This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6375acba-ce32-4a43-844d-24cc6ed0650c.roa
File:                     6375acba-ce32-4a43-844d-24cc6ed0650c.roa (raw, json)
Hash identifier:          0JAwZ9P9utADvhO93dxwQyoIk/O7cNBZh8/FMyfLgF0=
Subject key identifier:   08:F0:7D:5D:99:3F:99:BB:72:A7:24:F6:4B:41:D8:EC:09:96:83:07
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       44E3DFFC7E0D69A398B17FF579EB124D1B5F3BEC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6375acba-ce32-4a43-844d-24cc6ed0650c.roa
Signing time:             Fri 05 Dec 2025 00:10:33 +0000
ROA not before:           Fri 05 Dec 2025 00:10:33 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e3:df:fc:7e:0d:69:a3:98:b1:7f:f5:79:eb:12:4d:1b:5f:3b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 00:10:33 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=121adf40a9eb045a057cbd14997bfe1d5d8cf2002f31255521daaed7bd9a7717, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:37:c9:a9:58:d4:b4:c2:a8:ca:e3:56:0b:
                    c9:e7:c2:cd:4b:2d:69:d0:1c:b4:1b:9b:6c:e9:09:
                    7e:66:88:33:9c:cf:0f:3c:32:91:87:66:00:1a:00:
                    38:d9:f6:6f:b3:b0:ca:91:45:45:4c:d2:63:25:f3:
                    f6:16:54:a8:ac:0c:6e:68:f5:19:76:c0:03:0c:0e:
                    de:09:ac:cb:4a:08:77:35:fb:5b:6a:4a:98:07:02:
                    48:e8:d1:0d:34:3c:4d:86:72:26:cf:66:50:e9:ee:
                    27:7e:cf:65:ee:a2:37:18:f8:5c:59:6c:36:1c:4a:
                    34:77:35:a7:f0:3b:3c:38:f5:01:25:05:7d:01:49:
                    9e:8f:08:b5:03:8b:6e:81:7b:0a:1b:f7:76:23:9d:
                    e9:be:01:01:41:1c:71:51:99:29:0d:cb:d1:e7:91:
                    eb:a1:e3:74:d2:f9:29:fa:af:db:28:98:11:7d:7d:
                    2e:6a:82:de:08:76:da:20:9b:3a:c6:ee:78:31:72:
                    67:c1:ce:0a:aa:05:00:b3:6a:7c:b6:fc:99:9b:3d:
                    a7:4f:c5:ff:9b:f4:8e:c7:3f:b0:80:38:32:ee:67:
                    8d:b8:d1:72:fb:6a:7c:d1:fc:7e:51:71:b8:fa:3d:
                    58:08:2b:a2:70:52:01:06:75:bc:96:cd:35:8a:6d:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F0:7D:5D:99:3F:99:BB:72:A7:24:F6:4B:41:D8:EC:09:96:83:07
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6375acba-ce32-4a43-844d-24cc6ed0650c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b7:d9:c1:6a:3e:da:7c:f4:62:ff:ae:8d:03:e9:df:3a:18:
         7d:53:88:40:31:9e:68:07:17:cf:64:e7:ee:4a:a9:84:61:97:
         22:58:c2:f2:5a:48:50:b4:5e:24:3f:c1:bb:b8:fb:34:3c:38:
         08:cf:fc:b8:7d:10:e3:e0:0e:fa:bf:fb:9f:ad:0f:05:08:1b:
         e8:cc:7b:52:9b:6a:0a:09:e0:b2:52:39:0d:4f:33:76:f3:94:
         89:d0:25:fa:5d:54:ce:0b:d5:2c:de:95:2a:f4:76:2c:a2:f5:
         fd:f4:74:ed:62:bb:bf:9b:8d:a1:c4:b5:bf:0e:ab:6b:1f:e3:
         be:cc:05:ce:30:dd:39:99:58:80:a0:9d:5f:4b:09:f6:05:e1:
         6a:2a:4c:5c:c0:fe:97:9f:67:4d:93:31:da:37:2d:f4:f3:c9:
         20:07:87:80:c3:70:51:95:f7:19:b2:ee:63:ba:64:30:8e:84:
         c6:4a:03:cd:ee:36:6c:3b:55:8c:5b:d5:91:91:34:f5:ae:3b:
         42:16:76:0f:ac:db:7a:52:4b:07:db:51:27:f4:da:ff:6a:72:
         53:0c:c6:5f:5a:77:6d:66:11:dc:7c:54:5b:e3:02:4d:5e:ab:
         74:e6:4d:05:af:dd:91:c8:23:a9:cc:fd:a0:b0:5c:2f:3c:de:
         e6:07:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:16:23 2025 by rpki-client