This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa
File:                     7c53740e-7300-4028-b024-414ad3814267.roa (raw, json)
Hash identifier:          qfbBMMPRs+toRLbc8KIRx181BnjK3rLxmLbAPZm2j8o=
Subject key identifier:   64:D4:D5:68:9A:FB:F5:D5:97:30:92:9E:38:55:10:45:92:4B:72:DC
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       0D2B373BC86BB598933436B842383C4E7E318B7D
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa
Signing time:             Sat 15 Nov 2025 00:10:10 +0000
ROA not before:           Sat 15 Nov 2025 00:10:10 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2b:37:3b:c8:6b:b5:98:93:34:36:b8:42:38:3c:4e:7e:31:8b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Nov 15 00:10:10 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=e6ea44fc0630270e1e105f4e50d6325e20ec3f661ff0cca88cde9bfd781db0f7, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3c:16:b2:2d:d3:39:47:78:aa:1c:93:ea:e5:
                    a7:f7:ef:7f:7d:75:a0:05:44:d2:06:91:88:38:99:
                    03:4b:0e:ec:d3:5c:a8:5c:ed:3c:f7:7d:43:54:7c:
                    36:a3:43:6e:f6:0f:76:27:2e:aa:c4:98:f2:97:76:
                    29:e2:9c:70:9d:d6:56:cd:59:b6:5b:0e:92:e2:49:
                    d6:16:9d:fa:1f:a8:9b:49:b5:c9:15:13:81:f8:22:
                    f7:56:dc:d8:3a:5c:07:1b:87:f2:4b:73:55:64:54:
                    48:ae:0d:ef:94:fa:87:c6:8b:70:45:3a:45:df:2c:
                    ec:bb:d3:8d:3b:b5:21:e7:12:41:82:f9:06:8d:af:
                    ae:09:b5:dd:fd:03:c5:7c:74:fe:76:cc:4d:21:dd:
                    64:e3:3e:23:78:15:83:d1:3e:e8:b8:c6:04:f6:a4:
                    a0:7b:a1:30:20:40:6d:68:1d:14:e4:60:1b:18:7a:
                    47:8f:c8:7e:22:a0:f3:5d:a9:5b:2e:1c:36:d0:14:
                    a8:65:d0:c6:ea:6c:96:9b:a0:01:a8:4f:50:41:bc:
                    53:d4:f3:9a:3e:e4:39:d4:4c:95:9b:6b:69:d4:a5:
                    43:1c:ac:8a:66:93:40:b8:00:20:71:bb:5e:aa:b7:
                    16:27:85:85:47:cc:87:56:4f:a8:a3:75:5f:98:8a:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D4:D5:68:9A:FB:F5:D5:97:30:92:9E:38:55:10:45:92:4B:72:DC
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:bb:ed:a0:03:75:db:ab:14:89:1b:e9:fc:91:67:78:a4:ca:
         e5:8b:d4:79:19:2b:e4:36:c8:2c:bf:bd:9c:79:c3:00:91:d5:
         1e:52:2a:e1:62:60:e1:8a:7a:1f:da:51:ae:12:0a:8c:4f:43:
         7a:8f:40:5c:86:b4:ca:29:5b:4c:49:06:d4:82:9f:93:42:19:
         fb:29:66:8e:79:03:b6:f4:b2:1c:c7:62:6a:7d:d8:73:5d:4c:
         d5:c1:dc:ca:20:cc:81:cf:38:3e:e5:64:95:31:ac:1a:38:8e:
         cd:c5:73:40:45:d3:5b:0b:7c:45:3e:5c:93:a5:94:08:0c:46:
         f2:b2:80:54:f9:bd:21:8c:d6:8d:e1:54:f8:0a:65:7f:28:58:
         47:0b:a1:0c:86:8b:3c:ab:72:8f:1c:c1:0b:6a:5e:62:02:61:
         bd:8b:7d:51:55:4f:64:0d:63:82:7a:55:d1:54:f9:f6:2e:5c:
         74:b6:b4:49:8b:a2:f7:be:b4:9a:b1:aa:d6:61:51:8c:88:ff:
         d3:57:8c:5d:38:fb:90:f5:d4:dd:21:7a:6b:85:73:a3:bb:7f:
         0c:80:6a:38:59:aa:a3:aa:40:21:57:34:fa:b3:aa:7a:9a:7f:
         4a:ae:b8:9e:a2:72:48:ff:ed:a7:c3:d0:0d:c7:69:8a:32:0f:
         1c:1a:71:cd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDSs3O8hrtZiTNDa4Qjg8Tn4xi30wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUxMTE1MDAxMDEwWhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNmVhNDRmYzA2MzAyNzBlMWUxMDVmNGU1MGQ2MzI1ZTIw
ZWMzZjY2MWZmMGNjYTg4Y2RlOWJmZDc4MWRiMGY3MS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMPBayLdM5R3iqHJPq5af37399daAFRNIGkYg4mQNLDuzT
XKhc7Tz3fUNUfDajQ272D3YnLqrEmPKXdininHCd1lbNWbZbDpLiSdYWnfofqJtJ
tckVE4H4IvdW3Ng6XAcbh/JLc1VkVEiuDe+U+ofGi3BFOkXfLOy70407tSHnEkGC
+QaNr64Jtd39A8V8dP52zE0h3WTjPiN4FYPRPui4xgT2pKB7oTAgQG1oHRTkYBsY
ekePyH4ioPNdqVsuHDbQFKhl0MbqbJaboAGoT1BBvFPU85o+5DnUTJWba2nUpUMc
rIpmk0C4ACBxu16qtxYnhYVHzIdWT6ijdV+YiqnhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZNTVaJr79dWXMJKeOFUQRZJLctwwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5LzdjNTM3NDBlLTczMDAtNDAyOC1iMDI0LTQxNGFkMzgxNDI2Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIycAQwDQYJKoZIhvcNAQELBQADggEBAKu77aADddurFIkb6fyRZ3ikyuWL
1HkZK+Q2yCy/vZx5wwCR1R5SKuFiYOGKeh/aUa4SCoxPQ3qPQFyGtMopW0xJBtSC
n5NCGfspZo55A7b0shzHYmp92HNdTNXB3MogzIHPOD7lZJUxrBo4js3Fc0BF01sL
fEU+XJOllAgMRvKygFT5vSGM1o3hVPgKZX8oWEcLoQyGizyrco8cwQtqXmICYb2L
fVFVT2QNY4J6VdFU+fYuXHS2tEmLove+tJqxqtZhUYyI/9NXjF04+5D11N0hemuF
c6O7fwyAajhZqqOqQCFXNPqzqnqaf0quuJ6ickj/7afD0A3HaYoyDxwacc0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:43:30 2025 by rpki-client