This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa
File:                     24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa (raw, json)
Hash identifier:          Pf/sh+omj6bTbn/mCJzx40igvOW9mvNd2ZlCfm4hXH4=
Subject key identifier:   CB:F9:E4:BF:07:4C:B9:D4:5C:DE:50:A2:DE:48:84:2C:5B:38:08:3F
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       0345FDBC4C95DF5CF6B2FA6669F62487F1DC5F73
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa
Signing time:             Sat 15 Nov 2025 00:20:09 +0000
ROA not before:           Sat 15 Nov 2025 00:20:09 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:45:fd:bc:4c:95:df:5c:f6:b2:fa:66:69:f6:24:87:f1:dc:5f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Nov 15 00:20:09 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=39f14268306b0281c886237260e8f4b560f6741d7459281d297288554aa3b1c3, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:ee:d7:b7:03:8e:2d:9e:b2:af:1b:f0:cf:
                    dc:54:bc:1c:f9:ec:6f:35:76:c8:c6:d9:0e:e4:5c:
                    9a:ec:f5:0d:a4:83:af:34:a6:0e:0d:8d:67:2a:fd:
                    57:f9:b7:bb:dd:b4:2e:f8:a3:c0:55:1c:1e:d0:01:
                    e4:38:9e:1d:fe:69:d6:03:9d:3b:1e:fe:36:08:2e:
                    42:27:47:62:8e:91:12:0c:82:d6:b6:95:c9:19:ec:
                    09:2e:46:fd:58:53:65:e8:9f:2b:bf:d2:5b:f6:a2:
                    ea:03:d7:78:2a:66:4a:21:71:2f:58:77:e6:37:6d:
                    20:1c:c4:b2:29:75:2b:6a:46:a2:b6:d5:fb:c0:97:
                    da:d5:b2:fe:93:5c:e3:a4:41:fd:15:bc:c1:ba:ad:
                    ce:c8:57:08:ce:c3:d3:48:d9:e6:08:0f:99:bf:b5:
                    26:ef:f9:6e:02:c8:58:fb:71:73:89:c1:3b:0a:ff:
                    48:9d:bc:ab:58:10:63:ae:08:67:dc:97:fd:81:d0:
                    c1:9a:16:d2:5b:54:06:66:05:b5:05:d6:27:65:0f:
                    7b:64:0b:09:df:8d:78:69:1a:c6:59:f3:68:c0:31:
                    4a:e3:ab:1a:52:9a:e1:63:b7:c1:40:3f:7e:34:8a:
                    46:4e:95:05:89:e6:c6:97:68:12:d8:77:f7:03:92:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F9:E4:BF:07:4C:B9:D4:5C:DE:50:A2:DE:48:84:2C:5B:38:08:3F
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:60:d3:8f:5e:3d:ee:18:61:5c:4c:b0:e5:fc:ee:e1:89:
         e5:b8:92:b5:28:e8:8b:d6:75:c3:07:b7:75:e0:b6:ba:39:10:
         b9:9b:53:b9:8f:4e:9e:0a:90:66:88:6e:26:ba:61:db:97:f0:
         98:ed:10:e9:84:ba:a7:8e:53:e2:25:bc:34:01:62:06:b4:8e:
         5b:61:8a:ea:9e:46:eb:eb:12:cc:81:74:68:ed:d5:f6:e8:ba:
         fa:a6:60:3c:26:d5:7c:ed:b2:9f:ce:3f:88:65:78:53:c5:b9:
         db:e2:0c:a9:7d:3a:2e:23:78:40:ab:69:4e:73:08:3e:e6:e8:
         4e:86:7b:c4:83:e3:8b:8b:ac:59:30:19:d3:0b:79:be:77:6a:
         06:0f:0a:92:5b:6b:1c:68:72:cc:89:f2:42:be:56:52:ab:60:
         2f:3a:bd:b2:04:ed:5c:db:6e:2c:c3:e9:1b:b8:de:93:2e:fe:
         17:8d:f2:fb:98:74:0d:10:68:96:74:00:a0:1f:e8:62:de:c9:
         ac:31:b1:4a:b5:1f:f2:71:5d:19:c9:75:b0:cf:47:39:49:55:
         95:a0:c4:69:7c:93:bb:d4:a6:b7:fe:19:21:41:93:d1:36:0a:
         e7:e1:ac:80:31:a8:bf:69:de:61:49:16:03:b0:db:01:18:74:
         18:88:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:58:03 2025 by rpki-client