This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa
File:                     498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa (raw, json)
Hash identifier:          M+gjOYuvWQQ0Acgd8LHz+QqdvSEqkdrh1+0pjMqB5Lc=
Subject key identifier:   DD:A5:94:1E:92:21:5D:2C:D4:D8:1A:8E:CC:74:39:95:F0:AA:7C:54
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       69A41EA20E45C11396D178BFB490C7865B2D6060
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa
Signing time:             Sun 23 Nov 2025 00:30:07 +0000
ROA not before:           Sun 23 Nov 2025 00:30:07 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a4:1e:a2:0e:45:c1:13:96:d1:78:bf:b4:90:c7:86:5b:2d:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 23 00:30:07 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=603ca387d2c9b21246c12ed858ed9a5ba8931c97d25b1f08634d3fd7263a2514, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:d8:bc:f9:64:e2:6e:f9:7e:93:9e:8a:ea:
                    bf:5d:1c:58:89:23:3e:f7:f4:1f:57:12:11:e4:f5:
                    23:86:b3:3b:62:1f:69:6c:ea:57:4f:be:6d:8b:01:
                    79:25:f1:69:40:b8:6c:f6:d0:49:3e:e4:4e:5a:c6:
                    75:1f:a5:e1:8a:cc:c5:9a:f7:ab:87:b0:02:bd:0a:
                    82:0b:df:bc:64:99:5e:16:1c:b7:40:40:cb:7e:02:
                    a2:c4:95:7b:cf:09:12:5e:04:d8:b7:9d:7b:a7:b1:
                    28:b0:a6:e4:78:b4:fb:df:fe:9d:f6:32:59:01:8d:
                    18:b9:1c:11:45:06:a3:29:4a:da:b2:ce:9a:46:02:
                    a2:cb:b4:c8:a9:aa:78:ae:09:97:fa:bd:88:af:24:
                    8a:27:5e:e6:5f:29:ad:ed:b7:75:81:46:17:64:52:
                    17:26:f7:9d:b2:b4:79:ab:3e:12:58:5f:b5:a7:c8:
                    7f:4d:1d:49:b3:35:c0:16:4e:63:cc:49:5b:d8:7e:
                    e4:28:09:a5:6b:e7:35:bd:aa:0b:b2:58:18:d5:e7:
                    bf:33:07:b1:69:81:d9:56:eb:e8:c0:f7:dd:ef:21:
                    d4:05:ed:94:24:03:d5:e1:03:3c:65:2a:4d:ff:d2:
                    a3:93:f5:76:19:9b:84:d9:c0:23:92:8f:96:1a:5d:
                    50:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A5:94:1E:92:21:5D:2C:D4:D8:1A:8E:CC:74:39:95:F0:AA:7C:54
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:93:56:26:95:e1:0b:12:66:06:5e:f6:e8:de:40:01:d4:dd:
         e1:43:41:9e:6f:d6:3a:32:e5:99:5c:cd:9b:81:73:81:16:21:
         fa:8b:0d:b5:e5:93:24:11:b5:82:9c:de:13:de:e1:6f:0e:da:
         b8:cf:ad:85:54:3a:85:e7:3d:e4:b7:84:37:f3:7f:18:72:0d:
         4f:63:33:e7:87:41:68:6a:53:04:f7:cc:93:dc:7d:a2:6d:eb:
         6a:f6:0c:5e:a6:07:ab:0c:d6:82:b1:dd:6a:2f:19:4c:c2:ad:
         1a:98:2e:3a:47:97:73:e7:ba:b6:54:30:bd:bd:87:ca:58:18:
         f2:3e:18:c0:86:54:eb:da:db:ef:96:8f:35:33:05:1f:e4:6d:
         c8:b8:bf:18:c1:19:02:c0:14:46:74:72:54:e4:a3:f7:2d:dc:
         73:d6:81:f2:80:37:2b:80:a0:05:d3:be:90:ac:9d:22:08:3e:
         47:f1:43:6f:52:f5:26:6d:24:2a:fb:2b:38:ba:d7:2c:6e:72:
         4c:4e:78:cb:60:28:6b:e7:28:a1:4b:8c:f6:02:c5:99:dc:35:
         c9:e5:59:a6:eb:26:a7:8c:2f:ed:bd:6f:4e:b0:19:3e:bf:af:
         2e:f0:a1:46:99:db:3d:3c:33:da:f2:2e:ae:bf:b7:f7:37:52:
         0b:08:4b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:53:37 2025 by rpki-client