This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39b7ca86-8ce7-4d0f-919c-d7d5c8cdba8f.roa
File:                     39b7ca86-8ce7-4d0f-919c-d7d5c8cdba8f.roa (raw, json)
Hash identifier:          b8quTXG93H/Hoh3x5ujYOyyCfn5xn1ovdvXvFX/9kK8=
Subject key identifier:   CA:B1:CD:75:9E:DF:EC:F0:D2:95:EB:49:97:DC:A9:35:C0:3F:6C:12
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       61C3835D65222F02D1CABBD361E7DACAD3F21E4E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39b7ca86-8ce7-4d0f-919c-d7d5c8cdba8f.roa
Signing time:             Thu 13 Nov 2025 01:31:56 +0000
ROA not before:           Thu 13 Nov 2025 01:31:56 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.181.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c3:83:5d:65:22:2f:02:d1:ca:bb:d3:61:e7:da:ca:d3:f2:1e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 13 01:31:56 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=74fa1c5939d0c2e5af3b1b63f298b2ca68323454db07c402d32b2e4b7e70f57a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:91:8f:e3:16:85:f8:e8:ed:4a:10:67:ed:
                    de:83:f7:95:4c:6a:aa:16:3b:89:db:b3:54:65:bd:
                    66:c6:af:33:22:6b:a4:09:b8:54:09:40:96:8e:81:
                    6c:98:cf:f5:df:a2:2f:c1:e2:89:37:38:33:ce:a9:
                    97:69:fd:c8:e1:bf:5a:88:16:33:20:ad:d7:cc:1d:
                    99:c6:63:e1:6d:74:0a:24:60:e2:fb:96:f8:a9:ef:
                    e3:47:d5:4c:a3:60:56:c6:04:39:c7:0e:69:8d:bf:
                    06:82:54:26:09:2d:0e:3a:c9:d8:49:85:c6:a1:aa:
                    a8:6c:a9:28:da:b4:c7:ee:a0:d6:64:0a:12:4a:a4:
                    8f:3d:ff:75:54:0e:41:13:fb:cd:8b:22:f9:40:14:
                    c0:65:e0:f4:11:cd:09:76:86:d7:c3:36:46:3b:e8:
                    e7:5c:65:56:4a:46:eb:5f:92:34:e2:28:d9:f6:7f:
                    03:55:bc:ce:5f:4a:c7:5a:60:c3:0d:28:6e:30:ea:
                    b3:db:10:a8:d5:54:a6:4f:36:db:e3:ae:f3:4e:a6:
                    8a:de:2f:3c:a2:36:50:a8:d9:b0:e9:c5:b1:66:89:
                    87:f4:eb:c4:d7:29:6b:3f:82:ed:42:d5:c0:bf:0c:
                    65:b8:e9:82:13:f9:6f:8c:b8:a6:25:34:ca:8c:79:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B1:CD:75:9E:DF:EC:F0:D2:95:EB:49:97:DC:A9:35:C0:3F:6C:12
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39b7ca86-8ce7-4d0f-919c-d7d5c8cdba8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:23:f4:c0:51:e8:19:0a:01:56:8b:a2:e5:0e:07:ee:20:27:
         26:48:bc:9f:d8:59:a0:29:dc:df:d6:76:3b:91:dd:da:5a:a3:
         bb:8d:05:df:7a:62:99:9e:c8:f1:6d:eb:19:1a:5d:e2:c9:22:
         5f:32:e0:c7:c1:20:c9:82:ff:b5:06:2f:09:80:f3:42:f6:2e:
         43:f1:41:94:37:91:e0:36:55:2f:45:89:5c:ce:9d:01:ed:0c:
         8e:7f:5c:a9:10:56:37:78:57:38:d6:88:34:ee:f3:96:d7:79:
         3d:31:ac:fd:b9:90:b0:42:7e:8d:34:49:05:6c:ba:85:30:00:
         a6:5b:f0:0e:a7:64:4d:4c:d7:f6:15:69:9c:af:90:b2:2d:36:
         33:b9:e8:76:93:e4:5a:8f:6a:a0:71:7f:60:5b:36:5f:ab:b0:
         3f:46:13:57:56:02:be:fc:76:f3:4b:90:a8:b1:55:d6:76:f9:
         d4:fa:ba:bd:70:b8:fa:e8:bb:78:84:70:0f:75:d6:40:70:a6:
         52:c9:a5:06:48:52:60:e9:56:2a:4a:13:ed:0d:31:bd:c4:ea:
         9d:94:65:17:14:78:35:30:19:21:bf:37:8a:18:03:35:33:72:
         31:04:5e:8a:dc:39:9f:68:4f:2f:68:37:af:e5:a4:0f:37:d6:
         0e:16:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:32:55 2025 by rpki-client