This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32737d01-3da4-45f9-8c5f-f283c888ed7b.roa
File:                     32737d01-3da4-45f9-8c5f-f283c888ed7b.roa (raw, json)
Hash identifier:          YFpstVOkQ/BZ77Tr9tF4d7hm0NOMi554TtJxmlYOKNY=
Subject key identifier:   47:11:13:B8:F8:1B:E9:1B:E9:D3:DC:58:1E:C3:1F:28:9C:86:2E:8C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       73E3AF8B59859E1D57F1AE477F8D04BABB7F6A20
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32737d01-3da4-45f9-8c5f-f283c888ed7b.roa
Signing time:             Fri 05 Dec 2025 00:41:46 +0000
ROA not before:           Fri 05 Dec 2025 00:41:46 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.182.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e3:af:8b:59:85:9e:1d:57:f1:ae:47:7f:8d:04:ba:bb:7f:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 00:41:46 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=077fcc73c01d6323098eec79e9d07c9b0e181e5894eaa640f0813c5ff5da0b1a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:84:09:46:bf:87:46:03:a4:b3:0c:8b:25:e2:
                    c9:10:04:72:61:eb:f6:51:50:7f:b0:15:86:59:5a:
                    05:21:53:81:75:66:3e:fd:d5:03:f4:09:da:bd:a9:
                    10:fe:27:2a:3d:91:94:b7:25:02:a8:24:7e:af:e1:
                    e9:6e:10:8b:7d:a9:1d:71:07:7e:4d:53:53:4b:6f:
                    6a:47:46:8f:66:37:ab:06:5b:8e:8a:6c:d1:5f:1e:
                    f9:88:d6:81:c9:86:a5:2f:ab:f7:bc:3a:08:df:49:
                    bf:b8:4a:f2:91:f7:fb:02:7f:bc:f2:ec:b5:1c:3e:
                    d5:3a:cd:da:b5:7f:d7:be:00:ca:36:27:ce:0e:36:
                    26:9f:9d:02:58:83:9e:5a:69:ed:ca:c5:91:e9:42:
                    ee:98:ed:05:92:9f:97:14:10:16:3e:03:85:40:f9:
                    0b:d7:2f:6a:6a:85:35:73:19:3f:a5:cc:26:f5:dc:
                    cf:5f:eb:53:52:44:bc:71:b5:b6:d2:22:2a:d8:f4:
                    7f:ef:3f:84:c7:80:81:67:f3:b2:fe:cd:d2:03:d2:
                    b8:a8:cc:38:58:01:14:36:b4:27:c7:83:38:bf:88:
                    42:d5:e6:52:ac:f0:07:3b:d1:02:59:d3:c1:6a:31:
                    67:e8:cd:d2:e9:3b:2d:33:2d:27:4f:dc:6e:8f:4b:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:11:13:B8:F8:1B:E9:1B:E9:D3:DC:58:1E:C3:1F:28:9C:86:2E:8C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32737d01-3da4-45f9-8c5f-f283c888ed7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.182.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:53:86:b9:a7:d6:2d:be:78:64:03:8a:69:53:b5:55:a7:34:
         95:9b:94:1d:4d:89:93:79:ba:b8:63:69:cc:c2:83:d1:c1:e6:
         51:7a:3e:53:71:f0:8d:0b:86:36:2f:4c:4e:81:1e:2b:a8:2e:
         54:3b:c0:39:2a:bb:80:3b:bb:60:34:5a:24:43:cc:81:ff:c8:
         d8:9d:8e:ea:b8:1a:cc:dd:0e:cd:e7:20:a0:36:ab:e1:b5:ad:
         be:50:fb:80:2a:a7:a6:d0:6b:2d:44:dc:a6:e2:b6:be:5e:f3:
         54:20:b8:a9:d7:67:55:e6:64:ec:4f:cf:b2:4a:fa:d8:36:bb:
         ff:b8:40:cc:5a:74:5c:55:7b:4c:53:82:8c:65:cc:f9:54:ea:
         0b:ec:0c:13:76:3d:50:69:d1:8e:4c:c9:be:e9:49:c9:dd:e8:
         41:f2:6e:95:7a:8c:05:89:81:9f:5a:70:a5:02:4a:bd:3c:74:
         46:1d:6a:3c:90:d3:0c:50:a9:96:5e:c8:a8:3c:0a:ef:ae:e2:
         4f:cb:76:32:53:21:ee:43:55:dc:84:f8:7f:25:bd:3e:5d:73:
         32:5c:2b:a8:8d:5c:67:94:61:09:95:17:12:99:40:68:9a:99:
         2f:71:90:81:66:60:13:8c:1d:da:48:ab:f7:a5:dc:91:e9:e5:
         23:64:bd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:51:39 2025 by rpki-client