This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c31a292-d510-47ae-a3fa-196ce644bcf5.roa
File:                     0c31a292-d510-47ae-a3fa-196ce644bcf5.roa (raw, json)
Hash identifier:          VETzJZwzUFgDsKFg+y7K+r0VqFPVjgGrqjVGwvjPM7E=
Subject key identifier:   58:DB:B7:34:6C:0A:49:C6:9C:AD:F8:1F:FA:2C:EF:D3:45:69:BF:8A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2EEE8687EBB4CDA40F33BF91D346EBB3BA808375
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c31a292-d510-47ae-a3fa-196ce644bcf5.roa
Signing time:             Sat 06 Dec 2025 03:41:39 +0000
ROA not before:           Sat 06 Dec 2025 03:41:39 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.252.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ee:86:87:eb:b4:cd:a4:0f:33:bf:91:d3:46:eb:b3:ba:80:83:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  6 03:41:39 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=5d9601f318096b8df259be1b51b60cb39d663f2bf94b5b8ab7075bb8126406aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b8:ff:23:a7:65:27:24:ba:5d:0e:37:bd:ff:
                    0d:1c:aa:c8:94:b7:8a:2f:6e:1a:69:8e:1b:81:5e:
                    aa:a9:de:a5:cb:56:f6:38:c6:5f:ff:62:45:25:6c:
                    bb:fb:cb:e1:06:21:00:19:82:76:ff:e7:0b:cd:b7:
                    e5:d0:4c:1c:5a:c2:86:ee:61:25:29:f3:a4:99:3d:
                    c1:56:0f:2e:26:54:f1:48:c3:1d:7c:d7:f0:3b:a9:
                    ec:b3:e3:40:8f:2c:9f:3a:ec:ef:5a:af:89:9f:eb:
                    99:15:a4:4a:83:a2:be:e0:f8:23:30:2a:18:d9:94:
                    8d:ea:95:3b:19:ca:1c:8e:8c:48:7f:bb:fe:01:ad:
                    6c:02:26:51:33:c6:89:66:54:4b:7d:14:ff:62:17:
                    00:3f:74:94:40:14:7a:b0:72:75:90:e4:dd:ef:a2:
                    81:cc:ea:d2:16:42:af:c6:82:de:51:32:f4:ad:24:
                    81:89:b5:a9:91:ba:d7:3e:6e:fb:19:57:d7:6f:71:
                    8a:9c:9b:16:77:98:5a:3e:77:39:31:00:4e:03:af:
                    2b:9c:c9:2f:44:12:d5:b3:c6:fb:7a:c0:66:20:a6:
                    99:59:61:a8:81:1e:e8:90:6d:2b:b1:1f:ce:ec:9a:
                    34:92:75:3d:f1:c1:60:77:f4:48:31:50:ba:83:14:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:B7:34:6C:0A:49:C6:9C:AD:F8:1F:FA:2C:EF:D3:45:69:BF:8A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c31a292-d510-47ae-a3fa-196ce644bcf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:75:96:45:4c:2a:92:ad:98:b2:d5:e8:fc:60:cc:44:24:
         02:b6:3b:91:68:25:69:fe:0a:7e:61:0b:15:3c:e2:3d:c6:01:
         0c:f5:c8:0b:56:cc:e5:b2:a6:66:f8:29:f3:89:d7:05:8e:4a:
         e2:ca:e8:17:7e:db:d0:22:1a:a4:7a:bb:0a:9e:56:3a:84:f3:
         54:74:ad:5f:e9:30:76:f2:f8:19:84:f9:76:b2:db:c6:7c:7e:
         aa:31:31:25:6a:c8:71:7a:7e:44:a1:78:7e:e2:d8:b1:c1:5c:
         6c:0c:09:37:02:6d:9c:51:d5:d9:73:32:6e:fe:b5:59:0e:52:
         94:94:a0:a8:07:c8:98:60:d0:54:fd:8a:d9:83:0a:0f:1f:16:
         2a:9b:82:21:74:13:cc:ba:5a:cb:cc:52:db:84:c1:8c:6b:0c:
         aa:74:6f:ff:1b:50:5e:17:ca:f4:8a:49:d6:4d:44:ec:4e:10:
         ec:f6:f2:51:cf:c2:60:f0:17:a4:63:58:39:37:a3:8c:f2:0d:
         7e:ac:75:60:43:04:96:07:d9:13:0a:25:8e:b0:1f:da:df:12:
         38:55:41:f8:35:58:9b:43:ab:4f:36:2a:8e:eb:01:de:d1:5d:
         c5:48:64:ec:58:27:86:04:10:0e:84:53:0e:12:90:f2:8b:a0:
         0c:65:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:56:42 2025 by rpki-client