This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18f0e20b-5115-4966-b204-adac1bf90f80.roa
File:                     18f0e20b-5115-4966-b204-adac1bf90f80.roa (raw, json)
Hash identifier:          CgrSfQhD7zm0SUkrV+T6nvytV8bhzoUb3S5VUoZWiW8=
Subject key identifier:   9B:DD:FE:ED:D9:63:1F:0E:89:7C:1A:92:48:45:79:9F:06:B1:B5:3B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5AFBE71BB3ED50765E7C1ABB423C98814AE237D7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18f0e20b-5115-4966-b204-adac1bf90f80.roa
Signing time:             Fri 05 Dec 2025 02:01:20 +0000
ROA not before:           Fri 05 Dec 2025 02:01:20 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.68.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fb:e7:1b:b3:ed:50:76:5e:7c:1a:bb:42:3c:98:81:4a:e2:37:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 02:01:20 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=8aab63a62d8fffd75964d55456d94635c7bfa50a0da91115b3fb657a76d3b131, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:ef:45:2c:36:55:99:c8:cd:2a:bb:ba:19:
                    24:82:03:64:d9:e4:c6:9d:16:0d:f7:5e:51:d9:14:
                    f6:cc:08:7b:1b:3c:02:45:49:a9:4d:f2:0c:4b:c9:
                    fb:1e:5c:3d:85:db:94:78:d9:ea:18:3f:32:4d:6e:
                    76:6e:c0:4d:49:3b:01:7f:94:fa:60:1d:1a:ce:26:
                    79:d2:f9:c7:bc:63:a7:e4:4e:e1:b5:f3:27:11:3d:
                    56:39:ef:1a:1b:e1:4f:17:3c:2d:33:d9:54:57:6f:
                    dc:88:f2:ef:4a:88:6f:a7:a0:28:98:b6:63:03:cf:
                    c8:eb:bb:b5:1d:7f:69:df:bc:13:d4:fa:d3:cd:a0:
                    ef:c3:77:29:07:c8:e1:d0:df:72:2c:98:2e:7d:6a:
                    fa:4b:06:3a:8c:b7:59:3f:9e:7c:2c:5e:27:2a:0f:
                    f3:c7:e7:e1:55:51:13:10:4c:79:c2:95:fa:c6:cc:
                    64:fd:e6:68:f4:6f:0d:3b:7a:af:df:61:f1:7b:1f:
                    48:19:41:61:98:0a:7c:0c:d8:19:bb:d8:0f:45:d5:
                    b3:9b:fb:fb:92:93:e8:45:ba:d2:df:da:30:74:14:
                    0c:81:e9:e9:84:fe:d6:ea:25:ce:2c:b2:44:d6:09:
                    c4:2a:fc:b0:7f:50:24:ea:1f:5d:b4:81:7c:d6:5e:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DD:FE:ED:D9:63:1F:0E:89:7C:1A:92:48:45:79:9F:06:B1:B5:3B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18f0e20b-5115-4966-b204-adac1bf90f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.68.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a0:81:5b:30:f4:8a:70:84:cf:bd:3d:6f:64:80:f4:83:f1:
         f1:b0:94:40:7a:dc:52:f1:c7:6b:d7:0f:07:4c:32:32:10:f0:
         cc:d6:eb:ca:90:70:f5:32:9e:71:a0:94:f0:1d:7a:1a:9e:43:
         ed:bc:fe:82:b2:a3:7d:33:64:dd:16:ce:b3:df:82:e7:12:14:
         98:a3:a0:68:04:fe:07:f1:cd:e8:74:92:85:2e:d9:06:42:e0:
         dd:0b:04:4f:a0:2c:64:71:36:5e:ac:df:8b:09:eb:5e:2d:bc:
         12:08:6c:e1:1b:60:10:ac:d8:e6:1b:48:5b:23:d2:32:fc:60:
         eb:ab:f1:e8:35:d1:db:9a:df:1d:33:e8:91:42:07:be:8e:bf:
         4e:e4:6c:8c:27:df:61:fc:f6:0b:9d:ec:d2:14:eb:ed:d3:56:
         4d:f3:02:79:00:aa:78:41:fb:72:e0:4b:b4:a0:e6:1d:7a:fe:
         e8:19:b4:a4:b1:30:8f:77:3c:ce:26:7e:8f:e1:64:40:f4:d1:
         a1:c1:1a:5a:0f:4b:c6:3c:b2:bc:e3:1a:de:ca:d4:f3:c8:f0:
         3a:ff:72:0c:43:ca:6c:95:3b:85:2e:35:8e:d7:ef:d8:93:81:
         aa:ef:aa:ca:35:ab:f5:fe:21:30:32:e9:99:c1:3d:51:f7:a4:
         f4:08:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:57:32 2025 by rpki-client