This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa
File:                     5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa (raw, json)
Hash identifier:          FBRWEfURXcxOjk+dJ1l6+EBvtrZt96mxKRIIq962jH8=
Subject key identifier:   67:4D:08:64:DE:0A:81:A5:6F:03:4E:5B:DB:4D:6B:75:2A:2B:75:4A
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       4C85FE51BCCF9030D8D767702064D55AB8DFB676
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa
Signing time:             Sun 23 Nov 2025 00:30:10 +0000
ROA not before:           Sun 23 Nov 2025 00:30:10 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:85:fe:51:bc:cf:90:30:d8:d7:67:70:20:64:d5:5a:b8:df:b6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 23 00:30:10 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=3b01899ac68e0b9450069d10cdbc6f94094ef8e547eb57d2bcb8764bdab4a441, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:0c:76:8c:42:e9:d0:81:d1:f1:91:98:6e:
                    65:1e:4b:14:ba:7d:5b:2e:13:de:8d:32:b0:de:0c:
                    91:1a:be:48:0c:8f:db:8a:97:06:76:f3:98:19:db:
                    42:2d:60:53:1b:27:16:8d:0b:a5:9d:fe:f8:a7:6b:
                    42:49:45:d2:f3:bd:24:36:40:fb:0c:8b:c7:9c:34:
                    79:20:71:a0:de:5b:7a:f3:48:7b:f5:9f:74:0e:5e:
                    db:f1:ad:3a:eb:a2:06:39:af:53:23:4c:b8:4b:77:
                    03:66:74:97:a6:f6:82:19:d2:1c:f6:dc:0d:0e:4f:
                    d6:27:80:d2:27:6b:45:3a:72:cc:65:8b:6b:e0:9c:
                    1c:23:f6:95:b3:20:88:71:98:69:62:70:2c:cf:42:
                    f7:d2:a6:9a:94:36:06:8f:18:61:a1:f7:35:e0:e0:
                    0a:4b:b1:ad:cd:0e:a4:c9:39:6f:50:94:ac:3f:ae:
                    f3:ee:93:fa:e9:48:df:d0:ed:8a:b8:da:32:7e:98:
                    e8:8c:e3:6b:43:f2:02:a1:a7:60:95:6e:87:39:e8:
                    f9:0e:4f:72:95:85:4e:e8:3f:51:90:dd:38:56:86:
                    d5:e8:31:9b:3a:56:c5:b5:f1:f9:31:d6:a2:a8:96:
                    60:47:45:33:0f:e3:f1:07:6f:94:b0:5e:da:b5:43:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4D:08:64:DE:0A:81:A5:6F:03:4E:5B:DB:4D:6B:75:2A:2B:75:4A
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:97:45:97:1e:a7:b2:f4:31:5e:87:69:53:78:73:c4:b6:0c:
         e1:e3:b9:af:7f:06:58:7b:ab:a9:af:a6:90:6d:2d:42:b7:0c:
         17:3a:4c:fc:75:83:e8:6e:a7:2e:3a:0d:ee:cf:7f:0d:02:44:
         73:00:a8:d2:50:41:9f:d6:43:e9:7c:35:f5:95:22:6b:04:e2:
         a6:b6:a1:7d:55:05:47:9d:a2:ac:a3:55:e8:00:c8:89:72:1f:
         7b:1a:80:ab:51:27:39:3a:e6:c7:f1:97:27:f7:cf:9c:01:c7:
         a7:aa:13:38:00:02:ba:84:af:d6:9a:fd:51:6b:0e:02:f8:db:
         80:8d:e4:92:ab:65:34:8f:67:4c:9d:4b:9e:1c:42:34:49:87:
         c1:59:6a:fc:f6:b3:af:e0:ff:c2:e7:8d:08:ce:78:24:2a:f4:
         1f:d0:60:c0:99:3c:6d:c4:d0:93:ae:ee:bc:5c:34:e2:84:5c:
         8f:69:14:e9:9b:a2:d4:9b:bf:93:b3:97:9f:f8:af:a8:7f:86:
         c3:ae:33:68:5f:96:1c:1e:06:cf:df:06:09:dc:48:40:ba:1d:
         25:31:0a:b4:fb:6c:c1:84:90:1f:0c:42:6b:b9:5f:cc:ad:d7:
         70:a3:a4:02:32:50:6a:bb:76:ae:3e:80:61:77:ac:77:a0:34:
         0a:2c:60:4d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTIX+UbzPkDDY12dwIGTVWrjftnYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTIzMDAzMDEwWhcNMjYwMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYjAxODk5YWM2OGUwYjk0NTAwNjlkMTBjZGJjNmY5NDA5
NGVmOGU1NDdlYjU3ZDJiY2I4NzY0YmRhYjRhNDQxMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDS2wx2jELp0IHR8ZGYbmUeSxS6fVsuE96NMrDeDJEavkgM
j9uKlwZ285gZ20ItYFMbJxaNC6Wd/vina0JJRdLzvSQ2QPsMi8ecNHkgcaDeW3rz
SHv1n3QOXtvxrTrrogY5r1MjTLhLdwNmdJem9oIZ0hz23A0OT9YngNIna0U6csxl
i2vgnBwj9pWzIIhxmGlicCzPQvfSppqUNgaPGGGh9zXg4ApLsa3NDqTJOW9QlKw/
rvPuk/rpSN/Q7Yq42jJ+mOiM42tD8gKhp2CVboc56PkOT3KVhU7oP1GQ3ThWhtXo
MZs6VsW18fkx1qKolmBHRTMP4/EHb5SwXtq1Q9yRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZ00IZN4KgaVvA05b201rdSordUowHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzVkMzRmNzk3LTZkMTYtNDk4YS1iNjZkLThjN2QwZmNhYzc3Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAX++kwDQYJKoZIhvcNAQELBQADggEBAGmXRZcep7L0MV6HaVN4c8S2DOHj
ua9/Blh7q6mvppBtLUK3DBc6TPx1g+hupy46De7Pfw0CRHMAqNJQQZ/WQ+l8NfWV
ImsE4qa2oX1VBUedoqyjVegAyIlyH3sagKtRJzk65sfxlyf3z5wBx6eqEzgAArqE
r9aa/VFrDgL424CN5JKrZTSPZ0ydS54cQjRJh8FZavz2s6/g/8LnjQjOeCQq9B/Q
YMCZPG3E0JOu7rxcNOKEXI9pFOmbotSbv5Ozl5/4r6h/hsOuM2hflhweBs/fBgnc
SEC6HSUxCrT7bMGEkB8MQmu5X8yt13CjpAIyUGq7dq4+gGF3rHegNAosYE0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:08:49 2025 by rpki-client