This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31804710-9636-4e1a-9d4e-2d51d2842403.roa
File:                     31804710-9636-4e1a-9d4e-2d51d2842403.roa (raw, json)
Hash identifier:          FD6VNauuFysMKF6jWCJdiPtme8bpbKTR8aB0mOi83Js=
Subject key identifier:   F4:3F:D3:83:E2:93:75:F1:A7:44:BF:DF:D2:7D:BD:C8:6B:5B:C0:D4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0C6975C0AF8B30CA265F9750E69DF954DBFA2097
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31804710-9636-4e1a-9d4e-2d51d2842403.roa
Signing time:             Fri 05 Dec 2025 01:01:10 +0000
ROA not before:           Fri 05 Dec 2025 01:01:10 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:69:75:c0:af:8b:30:ca:26:5f:97:50:e6:9d:f9:54:db:fa:20:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 01:01:10 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=2b8ce189aad42046f57b0cd34f1083fb3ffc02178396df2e5422849be7ca47da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1d:4d:50:78:40:3f:5e:3b:7d:e2:cf:b7:62:
                    b8:2f:9d:a0:2d:d5:7e:de:a5:18:f5:16:64:e6:49:
                    fb:0a:0b:82:ad:92:a4:21:52:7c:2e:d2:15:ad:9a:
                    06:77:2e:64:37:bf:8e:97:dd:cd:aa:89:20:a1:b2:
                    7b:50:06:83:ed:72:47:14:ad:0f:91:f8:02:b1:d8:
                    22:e4:65:14:02:2c:b2:e0:ba:9d:d8:67:50:fa:0e:
                    13:64:2f:c6:f2:09:99:63:cb:76:c2:73:f6:0b:10:
                    45:c8:e0:95:05:5d:8d:f9:cd:58:be:1e:a3:9f:b9:
                    20:9f:7b:ec:9b:73:fb:36:6e:6a:34:f8:3b:f9:8c:
                    a3:59:80:61:b3:f1:f7:2a:88:27:46:03:54:0c:7b:
                    24:2b:2f:36:89:82:38:5c:e4:90:6b:d1:cb:99:ca:
                    64:7c:be:b2:21:b6:18:a9:56:d0:03:3f:a1:64:96:
                    48:d6:f7:55:64:51:85:98:27:6b:fa:16:13:af:37:
                    01:fc:da:3a:b7:43:dd:a0:42:4f:c9:8d:f4:2e:12:
                    a6:6c:31:71:54:c3:74:16:ff:4d:a4:1c:b3:99:8d:
                    3b:b8:8b:e9:b6:f1:b5:1f:aa:e4:c2:39:a6:27:42:
                    0b:78:39:33:e3:7d:7a:bb:54:4e:6c:b3:5b:00:b7:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3F:D3:83:E2:93:75:F1:A7:44:BF:DF:D2:7D:BD:C8:6B:5B:C0:D4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31804710-9636-4e1a-9d4e-2d51d2842403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:0c:1c:e6:f1:dc:6a:28:55:01:53:71:3c:bb:09:91:c1:4f:
         eb:99:99:5f:c2:da:fd:db:bf:af:e7:29:19:9b:78:9f:77:27:
         ff:4a:ac:12:ef:b4:a0:dc:ed:97:ac:b6:84:58:0a:54:c3:f7:
         81:0d:b0:bf:ea:9a:81:b8:18:98:0f:7c:9e:7c:b6:e2:57:51:
         da:d9:4c:bd:96:b7:62:d3:64:82:a6:49:5e:23:80:28:37:39:
         74:c3:67:c8:9a:04:69:37:60:e1:a4:20:70:a6:70:b9:0f:c7:
         6b:20:d2:02:6c:8d:a9:16:49:63:3b:69:b4:e9:f7:67:b0:df:
         22:19:9c:a4:e0:85:c6:5a:ac:3c:25:94:07:a2:34:3b:9c:9d:
         4b:e3:7c:20:d2:fe:f6:c7:e5:f5:bb:1d:af:04:31:df:f0:2d:
         fb:42:ab:8e:c2:a3:3f:53:e3:96:11:ae:e5:33:b4:4b:a0:94:
         27:09:3c:49:c1:91:ab:42:7d:3b:b1:bf:28:d9:7c:1d:8d:ca:
         6f:3e:7f:b7:52:1e:5c:c3:c0:a4:f3:90:16:4d:6b:42:2b:c6:
         b4:91:e2:46:ee:80:c7:52:f4:92:df:dc:5f:1d:43:d4:5c:72:
         20:1f:dc:79:18:b3:fe:6e:ed:1b:2a:b7:ea:d5:53:c7:2c:29:
         c5:92:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:56:42 2025 by rpki-client