This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
File:                     b59643bf-eb80-414a-aca0-653646d46e07.roa (raw, json)
Hash identifier:          HruoKwm2MebBcuxgfxKGjHe8fY/L9B8RX03lWkGBCw8=
Subject key identifier:   69:65:21:7A:34:42:2A:82:6F:C2:A7:6C:8A:06:B0:16:FF:33:80:D2
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       16FEB0D0D699834EAA93715FF9E71919727E0AF4
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
Signing time:             Wed 12 Nov 2025 00:00:43 +0000
ROA not before:           Wed 12 Nov 2025 00:00:43 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        199.127.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fe:b0:d0:d6:99:83:4e:aa:93:71:5f:f9:e7:19:19:72:7e:0a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 12 00:00:43 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=9765c3eb792f3404bb77af59a6293a43b0b996c79c42b69a71133dfba1cbf86f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:2c:b7:f6:f3:4f:10:13:51:0b:31:b6:b2:
                    fa:f8:ac:33:bc:74:90:49:c2:6a:b1:de:90:b6:f4:
                    b8:db:f2:96:aa:5e:dc:58:f6:14:a5:eb:df:cb:b4:
                    17:f1:79:f3:99:27:0d:50:2c:d3:f3:f4:70:fa:f8:
                    f8:78:7c:00:81:e8:67:6f:a1:08:dd:3c:17:90:07:
                    35:69:49:bb:c7:10:32:b4:fe:50:1c:4e:6d:6e:c4:
                    3b:55:b5:aa:61:66:05:70:61:af:a1:97:8c:d4:50:
                    43:76:a5:1c:11:d2:20:76:36:56:7d:93:b2:89:33:
                    79:ab:61:aa:c7:c0:81:ca:1a:25:7e:cf:60:28:2b:
                    e2:d9:27:fd:72:6d:b9:32:8c:f4:25:26:19:2b:87:
                    fd:4a:70:02:c5:6c:3a:fa:63:8c:1a:7b:2c:2a:05:
                    be:67:da:b6:0a:26:80:bc:cf:46:08:03:1d:3c:f8:
                    e7:f2:84:cb:31:39:af:b4:b8:f7:f7:f4:4e:1a:dc:
                    db:ee:5f:cd:b1:c3:af:67:03:d8:c1:58:89:54:52:
                    89:9f:35:0d:d1:5c:f7:92:aa:4d:5f:88:de:fd:d0:
                    ce:17:6f:e8:69:d4:10:9d:58:f1:30:aa:7c:94:9d:
                    26:27:3b:1e:e2:5a:f9:96:81:c8:f6:05:c9:43:14:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:65:21:7A:34:42:2A:82:6F:C2:A7:6C:8A:06:B0:16:FF:33:80:D2
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:e5:c2:85:ed:d5:98:0c:25:64:54:3c:b6:46:9a:8f:35:08:
         b2:f7:77:84:b2:56:b4:69:9b:e3:8b:1c:04:49:28:27:d3:8d:
         c0:46:84:3a:1d:02:1f:9e:42:0c:ac:0b:f3:c2:88:74:60:8d:
         5c:73:dd:19:39:2b:79:ee:aa:ec:e4:33:0d:0e:db:4c:78:ec:
         f2:0b:59:96:f5:15:80:b3:ae:37:af:a0:59:94:0a:d2:9e:d2:
         91:56:db:71:c5:b7:8a:7a:db:7b:15:42:7d:36:9c:c4:17:f4:
         8f:b3:4d:de:a6:64:8a:80:db:39:97:e1:ef:1e:8b:27:ba:4e:
         84:f2:34:9d:a2:ad:f6:49:ef:65:de:7b:1d:86:1d:83:0d:79:
         6b:bb:cc:33:39:d5:92:f8:77:04:d9:a0:a5:2f:46:ae:bb:a8:
         5a:e4:9d:34:01:b2:44:21:10:70:80:10:64:c1:dd:41:5d:bb:
         7f:41:0c:c7:b1:c7:4e:b1:2f:92:48:ff:78:f6:dd:ca:e1:1e:
         c3:fe:fe:e1:82:98:fc:7e:b4:55:2d:f8:fa:d2:72:93:2c:12:
         8f:fb:fa:4e:a6:a7:85:96:a1:dd:17:dc:38:df:bd:4d:43:e3:
         64:36:a9:d3:7e:f9:8d:d1:a3:7d:57:fa:28:65:c0:c3:be:08:
         20:f3:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:31:36 2025 by rpki-client