:6d:68:63:8c:89:db:bb:31:
         44:00:69:3b:17:2b:64:b1:5b:a1:4f:71:8b:f6:1b:47:5b:a1:
         06:b6:5f:5d:f4:64:ba:e3:6b:b9:b9:20:05:65:ca:6a:ce:83:
         a1:be:53:86:29:9e:d0:e2:68:04:e3:e4:ea:30:78:91:40:89:
         e3:cc:af:af:62:d7:04:f9:75:03:21:00:13:bc:c3:2e:95:05:
         f8:d4:5f:ae:fb:05:91:4e:12:8b:13:84:57:d0:b5:00:a2:aa:
         4c:39:80:7e:4c:75:ef:bd:15:76:94:a0:f9:1c:b5:d9:e7:46:
         80:15:52:8d:f1:e7:97:86:7f:48:d5:d9:a2:fc:f7:21:f5:c4:
         c2:8c:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:59:40 2025 by rpki-client