This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cdc16ed2-fa9b-4d7c-a961-4d107b73c403.roa
File:                     cdc16ed2-fa9b-4d7c-a961-4d107b73c403.roa (raw, json)
Hash identifier:          RVqSVIBszsmA6FXJXEbZzheVQpFoIMPR8Nu7GeZEEBY=
Subject key identifier:   DA:A5:F7:F4:CF:4D:5A:B4:8F:66:58:13:59:D3:FE:A7:17:1D:7B:B5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3E1FE4EC79FAC3C743DA7C41F2D79A0C70CBFCEE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cdc16ed2-fa9b-4d7c-a961-4d107b73c403.roa
Signing time:             Tue 02 Dec 2025 00:40:51 +0000
ROA not before:           Tue 02 Dec 2025 00:40:51 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.137.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1f:e4:ec:79:fa:c3:c7:43:da:7c:41:f2:d7:9a:0c:70:cb:fc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec  2 00:40:51 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=b25de34cfbb72eb32f2a2d4824ba00f4da8eebe6c2c4d0197bd9dec7533396cf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:dc:c4:f3:db:36:5d:3d:e2:b9:27:5c:cd:
                    78:85:a5:91:0f:fe:ad:d7:1d:6f:3e:74:15:aa:f2:
                    da:92:ed:0b:64:32:96:1f:53:c0:51:18:5a:37:1b:
                    6c:12:f1:81:35:c2:3a:bd:12:a1:d2:b6:d6:7e:e7:
                    dd:a9:91:04:a9:c6:72:8d:d9:a3:80:a7:ba:4b:82:
                    07:65:07:fc:26:94:3d:35:69:b7:8d:4f:79:c8:de:
                    7d:36:11:ec:3e:2b:94:c7:8a:0d:55:41:a5:54:de:
                    76:85:b3:95:19:d9:b6:1a:fd:16:77:1c:1c:9e:50:
                    27:2a:49:04:c3:82:e6:b7:6f:cf:e7:ad:54:2a:fb:
                    fa:ee:a6:69:83:03:9e:92:73:67:d8:cc:0b:48:ee:
                    4c:2a:28:d7:fe:67:27:83:fa:6c:91:62:41:6a:30:
                    4d:c7:40:5e:90:c9:77:2a:8c:df:e4:fc:fc:b8:d3:
                    82:3f:df:fe:91:0a:a9:a5:ac:a7:dd:68:0b:35:4c:
                    f3:92:86:10:77:e7:9d:e5:de:8c:23:0a:aa:76:44:
                    c8:72:16:83:54:cf:a1:6a:87:0f:b8:0c:db:26:6b:
                    d9:31:6d:37:4c:3b:ad:2e:fe:43:a9:77:d9:99:6d:
                    63:53:96:ed:66:7a:18:c9:b8:13:e8:32:98:26:c5:
                    45:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A5:F7:F4:CF:4D:5A:B4:8F:66:58:13:59:D3:FE:A7:17:1D:7B:B5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cdc16ed2-fa9b-4d7c-a961-4d107b73c403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:16:63:0d:a7:68:6f:16:29:7c:52:22:3e:d7:5b:f2:95:5a:
         af:62:b3:75:cd:ed:ad:8b:fb:37:5d:48:d1:ec:d7:8c:61:85:
         ee:e7:0b:7a:a4:61:05:a3:c0:64:3b:19:5e:c9:60:97:eb:69:
         f9:46:a2:2c:2f:0b:22:01:34:ff:77:6e:97:8b:23:df:9d:15:
         a1:f4:09:cb:ac:e6:c8:95:8f:07:de:ef:3d:79:d6:c0:a6:6d:
         59:d0:c3:de:45:bd:ed:58:76:8a:ca:4b:91:02:bf:e7:d0:ec:
         4e:54:44:c2:25:d3:fe:fe:e6:0e:ee:3c:1b:89:ed:9f:07:fd:
         3d:f7:d0:f3:50:87:c8:5b:72:84:73:9d:ff:bc:ee:bf:75:bf:
         1a:d5:3b:f5:62:af:1d:c6:18:8a:94:0c:2f:77:74:c8:3e:74:
         e9:c8:c7:07:f9:97:ae:69:e6:32:41:b7:29:63:2d:62:68:64:
         04:b2:b9:9f:90:d7:4e:59:d5:4b:19:40:05:cd:a4:c2:47:5c:
         53:df:0b:c3:40:93:d7:34:60:8f:a2:f6:46:70:21:3e:14:f3:
         fb:0b:19:f3:fb:e0:5b:0e:54:cd:2b:47:10:39:8c:1e:23:27:
         4a:e7:44:40:30:a1:98:c5:4b:53:10:c9:21:ff:11:75:ce:66:
         95:3b:05:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:56:56 2025 by rpki-client