This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/386aee79-2c73-4022-9389-eead3df8f028.roa
File:                     386aee79-2c73-4022-9389-eead3df8f028.roa (raw, json)
Hash identifier:          iyHZoHSqdiJTql9ZmYSQbr3JFp1RZgN4E8tT8lPhycU=
Subject key identifier:   88:D8:55:F2:EF:36:6E:14:F2:13:E4:08:ED:5D:9B:58:AC:5B:D0:7D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3F032252062A2383EDFC271F75C717D85749B9E2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/386aee79-2c73-4022-9389-eead3df8f028.roa
Signing time:             Fri 05 Dec 2025 02:11:36 +0000
ROA not before:           Fri 05 Dec 2025 02:11:36 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.124.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:03:22:52:06:2a:23:83:ed:fc:27:1f:75:c7:17:d8:57:49:b9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 02:11:36 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=538a72646ca7eda75e97055accf636b175ab644c22631221429372ac3321c342, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:f2:d5:ab:5d:54:7c:3f:b8:42:9d:ad:38:
                    e7:19:49:80:d6:29:09:24:11:51:8c:db:a1:eb:ca:
                    b8:b0:eb:3b:d7:32:17:43:1f:de:8c:d8:96:fc:83:
                    cd:27:6d:a3:f0:89:77:8d:a7:c0:8f:f6:a7:e1:09:
                    df:e0:8f:ea:5d:07:36:cf:a6:1b:4e:19:11:0f:31:
                    2f:78:25:eb:48:bc:79:29:8c:7f:3e:ed:ab:4b:97:
                    0a:83:e7:d7:bf:0a:c6:b9:59:cf:da:cc:4b:5e:53:
                    9e:e8:d2:22:ad:ad:02:81:f9:27:70:56:a0:38:b4:
                    44:57:72:07:13:7a:6e:37:7f:55:7b:6a:45:2c:ac:
                    b3:9c:59:0c:83:e7:d5:e2:d9:64:ef:ac:b5:e8:7c:
                    e6:b5:41:15:16:8d:55:d0:05:31:d9:e7:bb:82:a0:
                    d1:6b:ec:68:86:c3:c7:7c:87:75:0a:b2:cb:40:dd:
                    dd:d7:55:9f:b0:cf:e4:ab:a6:13:44:44:bb:db:71:
                    d9:8b:d3:be:2a:27:f5:0a:c1:35:da:39:c6:79:39:
                    ff:da:d0:92:2f:44:82:b8:1f:f4:2e:11:8b:62:72:
                    ad:5e:fe:17:34:e7:b5:c5:5c:47:86:e2:86:6d:23:
                    f5:cd:ba:08:20:15:bc:49:c9:ae:3e:04:af:34:b8:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D8:55:F2:EF:36:6E:14:F2:13:E4:08:ED:5D:9B:58:AC:5B:D0:7D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/386aee79-2c73-4022-9389-eead3df8f028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:5c:9e:52:9e:74:ae:25:35:ec:f0:bb:29:cc:97:34:91:12:
         ee:10:20:88:e5:6a:63:e9:50:d4:06:59:32:0e:1a:f6:60:67:
         61:da:c8:0e:61:39:b1:b2:40:0f:a9:f4:b7:08:81:a7:dc:c2:
         82:16:4d:22:1d:e9:79:b7:a5:71:e7:dd:1a:42:96:ee:62:f2:
         b4:7c:57:47:29:b9:2c:28:f9:b7:75:7a:86:d7:72:f8:ad:89:
         9e:64:56:de:55:db:d0:1b:9d:1a:bb:05:60:36:7a:dc:53:58:
         50:77:e3:97:94:c7:03:ce:c6:b6:c6:9c:74:57:ad:fa:5b:86:
         5c:f5:17:b3:5d:f6:94:c8:ed:f2:59:18:e8:e0:25:9a:dd:c9:
         2c:53:e8:09:f6:04:28:d1:20:3f:0a:9a:9b:15:dc:64:31:9c:
         d9:4a:a6:9d:19:30:66:bb:ef:2c:ed:de:ac:5a:d0:17:56:fe:
         4c:d0:71:62:58:1a:81:c4:18:ab:7d:17:9f:84:3e:05:b6:d7:
         d3:83:d5:9a:f3:14:74:69:f6:0e:eb:6c:77:cc:0b:9e:f2:48:
         07:60:a2:36:06:58:d4:6a:0c:50:07:26:a0:09:75:88:9d:63:
         eb:b1:c0:22:fb:cf:71:0f:b7:b6:c8:4b:03:9e:7d:bb:fd:cc:
         de:fd:3f:31
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPwMiUgYqI4Pt/CcfdccX2FdJueIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA1MDIxMTM2WhcNMjYwMzA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MzhhNzI2NDZjYTdlZGE3NWU5NzA1NWFjY2Y2MzZiMTc1
YWI2NDRjMjI2MzEyMjE0MjkzNzJhYzMzMjFjMzQyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsAfLVq11UfD+4Qp2tOOcZSYDWKQkkEVGM26Hryriw6zvX
MhdDH96M2Jb8g80nbaPwiXeNp8CP9qfhCd/gj+pdBzbPphtOGREPMS94JetIvHkp
jH8+7atLlwqD59e/Csa5Wc/azEteU57o0iKtrQKB+SdwVqA4tERXcgcTem43f1V7
akUsrLOcWQyD59Xi2WTvrLXofOa1QRUWjVXQBTHZ57uCoNFr7GiGw8d8h3UKsstA
3d3XVZ+wz+SrphNERLvbcdmL074qJ/UKwTXaOcZ5Of/a0JIvRIK4H/QuEYticq1e
/hc057XFXEeG4oZtI/XNugggFbxJya4+BK80uH+xAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiNhV8u82bhTyE+QI7V2bWKxb0H0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzM4NmFlZTc5LTJjNzMtNDAyMi05Mzg5LWVlYWQzZGY4ZjAyOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0fMMwDQYJKoZIhvcNAQELBQADggEBAFZcnlKedK4lNezwuynMlzSREu4Q
IIjlamPpUNQGWTIOGvZgZ2HayA5hObGyQA+p9LcIgafcwoIWTSId6Xm3pXHn3RpC
lu5i8rR8V0cpuSwo+bd1eobXcvitiZ5kVt5V29AbnRq7BWA2etxTWFB345eUxwPO
xrbGnHRXrfpbhlz1F7Nd9pTI7fJZGOjgJZrdySxT6An2BCjRID8KmpsV3GQxnNlK
pp0ZMGa77yzt3qxa0BdW/kzQcWJYGoHEGKt9F5+EPgW219OD1ZrzFHRp9g7rbHfM
C57ySAdgojYGWNRqDFAHJqAJdYidY+uxwCL7z3EPt7bISwOefbv9zN79PzE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:58:53 2025 by rpki-client