This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3143fd2f-755a-4b22-92e1-ca5ac33889d6.roa
File:                     3143fd2f-755a-4b22-92e1-ca5ac33889d6.roa (raw, json)
Hash identifier:          3jC9htEIhmeQqjx1ND+WgqlY921s50igotLQ3ta7aKM=
Subject key identifier:   2A:9E:FC:F3:51:FD:79:47:C0:A7:81:2A:57:A2:F0:F1:A0:62:5E:24
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       24E5ED6C987936588483CD887CC2757DB8443B96
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3143fd2f-755a-4b22-92e1-ca5ac33889d6.roa
Signing time:             Wed 10 Dec 2025 03:40:06 +0000
ROA not before:           Wed 10 Dec 2025 03:40:06 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        136.12.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e5:ed:6c:98:79:36:58:84:83:cd:88:7c:c2:75:7d:b8:44:3b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 03:40:06 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=20455b99891ae7b2f679b227243f7a01025dbcfea3defa7875bf2e509b6e2620, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:e0:5d:c1:43:25:bc:65:e3:ae:c3:7e:e4:
                    06:b7:b8:64:f2:6f:3d:ef:63:6b:be:e5:8b:dc:ec:
                    fb:f5:08:42:47:05:f9:85:5c:6a:f8:b4:fa:67:85:
                    75:40:0e:a9:0a:3a:ac:61:3b:b2:7d:d9:71:8d:9b:
                    4b:15:b4:dd:4c:a6:a2:04:2d:ed:7e:c0:ad:8f:cb:
                    e2:33:ad:27:4d:1d:1d:65:6b:f1:4d:a9:b0:bc:25:
                    dc:79:50:c2:cd:e7:6b:be:c2:68:e0:a9:7d:39:13:
                    1f:e3:10:b9:23:d0:f6:59:51:01:30:77:6a:52:c4:
                    ee:61:30:2d:84:06:b5:48:e4:eb:dd:e5:ee:e0:92:
                    1b:76:66:d1:f5:19:56:cf:9b:51:f0:7a:f4:6b:84:
                    dc:2c:2a:14:3a:98:f9:27:a4:c8:8d:67:71:89:67:
                    58:09:30:13:9b:d4:a4:f5:7c:d0:46:05:f4:75:33:
                    39:0b:f2:2a:1e:bc:29:18:21:c3:50:60:79:e9:54:
                    bc:99:ec:56:75:77:25:4e:e3:71:bd:1e:b3:6d:89:
                    f1:19:08:66:d8:2c:80:bf:bf:2a:f9:ee:3c:a5:41:
                    f4:c4:10:44:ac:3d:42:02:1f:51:c8:bd:72:cc:a2:
                    15:72:14:eb:9d:2f:ee:d5:bd:bf:7f:e7:f9:05:2d:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9E:FC:F3:51:FD:79:47:C0:A7:81:2A:57:A2:F0:F1:A0:62:5E:24
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3143fd2f-755a-4b22-92e1-ca5ac33889d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.12.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:15:39:74:60:64:27:1f:85:9a:44:b8:b9:ea:2b:49:f5:
         56:99:a3:2e:31:71:83:12:8f:56:4f:ef:c8:5a:8f:ee:60:00:
         f4:79:d5:28:a6:e9:5f:34:40:0b:fc:8e:f5:89:78:f0:5f:b1:
         de:2d:a3:6a:f6:33:f0:94:68:0b:4d:38:5e:0a:82:c5:08:d3:
         4e:d3:99:87:14:5e:f3:62:51:e1:8b:aa:9e:35:3c:28:06:ba:
         f9:c0:22:b3:10:04:e8:17:2b:5d:42:99:51:a6:4e:4b:f0:de:
         fd:d4:2e:57:ba:84:bd:21:84:0a:60:17:84:9a:3f:9f:a7:2e:
         d7:0a:0e:9d:84:47:2f:d9:80:f6:73:b2:fd:58:74:37:ae:3b:
         12:b4:72:90:15:04:eb:48:12:15:61:9b:94:69:b5:3a:69:c7:
         37:fb:ac:cc:f7:27:82:b6:09:22:e4:19:b3:d4:52:e9:55:5a:
         f7:3c:c6:8a:1c:c6:35:0c:b2:19:b0:4e:74:0b:d5:61:37:b2:
         0b:2f:60:e8:27:11:4c:7c:15:e4:4d:f1:35:f0:32:6d:27:7e:
         d0:a6:a3:94:21:3b:a8:91:0f:77:2b:c8:60:89:af:34:0a:a5:
         96:ee:d1:e2:14:4e:71:c6:d8:c8:43:32:36:98:8a:2c:18:d8:
         0e:1c:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 13:46:38 2025 by rpki-client