This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ed5fae1-c958-4600-a7cf-149c315b2d49.roa
File:                     0ed5fae1-c958-4600-a7cf-149c315b2d49.roa (raw, json)
Hash identifier:          kgIvbygWk+n0TGNRlNmOytVEnvS+WlwRHWcKFi+Rq1I=
Subject key identifier:   B3:C8:AF:28:FD:49:85:20:77:04:B1:6E:1B:85:A1:4F:BA:02:4F:B5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4086FB80D5503A0FD26580776CB91224BAB1D972
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ed5fae1-c958-4600-a7cf-149c315b2d49.roa
Signing time:             Sat 06 Dec 2025 03:50:08 +0000
ROA not before:           Sat 06 Dec 2025 03:50:08 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.202.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:86:fb:80:d5:50:3a:0f:d2:65:80:77:6c:b9:12:24:ba:b1:d9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  6 03:50:08 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=c5d4dabc50f181e8e107ab545a13c38728207cba3cbae158125a14b45ff3dfc3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:b7:63:41:d1:00:5c:0c:e3:c9:36:21:9a:
                    e7:3b:97:a5:43:92:19:0e:e6:37:8d:e9:34:63:62:
                    44:c8:d3:99:a0:97:a9:4b:90:ba:7e:6e:eb:c8:5f:
                    9f:2d:92:52:8a:5f:d1:dc:a5:78:f9:f7:94:bd:30:
                    6a:5f:3e:72:54:af:f4:c1:10:1c:77:29:3c:b8:99:
                    77:cd:83:77:14:a6:ea:31:ca:50:6e:8c:a3:69:24:
                    1d:7f:a6:c2:31:85:90:88:15:a9:e1:9c:04:2c:e6:
                    1d:e2:90:5f:cc:30:34:09:25:14:80:96:f4:a4:db:
                    c5:b5:d5:cd:6f:25:ec:ef:cf:eb:0d:e8:0c:8b:a7:
                    19:43:a5:17:51:bf:c0:8a:f0:46:aa:f9:57:2e:66:
                    c3:b7:72:b2:97:d9:e0:df:5a:bd:56:78:23:fe:d1:
                    b6:99:23:d3:d7:de:45:24:8b:b3:01:30:cd:c4:cd:
                    fd:6a:d5:f3:d1:97:27:90:5c:05:de:6f:c9:65:80:
                    34:d1:6e:2e:44:e6:a8:7b:5b:3e:cf:70:3e:fb:f2:
                    9e:97:df:c3:c4:2b:f7:89:68:02:c8:5a:11:48:88:
                    78:ce:42:2e:f2:3f:af:bb:72:48:a9:ec:c5:24:61:
                    cb:04:2b:e1:86:35:64:24:a1:0c:4f:8f:48:ae:93:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C8:AF:28:FD:49:85:20:77:04:B1:6E:1B:85:A1:4F:BA:02:4F:B5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ed5fae1-c958-4600-a7cf-149c315b2d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.202.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1e:e5:17:92:67:24:c4:0d:f5:a1:60:8b:99:71:54:01:8c:49:
         63:6d:06:22:ee:40:b3:a4:c0:a6:46:ac:18:0e:76:41:ca:62:
         50:d0:bb:8a:41:58:ab:e8:b6:23:c9:6c:37:86:8a:57:29:37:
         32:c0:2f:e7:a0:e7:c4:fc:cd:6b:01:f9:44:d8:c1:41:fd:ef:
         b9:61:47:68:70:9e:ba:0d:d6:c3:08:f4:6e:cb:7b:a2:5c:59:
         15:9b:1d:e0:96:f5:16:ef:1d:08:d3:6e:f2:d8:5b:36:0d:37:
         f2:fb:5d:96:58:c0:4e:d1:84:ae:20:28:95:48:32:50:92:ba:
         a2:2f:41:d8:44:76:0b:97:e6:57:03:09:a4:a6:9a:ee:ce:a5:
         c2:21:83:30:f5:56:58:4a:d3:25:4c:7d:3b:80:5e:08:e8:96:
         2d:b8:52:a3:88:56:c4:aa:5b:b9:fd:60:cc:3f:1a:08:cf:80:
         a2:db:78:4a:81:cf:98:c1:2c:b3:78:da:34:40:be:63:b9:65:
         a5:74:ac:97:33:8d:40:a4:59:7f:52:3a:0c:06:da:df:f3:da:
         50:06:86:1f:ed:69:96:28:9a:ff:5c:89:78:99:97:90:ed:29:
         f5:7b:d9:b2:ef:ca:57:17:cd:39:97:4e:54:64:b0:38:9f:63:
         d3:63:b3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:57:03 2025 by rpki-client