This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/93d7471b-56b1-4f53-982e-a84765e52ef3.roa
File:                     93d7471b-56b1-4f53-982e-a84765e52ef3.roa (raw, json)
Hash identifier:          uDiCti31WZOtfjHNCfQfrycSdtjknVbO6QwGR7laCho=
Subject key identifier:   C8:3B:79:DB:E8:93:BD:22:15:56:6B:54:A1:04:64:39:00:5B:BD:B9
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       697497A675460FB7FFA595C7F4F210F7559C6043
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/93d7471b-56b1-4f53-982e-a84765e52ef3.roa
Signing time:             Sun 23 Nov 2025 00:20:08 +0000
ROA not before:           Sun 23 Nov 2025 00:20:08 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:74:97:a6:75:46:0f:b7:ff:a5:95:c7:f4:f2:10:f7:55:9c:60:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 23 00:20:08 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=7bfd788035fb8e94df1a3a2d2409d8591a81903afabcac87fb824d6ec0a9d00f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:36:80:ec:9f:93:84:cf:79:c6:66:7b:ba:17:
                    e8:5b:d5:91:02:00:04:38:6f:06:f5:2c:e4:3d:07:
                    71:de:e0:35:4f:b9:46:e1:cc:a9:8e:92:7d:7d:63:
                    0b:ae:63:2c:cf:5c:4a:20:32:99:87:76:c4:87:36:
                    6d:52:c3:1b:6c:7c:69:be:ff:6a:86:71:66:b4:75:
                    58:0d:9a:e9:0b:d2:7a:50:bd:9a:38:d2:6b:90:65:
                    ea:98:ca:c0:11:9a:08:3b:be:a6:1e:84:a0:11:df:
                    42:77:55:f1:45:56:61:4b:90:91:dd:82:2f:9e:09:
                    ba:a0:11:91:fb:78:44:3b:1b:b0:94:b4:ad:5c:8c:
                    7a:71:e3:61:05:0a:20:f6:b5:17:72:13:b7:cf:cc:
                    cc:f3:71:0a:45:92:32:b2:f5:27:df:d0:47:8d:34:
                    5a:84:a3:b5:c4:db:8f:c3:a5:d6:14:c8:80:75:09:
                    3d:e6:f3:7a:fb:a1:b5:41:e4:d7:4a:e1:fe:86:0b:
                    cc:68:84:a5:22:1d:c0:9c:64:1c:05:79:3d:65:8b:
                    b9:46:13:8a:34:58:af:54:8c:9c:eb:ba:df:33:6c:
                    50:f1:8b:59:78:e8:dd:b8:37:cb:44:4c:a1:bc:fa:
                    a8:f7:f4:a8:e6:bc:8f:2e:dd:13:be:45:48:7b:30:
                    ad:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3B:79:DB:E8:93:BD:22:15:56:6B:54:A1:04:64:39:00:5B:BD:B9
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/93d7471b-56b1-4f53-982e-a84765e52ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:47:54:7b:22:bb:49:b4:7c:ef:a1:7f:cf:00:4e:73:5e:38:
         37:e9:8f:dc:5f:05:ba:02:c9:eb:8b:e5:cc:02:be:47:ba:8b:
         72:34:ce:b1:5f:6f:a0:a6:ca:1e:33:33:cf:eb:bb:b9:59:cf:
         58:f6:e1:19:a9:f8:06:c3:f4:1f:dc:80:1b:e3:0c:44:ff:96:
         f0:44:0e:2c:35:ba:67:47:33:80:f6:c2:dd:d2:42:5a:6b:12:
         c8:37:ac:8e:10:a7:f8:5c:6e:66:73:a1:d2:d8:ca:8b:c4:ee:
         31:33:e7:35:07:52:10:af:18:23:c7:41:f0:07:23:78:78:0d:
         81:78:fe:02:88:14:35:51:3f:31:70:d7:fd:90:36:6a:4f:44:
         4c:f0:27:37:2e:56:a1:4c:12:65:3f:1d:86:68:45:39:53:c8:
         d2:1e:b7:a5:0a:97:5c:61:f5:7e:e8:ab:3d:c5:03:e2:05:03:
         58:cb:44:c9:5e:8c:bc:26:d4:37:4f:7b:86:2c:e1:3f:38:58:
         c3:d5:28:45:11:a9:6e:48:a4:11:f8:87:ca:de:df:c7:f6:f6:
         d1:7b:6f:ef:48:f6:6d:e5:12:2e:77:61:9c:9a:85:81:f9:9d:
         08:4a:c5:27:69:ae:0e:72:d1:fe:22:eb:ff:20:31:86:49:7c:
         85:e1:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:08:28 2025 by rpki-client