This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa
File:                     f558359a-2a02-4c8e-9a72-7159b2569d66.roa (raw, json)
Hash identifier:          wDghclmWwBELGxEhrUejB0Fo+7+eFQtqAsX3ktfkvZ0=
Subject key identifier:   11:32:A2:6F:98:0E:92:18:12:DB:11:3C:25:FB:E9:22:74:63:05:59
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       7F2A72C8ED65FF617D083A7B64B1AD0405E4C76B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa
Signing time:             Sat 06 Dec 2025 00:10:16 +0000
ROA not before:           Sat 06 Dec 2025 00:10:16 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        23.249.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2a:72:c8:ed:65:ff:61:7d:08:3a:7b:64:b1:ad:04:05:e4:c7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Dec  6 00:10:16 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=5dbc0bcdd08033233882ff93f3bba5f132269aaa66114e20baba81da2a1f1c00, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:99:35:c4:f3:f4:63:1a:44:40:6e:b8:f4:
                    e7:b9:d6:09:a2:eb:ea:cc:26:f7:17:1a:c6:17:55:
                    c2:d1:60:f8:69:b5:ef:19:1f:be:ed:dd:d4:8c:51:
                    f3:06:1a:31:d0:48:e9:49:e8:f0:d8:dd:b6:5e:f2:
                    98:17:8c:2c:cf:82:e5:d2:41:43:10:77:c2:3e:87:
                    5a:79:40:35:ab:17:99:ff:3a:fa:b3:b5:e8:f2:d3:
                    b1:1b:1a:a7:05:2f:7c:51:e3:64:6a:cd:0f:b5:1c:
                    f0:75:68:ae:06:b9:d9:68:6b:1e:0f:fb:a1:f0:43:
                    22:e7:35:43:c8:11:4b:ad:e1:3d:0c:69:e7:db:9e:
                    28:c2:e9:59:96:bc:53:1f:04:d8:e5:33:d6:09:e9:
                    20:7c:1b:2c:00:2a:d9:68:fb:ba:e7:bc:4d:0f:be:
                    d2:b3:51:c4:78:78:26:aa:b8:08:c4:8a:1b:28:12:
                    66:71:7f:6e:d8:7e:73:c8:b7:ce:ed:10:b3:91:94:
                    80:13:9e:c8:b9:70:5f:91:9c:b0:9f:15:91:98:92:
                    ea:39:94:95:43:13:75:c9:e9:6f:cc:91:e7:04:04:
                    3a:91:1f:32:ad:74:7e:b5:67:00:eb:08:5c:6b:61:
                    ef:62:e2:b3:d3:11:44:29:c6:01:a7:27:34:db:c4:
                    34:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:32:A2:6F:98:0E:92:18:12:DB:11:3C:25:FB:E9:22:74:63:05:59
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:12:58:98:a5:b0:47:51:49:b2:46:8d:40:20:b3:e7:29:eb:
         2c:59:c0:a9:01:2f:87:da:62:82:14:86:81:33:77:0a:ec:b5:
         93:2e:fc:26:96:d4:49:e3:b3:3c:56:95:34:b4:3e:1f:29:d9:
         57:d8:bd:df:bf:20:33:73:70:28:65:3f:3c:8e:71:36:1f:53:
         38:83:48:87:f2:7b:fa:6a:2a:e4:0b:7b:c0:a1:84:71:2d:8e:
         2f:f0:ee:78:f5:7d:3e:8c:a8:a3:1e:f9:16:ef:c2:df:4d:ef:
         11:37:c0:d0:ae:62:16:cb:9e:59:df:d1:37:eb:4f:d5:2b:3e:
         1f:af:e9:2d:66:a4:f3:68:e3:4e:89:0c:c8:5b:ef:33:8a:a5:
         09:2d:90:a1:15:a9:4f:8f:5d:90:4f:fd:83:8a:b6:30:46:fc:
         09:bd:a1:7e:0b:4f:de:24:cc:33:1a:e5:72:75:1c:64:be:81:
         db:91:6f:9f:86:81:3e:3c:6d:f0:6d:4a:fc:6f:97:09:54:0a:
         84:e3:b9:33:50:17:e8:3c:d2:c9:8f:d4:da:e9:c9:cc:6c:20:
         ce:b0:90:7a:d7:8e:51:7b:8a:c5:13:54:a5:0f:47:2c:20:08:
         df:2c:ac:90:1c:44:80:54:9d:0a:b3:4a:5a:cb:4f:19:50:d3:
         41:a8:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:04:49 2025 by rpki-client