This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4714ad7b-a768-483a-bdb9-c35a68830b39.roa
File:                     4714ad7b-a768-483a-bdb9-c35a68830b39.roa (raw, json)
Hash identifier:          MULWAytmsfBjmQIWi0zq+dUQIpaMu6yv3kBk9CYn/10=
Subject key identifier:   28:29:04:38:7A:DE:C0:A4:FB:0C:82:0D:5B:99:FF:C5:5B:AC:0A:93
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       43E90064C419337F2ACD80A72B27A76FC4DB3EB7
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4714ad7b-a768-483a-bdb9-c35a68830b39.roa
Signing time:             Sun 23 Nov 2025 00:30:13 +0000
ROA not before:           Sun 23 Nov 2025 00:30:13 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        23.249.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e9:00:64:c4:19:33:7f:2a:cd:80:a7:2b:27:a7:6f:c4:db:3e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 23 00:30:13 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=e4f5c7d57f6224b5172c2946fe99f8e2e15ed6b63b685569309b677ecd716738, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dd:91:fd:de:c1:bd:d5:be:7f:cf:48:b9:f7:
                    9f:4c:ac:8c:a5:4c:7b:3a:93:a8:27:ca:1c:76:c8:
                    eb:42:1b:67:47:54:d1:50:8a:80:de:f8:67:8d:1f:
                    58:6e:36:69:82:90:c8:c9:2a:9f:43:39:37:f1:2c:
                    6e:b9:42:f8:53:ea:40:12:35:8e:5f:9e:2c:d9:69:
                    0a:47:ae:b1:57:62:a7:4c:16:bd:36:57:37:b4:01:
                    17:67:fa:55:ea:b6:ec:2a:f6:89:a5:45:df:58:71:
                    28:9c:98:62:c2:ee:4d:08:d4:38:86:10:f9:41:9d:
                    3f:0d:bc:db:9d:7e:93:77:33:70:7b:59:88:3e:e3:
                    64:f0:d2:a6:61:18:31:56:6e:26:d4:6d:03:80:6e:
                    4f:54:f8:cd:21:04:ee:9e:73:0d:3d:20:25:b0:fd:
                    b2:df:cf:a1:24:ca:f8:33:d9:6f:0f:ad:a3:eb:1e:
                    e7:20:2c:40:ec:fb:c8:21:b5:de:2b:29:25:5f:c9:
                    d6:69:44:20:a3:05:23:ed:ce:14:04:e1:e0:5d:28:
                    c2:1a:b6:7a:6e:3e:c0:33:c5:bc:b3:52:b6:c1:48:
                    69:b8:45:81:ba:e2:a8:27:45:5a:80:7f:90:9b:5c:
                    22:c3:a1:aa:0e:e5:c7:dd:82:1e:cc:04:87:95:78:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:29:04:38:7A:DE:C0:A4:FB:0C:82:0D:5B:99:FF:C5:5B:AC:0A:93
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4714ad7b-a768-483a-bdb9-c35a68830b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6e:cf:87:98:4f:31:4d:ae:18:f8:e5:f6:fa:ae:c9:ed:4f:
         19:05:20:70:37:42:2d:8e:27:d6:67:02:06:fa:d4:ce:e6:28:
         98:1d:01:35:46:c4:cd:37:fc:80:e9:52:b5:77:bc:18:53:39:
         a4:87:8d:c2:99:80:a3:c6:92:12:23:0d:c3:42:04:5d:31:1f:
         f8:62:ab:03:d1:f2:25:9a:1a:d2:10:68:52:f7:e7:53:b3:2c:
         0f:44:ac:53:4e:95:a9:c5:a8:23:de:05:67:77:80:b8:22:2d:
         b8:9c:74:da:a5:2e:c2:e8:27:3b:7e:1b:4a:2b:9b:c6:b3:61:
         25:3d:ce:07:23:3a:16:d3:99:3a:3b:77:ac:e8:8d:94:e3:c2:
         12:c2:67:a5:26:b8:cf:d3:4a:b5:5c:c6:fb:cb:7a:c4:35:71:
         55:ff:42:8d:06:8e:55:8f:ef:ee:16:64:80:e6:52:ff:e8:46:
         17:c4:cb:53:56:ab:0e:dd:ff:ca:87:32:98:ff:81:04:78:e9:
         eb:45:d4:ab:5b:a0:3c:2a:7b:07:af:ae:db:38:1e:30:21:74:
         f2:31:30:be:14:f2:3b:8a:6c:5c:0c:63:4f:c8:e4:34:54:dc:
         47:f7:e2:a1:1e:3d:ba:96:89:1b:ba:4d:95:84:89:e5:fa:05:
         8c:51:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:16:36 2025 by rpki-client