This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17c744ba-b05f-4401-8397-70e49411c5f6.roa
File:                     17c744ba-b05f-4401-8397-70e49411c5f6.roa (raw, json)
Hash identifier:          5pX5siemxcyg8uWxIqq3p/EfVwVCLSjcaQ/4g7Gmng0=
Subject key identifier:   3A:12:78:9E:B3:9E:86:59:BE:95:7F:91:0A:1E:55:63:C5:66:80:E6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7690B528C6584FAA9FDE71E4BC857CB7C5B67512
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17c744ba-b05f-4401-8397-70e49411c5f6.roa
Signing time:             Sat 29 Nov 2025 01:41:50 +0000
ROA not before:           Sat 29 Nov 2025 01:41:50 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        15.181.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:90:b5:28:c6:58:4f:aa:9f:de:71:e4:bc:85:7c:b7:c5:b6:75:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 01:41:50 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=8ce524969f16f9d8cfe4b580a0a75d68e6d8db7678a665a3eff0ca13340baf3f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:05:90:4b:cf:8c:35:30:9e:b0:95:c0:3b:
                    7a:f6:f1:b1:54:a6:2c:de:3d:4b:fb:a6:96:c2:c6:
                    29:bc:77:f7:8d:ff:47:35:26:fc:96:18:14:52:cf:
                    0e:85:ac:25:b5:ad:bf:d0:2e:e0:f3:6d:44:11:2c:
                    86:15:d6:2a:7d:81:af:97:46:18:9a:cf:fd:b8:0d:
                    95:ff:c8:03:17:4d:9b:ff:16:dd:d2:5b:f0:78:dc:
                    78:58:84:9f:8c:62:fa:6b:4b:36:b6:57:66:66:33:
                    1f:f8:45:6f:57:97:35:eb:57:88:64:ee:de:24:bd:
                    c8:46:b8:47:30:e8:38:f9:0c:92:79:22:11:b6:5f:
                    b3:8e:53:3f:a7:0d:c3:e9:e4:31:c5:67:9f:13:8c:
                    c4:06:0e:f6:fe:52:7a:6a:e8:c1:79:7a:b6:a4:cb:
                    f1:63:a1:de:9a:4d:2d:8d:5f:10:30:de:2a:7a:23:
                    fa:77:2a:c6:90:fc:ab:8a:10:e0:70:18:ec:36:e0:
                    5e:19:a3:f3:5b:84:f5:70:75:d1:94:5d:0e:8c:03:
                    c7:ec:3e:8a:b9:6b:b7:19:73:a7:70:4d:11:23:7c:
                    d2:d3:a9:f0:8b:af:c7:97:8e:38:2c:36:26:6f:c5:
                    5d:7d:f6:1d:3e:90:9d:e0:82:b4:7c:71:c8:50:b4:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:12:78:9E:B3:9E:86:59:BE:95:7F:91:0A:1E:55:63:C5:66:80:E6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17c744ba-b05f-4401-8397-70e49411c5f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:1d:c4:3c:55:f9:a9:2f:dc:24:e8:a9:9a:ed:04:1a:94:c2:
         9c:a1:d7:57:c8:7b:ac:6f:c7:2c:d9:73:1a:c5:28:e8:9e:39:
         89:30:c1:56:68:77:1a:8f:ff:e7:c2:82:2c:f1:fe:5c:08:2e:
         65:d3:23:01:16:6d:29:46:79:b1:3c:50:9d:df:ee:f7:17:e3:
         b1:2a:86:06:7c:9b:cc:04:83:86:18:b2:4a:e3:b0:2b:8e:16:
         44:e3:cb:35:d6:93:bf:9e:bc:7e:1e:d4:5e:5c:ab:bd:af:1e:
         bb:db:e9:13:58:6f:d2:74:e4:97:e3:94:dc:56:9b:c6:8c:34:
         e2:0a:e5:76:45:52:f1:e1:b4:00:e2:61:81:44:ea:c1:fc:b9:
         0b:88:a6:58:b4:bc:e1:5d:53:be:92:6a:ec:0c:b0:fb:01:44:
         ff:dc:e9:c2:69:8d:67:80:ee:c4:e3:ba:6a:c1:25:b3:cc:97:
         ca:5f:68:46:c9:ff:5a:a9:91:e1:2f:9a:83:17:ac:a9:51:79:
         8d:20:b0:5e:d3:2b:e0:84:58:c8:e5:f5:60:ad:c6:71:38:bd:
         27:a4:6b:c4:0c:4b:b4:2f:87:66:22:cb:e3:cb:83:eb:e8:d3:
         04:56:70:a6:ef:f8:ba:11:24:3d:45:80:4c:c6:b5:1e:ce:aa:
         2e:1b:6c:36
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdpC1KMZYT6qf3nHkvIV8t8W2dRIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTI5MDE0MTUwWhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4Y2U1MjQ5NjlmMTZmOWQ4Y2ZlNGI1ODBhMGE3NWQ2OGU2
ZDhkYjc2NzhhNjY1YTNlZmYwY2ExMzM0MGJhZjNmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOwwWQS8+MNTCesJXAO3r28bFUpizePUv7ppbCxim8d/eN
/0c1JvyWGBRSzw6FrCW1rb/QLuDzbUQRLIYV1ip9ga+XRhiaz/24DZX/yAMXTZv/
Ft3SW/B43HhYhJ+MYvprSza2V2ZmMx/4RW9XlzXrV4hk7t4kvchGuEcw6Dj5DJJ5
IhG2X7OOUz+nDcPp5DHFZ58TjMQGDvb+Unpq6MF5eraky/Fjod6aTS2NXxAw3ip6
I/p3KsaQ/KuKEOBwGOw24F4Zo/NbhPVwddGUXQ6MA8fsPoq5a7cZc6dwTREjfNLT
qfCLr8eXjjgsNiZvxV199h0+kJ3ggrR8cchQtJfJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOhJ4nrOehlm+lX+RCh5VY8VmgOYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzE3Yzc0NGJhLWIwNWYtNDQwMS04Mzk3LTcwZTQ5NDExYzVmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPtfEwDQYJKoZIhvcNAQELBQADggEBADodxDxV+akv3CToqZrtBBqUwpyh
11fIe6xvxyzZcxrFKOieOYkwwVZodxqP/+fCgizx/lwILmXTIwEWbSlGebE8UJ3f
7vcX47EqhgZ8m8wEg4YYskrjsCuOFkTjyzXWk7+evH4e1F5cq72vHrvb6RNYb9J0
5JfjlNxWm8aMNOIK5XZFUvHhtADiYYFE6sH8uQuIpli0vOFdU76SauwMsPsBRP/c
6cJpjWeA7sTjumrBJbPMl8pfaEbJ/1qpkeEvmoMXrKlReY0gsF7TK+CEWMjl9WCt
xnE4vSeka8QMS7Qvh2Yiy+PLg+vo0wRWcKbv+LoRJD1FgEzGtR7Oqi4bbDY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:47:03 2025 by rpki-client