This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa
File:                     4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (raw, json)
Hash identifier:          Fw/MlejbHanRZ+AsxUCgq2XCb1lygA7irTL4dbLz9/4=
Subject key identifier:   1E:5A:71:EA:7A:8A:41:64:98:02:E6:94:1A:40:92:87:BF:0E:84:B4
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       3E6416863067AF7495C9E1FF65F474105D7D7DFC
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa
Signing time:             Wed 12 Nov 2025 00:10:11 +0000
ROA not before:           Wed 12 Nov 2025 00:10:11 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        198.41.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:64:16:86:30:67:af:74:95:c9:e1:ff:65:f4:74:10:5d:7d:7d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Nov 12 00:10:11 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=a765b9ba9bc864582c5e29fceaf862fdaae37473dd5cb897bc6ad50ee5344ca5, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:1a:d6:f6:dc:9b:80:73:3d:f0:a6:39:02:
                    de:cf:25:cd:06:23:02:fc:32:df:b5:8a:44:cc:8f:
                    69:14:f7:37:82:f8:52:ae:ec:41:c3:9c:a8:ac:f3:
                    38:4a:53:50:37:96:b5:18:fc:e3:ac:c0:81:7a:8d:
                    2e:a9:78:90:0e:11:75:73:eb:ea:df:56:d4:0e:c6:
                    d2:64:50:09:ce:e6:2f:64:9e:fa:e9:d0:7c:b1:a2:
                    4f:a2:ce:72:5d:41:82:cb:8c:a9:9c:e2:b0:f2:c6:
                    e5:e3:1a:91:0f:4e:b7:17:58:45:b5:0f:de:ac:17:
                    bb:53:37:48:76:6a:1a:93:ee:53:6d:a1:6d:4e:1e:
                    31:52:f3:3d:eb:4e:7f:8f:26:02:86:88:77:8e:98:
                    5e:36:99:a3:64:5d:87:4d:57:ac:ca:e5:bc:4b:b8:
                    6d:1e:60:01:3e:bd:d3:98:01:6c:95:fd:61:22:d3:
                    03:7c:b5:fc:19:be:58:e9:37:c5:a8:02:8a:49:4c:
                    5b:0b:81:8f:5b:c0:d8:17:d3:2b:64:37:07:7c:7a:
                    af:1c:e4:68:49:6f:32:71:37:be:7c:39:e0:f1:46:
                    ae:b2:1c:fc:91:6b:bb:51:23:f2:71:f8:ab:e5:95:
                    55:93:e3:50:ef:51:81:2f:68:7e:3d:06:91:08:29:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5A:71:EA:7A:8A:41:64:98:02:E6:94:1A:40:92:87:BF:0E:84:B4
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:b3:ed:70:b9:35:92:b7:b6:c4:80:8d:8a:0d:81:78:12:34:
         7a:d6:86:ef:38:b2:e4:d6:3f:97:af:a9:55:d5:6e:96:dc:8b:
         50:a9:4a:bb:f2:ae:a7:37:ec:29:5f:c5:98:e0:ba:fb:a2:28:
         45:fd:77:99:0c:f0:3e:f9:55:db:64:a9:ca:b9:ac:01:cd:ed:
         83:88:bc:da:71:3d:fd:20:61:17:8d:49:b8:91:8e:bb:78:d6:
         31:1b:fa:09:10:b1:2e:83:75:57:66:cc:78:fc:b8:23:53:47:
         f0:7c:2e:e2:18:95:65:03:52:f2:23:0f:1c:5a:70:65:48:21:
         60:5e:ff:28:da:c2:25:57:da:95:20:96:ca:30:ea:d9:10:9e:
         a0:ce:d8:3a:f0:0c:a2:c8:8f:ff:e6:69:94:32:91:0b:c0:d8:
         5e:d6:d9:35:7f:ea:ff:96:64:98:1d:ef:5f:0a:38:ba:f1:bc:
         4c:46:55:29:b8:14:5c:a2:16:0e:ea:09:4d:cd:16:a4:e9:7b:
         99:7e:e8:ec:bd:0a:95:20:17:2a:e3:02:5b:d3:06:d5:cc:22:
         f1:6f:78:7a:03:0d:b8:de:2e:4a:4c:8a:96:b6:48:f5:f0:08:
         c7:0a:b9:a1:41:3a:86:1a:fd:ed:36:36:97:21:c6:af:6a:af:
         e4:2b:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:55:03 2025 by rpki-client