This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa
File:                     273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa (raw, json)
Hash identifier:          t66afwHfm12pmGsrnL0VidYS/Y19BR8XjEAbQyzDP1E=
Subject key identifier:   CF:0A:08:D5:34:1A:90:C1:A9:ED:F1:BA:DA:1C:97:B7:B5:F5:6B:19
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3509253BE42E4D1261E61692AD569AF76FB20F9B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa
Signing time:             Wed 10 Dec 2025 04:20:09 +0000
ROA not before:           Wed 10 Dec 2025 04:20:09 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.94.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:09:25:3b:e4:2e:4d:12:61:e6:16:92:ad:56:9a:f7:6f:b2:0f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 04:20:09 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=8aed23344bf5febe514aa86aeb820a1641fdc7257682bc1bc2496cd1854a2a0a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:54:58:72:1f:4c:48:67:ec:52:15:ee:b7:
                    28:e6:60:da:28:0b:d2:e7:14:56:9d:9b:92:7f:79:
                    42:c4:d3:b6:e2:3e:03:69:a8:04:6d:13:52:66:eb:
                    07:1f:e0:b4:fc:71:61:ab:db:f7:b0:cd:30:cd:b5:
                    27:e3:ce:3c:6d:68:06:00:5e:6c:73:8b:bb:e3:90:
                    8f:00:1a:17:5a:ae:34:1e:f9:73:6e:20:18:96:7f:
                    f5:b0:ea:49:73:a0:6a:65:3a:b9:71:44:3a:96:42:
                    49:44:23:41:13:e1:63:8f:7f:1f:42:7e:e4:bb:4d:
                    0b:b7:5f:a3:c8:21:cb:b1:88:66:ce:51:15:2e:36:
                    9a:40:04:0d:7d:e2:93:d3:3f:ab:8e:4a:3c:71:3e:
                    30:e4:61:10:7f:ee:12:33:ce:54:3c:06:62:af:b2:
                    6b:bb:a9:08:01:d2:af:18:e6:02:ff:8a:76:fb:d5:
                    e6:a5:4d:9d:11:ab:84:a4:ff:99:0f:a3:84:f6:5a:
                    f7:80:ad:0c:a3:8e:38:df:dc:7b:e0:b6:32:6d:65:
                    ef:b5:94:8f:3f:ee:22:a0:d2:c3:ef:5f:61:d8:f6:
                    8e:87:4d:c8:6a:07:97:61:61:4b:8f:e5:59:9a:07:
                    fa:0b:b4:49:c2:2b:d2:6a:ba:75:ae:58:1c:d9:82:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0A:08:D5:34:1A:90:C1:A9:ED:F1:BA:DA:1C:97:B7:B5:F5:6B:19
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:70:c7:ac:45:83:c0:54:26:c5:c7:4c:05:89:d6:06:92:68:
         9f:a1:37:d8:0a:d7:00:d6:f6:8e:1c:ee:93:67:4c:95:bf:4b:
         b0:60:e2:79:35:ba:c5:4e:4f:3d:59:15:77:ad:1a:56:a0:aa:
         7b:4b:e4:7f:e3:02:f3:24:d6:24:9d:cc:1e:ba:fc:e6:1c:71:
         f9:c6:68:a5:60:20:87:af:98:cb:2f:46:3c:53:0e:a1:89:67:
         08:98:24:c6:33:f1:95:3c:ee:30:ad:ca:65:b3:65:31:9d:56:
         e7:70:2a:b6:3a:cd:f8:fe:b9:75:f4:74:ff:c7:55:fb:0f:8e:
         37:38:be:1b:2f:7a:03:cc:8f:11:4d:d9:fa:ee:d7:5f:3a:49:
         4a:da:a2:45:b5:d1:e2:71:cb:2d:46:68:3d:aa:2e:29:c5:9b:
         61:5f:41:04:7f:b2:a8:f4:71:86:28:1e:24:b7:2a:96:f7:af:
         36:0c:67:9a:82:bd:50:31:91:86:ac:5c:77:b2:43:da:10:d9:
         83:d6:61:eb:f3:2b:31:9d:39:60:91:93:5c:50:c9:21:5c:6b:
         88:15:f6:e3:f4:de:69:d1:70:26:f3:3b:ef:24:9c:18:70:8b:
         46:9b:28:d3:2e:5b:94:07:8f:b9:76:75:a7:39:c8:1b:f8:11:
         f6:5b:10:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:32:05 2025 by rpki-client