This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10120afb-90ae-4e16-9879-957f0af8002a.roa
File:                     10120afb-90ae-4e16-9879-957f0af8002a.roa (raw, json)
Hash identifier:          uoI+5fF8WfPrZDtgXVvwGWVGNVGDsx1MNW3hqJuz6bM=
Subject key identifier:   BB:C8:82:5C:D4:34:B4:EF:C6:51:89:01:16:CB:90:B2:62:92:AA:74
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2DD71CAAA1CF8A5D42E95B681A111CF998307E1F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10120afb-90ae-4e16-9879-957f0af8002a.roa
Signing time:             Tue 25 Nov 2025 19:00:09 +0000
ROA not before:           Tue 25 Nov 2025 19:00:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        3.2.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d7:1c:aa:a1:cf:8a:5d:42:e9:5b:68:1a:11:1c:f9:98:30:7e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 25 19:00:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=1ced5a15508530da473037c9e86432f88fe7718c1efccc8bce41328d10bb4b25, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:95:8b:da:6c:66:08:d7:57:33:30:e4:72:95:
                    49:d4:45:9c:78:38:72:86:69:67:0d:9a:b2:ca:0b:
                    ea:33:0d:b6:6c:a7:66:a3:2a:3b:34:bc:98:1b:87:
                    f9:a1:9b:8b:dd:99:4d:fe:a0:78:09:f4:64:6f:62:
                    3c:1f:1e:f5:ea:f1:df:26:e5:2a:1a:6b:8e:d2:0d:
                    48:52:56:2a:75:24:c3:97:05:9e:26:27:49:9f:3f:
                    0e:fb:4d:ce:f9:be:10:df:a1:ce:c4:5b:1f:79:f0:
                    98:9a:72:7c:f5:18:92:92:c4:b0:f2:bc:41:35:5a:
                    aa:7f:f6:44:5a:9a:8c:bb:0c:92:54:06:40:ee:04:
                    e7:62:53:1d:08:37:c8:32:fd:44:5a:b3:5f:38:95:
                    12:7e:56:9b:bd:cd:70:e6:b1:b8:64:d7:a9:a0:82:
                    92:6b:8c:14:d5:76:be:5d:f6:b2:04:d2:6a:b5:61:
                    e8:52:45:39:b5:1f:cd:69:0c:10:22:2b:59:d4:a1:
                    1d:0b:5f:65:dc:d3:62:75:1b:c3:24:b1:28:cf:85:
                    30:eb:fc:0a:5d:a6:84:7e:9b:73:74:04:b3:b5:6d:
                    9b:34:bf:2f:79:db:e3:cc:5c:b7:38:13:65:68:f7:
                    0a:d7:0c:a4:2c:a0:a0:e1:53:f9:a3:81:a7:67:b0:
                    a8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C8:82:5C:D4:34:B4:EF:C6:51:89:01:16:CB:90:B2:62:92:AA:74
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10120afb-90ae-4e16-9879-957f0af8002a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.2.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:1e:7c:4e:d6:e6:87:1a:a0:a3:c8:e0:1f:dd:64:e3:8c:01:
         8e:16:0b:26:0a:49:da:db:9b:b3:06:43:ff:ef:24:3b:82:6c:
         0c:e2:a2:f6:88:78:be:cb:48:47:41:78:0c:21:a3:9d:6a:a8:
         b2:e0:52:b5:49:e1:de:6a:ee:93:ca:fd:b3:02:3f:78:d4:ea:
         74:91:c2:68:72:ac:e4:1a:4a:66:6f:0e:40:76:52:cd:61:0e:
         60:84:d5:ce:56:fc:81:4a:44:f8:59:77:05:47:97:bd:b8:c0:
         4e:98:da:66:4a:a0:ba:f3:a4:19:3a:04:21:4d:1c:a2:88:30:
         9a:f4:57:2a:67:87:80:ba:12:d2:30:26:f5:6f:2b:96:97:18:
         40:ae:06:22:9e:6a:cc:d6:9e:7f:47:af:d0:c8:0b:35:ca:7a:
         d7:d4:11:0e:bb:97:b7:88:c4:f0:61:c8:4d:1d:3b:7d:83:be:
         8a:ed:3e:f2:50:21:3e:2a:c0:53:02:a7:4c:44:1c:3f:58:b5:
         6c:d6:c4:25:ed:75:6e:24:e9:39:dc:21:a7:bc:de:75:fd:39:
         1d:8e:b9:7f:a6:a3:e7:38:6c:05:10:b7:2f:10:f2:18:96:d5:
         2c:5f:03:69:c9:ab:70:77:7c:00:de:3e:53:0a:8d:c5:ba:14:
         f0:c0:54:b1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULdccqqHPil1C6VtoGhEc+Zgwfh8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTI1MTkwMDA5WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxY2VkNWExNTUwODUzMGRhNDczMDM3YzllODY0MzJmODhm
ZTc3MThjMWVmY2NjOGJjZTQxMzI4ZDEwYmI0YjI1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdlYvabGYI11czMORylUnURZx4OHKGaWcNmrLKC+ozDbZs
p2ajKjs0vJgbh/mhm4vdmU3+oHgJ9GRvYjwfHvXq8d8m5Soaa47SDUhSVip1JMOX
BZ4mJ0mfPw77Tc75vhDfoc7EWx958Jiacnz1GJKSxLDyvEE1Wqp/9kRamoy7DJJU
BkDuBOdiUx0IN8gy/URas184lRJ+Vpu9zXDmsbhk16mggpJrjBTVdr5d9rIE0mq1
YehSRTm1H81pDBAiK1nUoR0LX2Xc02J1G8MksSjPhTDr/ApdpoR+m3N0BLO1bZs0
vy952+PMXLc4E2Vo9wrXDKQsoKDhU/mjgadnsKiPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUu8iCXNQ0tO/GUYkBFsuQsmKSqnQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzEwMTIwYWZiLTkwYWUtNGUxNi05ODc5LTk1N2YwYWY4MDAyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAADAkgwDQYJKoZIhvcNAQELBQADggEBABQefE7W5ocaoKPI4B/dZOOMAY4W
CyYKSdrbm7MGQ//vJDuCbAziovaIeL7LSEdBeAwho51qqLLgUrVJ4d5q7pPK/bMC
P3jU6nSRwmhyrOQaSmZvDkB2Us1hDmCE1c5W/IFKRPhZdwVHl724wE6Y2mZKoLrz
pBk6BCFNHKKIMJr0Vypnh4C6EtIwJvVvK5aXGECuBiKeaszWnn9Hr9DICzXKetfU
EQ67l7eIxPBhyE0dO32DvortPvJQIT4qwFMCp0xEHD9YtWzWxCXtdW4k6TncIae8
3nX9OR2OuX+mo+c4bAUQty8Q8hiW1SxfA2nJq3B3fADePlMKjcW6FPDAVLE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:55:19 2025 by rpki-client