This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa
File:                     84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa (raw, json)
Hash identifier:          mjrhpaqEyoF4Nk5fD+ALsPxUo5fcNsrTQ7nLZIsD6sY=
Subject key identifier:   BD:21:1E:1E:52:D5:5B:D8:5E:30:F7:53:5C:92:CB:47:CE:54:D2:FE
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       2D90EC943036178F7678776A15A104B9EC98D613
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa
Signing time:             Sun 23 Nov 2025 00:20:04 +0000
ROA not before:           Sun 23 Nov 2025 00:20:04 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:90:ec:94:30:36:17:8f:76:78:77:6a:15:a1:04:b9:ec:98:d6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 23 00:20:04 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=a3ecd70eb2b83b7094c771d06443e9bf701dd68ffc218cd70ba8aa7931ab9381, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:c9:19:16:96:fc:da:21:19:22:66:c7:05:
                    9b:c9:cc:32:d5:89:1f:50:c5:b8:c2:83:c9:9d:83:
                    2a:aa:cc:73:a0:17:57:56:34:64:1d:8b:00:97:cf:
                    a2:63:e7:2d:d9:a5:eb:4b:65:93:79:d7:e4:fb:91:
                    5f:fb:c5:ba:97:40:21:53:52:94:d8:18:07:79:07:
                    e3:b0:0d:d0:ec:1c:9d:66:38:e5:e5:95:4f:82:0d:
                    0b:d5:00:a9:89:f5:cd:6b:37:e5:e0:f4:a9:de:81:
                    d4:70:79:87:c8:80:85:3c:53:29:26:11:68:74:e5:
                    a2:92:81:61:da:52:91:6b:4d:d6:1d:62:0f:17:07:
                    0b:56:c9:7a:55:02:23:8d:2b:dd:fa:a0:65:b0:b2:
                    80:54:ad:41:73:13:49:39:f6:f1:c8:4f:ce:69:1f:
                    e8:b5:08:63:6b:5a:51:0a:cb:dd:20:48:b3:19:95:
                    17:4e:b3:6f:7f:97:0e:d3:7d:a3:83:8b:00:52:e1:
                    e0:76:20:42:f5:e4:f2:c4:56:5d:20:a7:dd:54:0b:
                    65:7f:9b:84:75:88:b2:13:f7:c3:87:e6:d0:ac:dd:
                    ae:a9:a3:32:ca:38:50:90:78:39:65:2f:92:d5:fe:
                    af:78:00:9f:72:c3:7c:43:33:a3:aa:f7:2a:82:20:
                    a2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:21:1E:1E:52:D5:5B:D8:5E:30:F7:53:5C:92:CB:47:CE:54:D2:FE
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b7:c3:8e:6b:d3:d1:be:e3:c2:6f:0b:27:1b:71:61:e2:c2:
         9b:f5:d9:6f:ed:2b:a1:16:fc:51:6b:c1:a9:b4:bc:17:ae:8a:
         f7:e2:a7:99:d9:15:48:4c:66:d7:4f:f3:e9:14:09:57:ac:cf:
         d2:82:17:0a:60:84:b3:0c:2e:08:9a:17:bd:cd:ef:8a:2a:03:
         b5:1a:5c:cb:ad:46:1b:d3:5a:1d:7b:be:4e:3d:ec:04:d6:68:
         22:ab:00:ba:f6:96:a5:4b:65:22:d8:40:cc:a9:21:b9:77:fa:
         40:f6:96:18:0c:14:8c:42:b7:b5:ec:49:a5:9b:b9:f9:f2:e4:
         25:d5:d6:ca:e7:18:dd:3f:0d:83:ee:2b:63:9e:bc:ea:2a:1e:
         56:8b:b5:13:8e:8a:8b:0f:83:6e:61:1a:ff:fd:18:89:3b:ea:
         4a:c3:3d:74:b3:8c:91:59:aa:6b:3d:d5:22:53:9e:f8:f6:b3:
         19:82:f9:b5:83:2a:eb:7a:95:e8:7e:50:61:2e:a2:17:df:6b:
         8f:50:4a:c6:af:22:1b:f1:87:f5:b5:bc:c7:e9:af:0b:75:d0:
         5f:d0:aa:78:d6:df:3f:e7:c3:84:c2:8d:5a:1d:28:88:cc:b4:
         af:fe:fd:e2:ee:60:38:09:bc:2f:42:f1:f1:6f:0f:97:24:84:
         3e:be:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:55:43 2025 by rpki-client