This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/659150c4-efee-4728-ad12-9912bff7fec0.roa
File:                     659150c4-efee-4728-ad12-9912bff7fec0.roa (raw, json)
Hash identifier:          Pbzh9owJMBv5UiJHmWHHsI0ThdXIG022bWTnAjI2yWk=
Subject key identifier:   D2:E7:84:6F:17:9F:8D:29:1B:98:95:C5:0C:F0:8C:CB:87:71:CA:DB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E47B40C411DAF329C6F01A19CF447F1B5595041
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/659150c4-efee-4728-ad12-9912bff7fec0.roa
Signing time:             Thu 04 Dec 2025 00:51:18 +0000
ROA not before:           Thu 04 Dec 2025 00:51:18 +0000
ROA not after:            Wed 04 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        144.220.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:47:b4:0c:41:1d:af:32:9c:6f:01:a1:9c:f4:47:f1:b5:59:50:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  4 00:51:18 2025 GMT
            Not After : Mar  4 23:59:59 2026 GMT
        Subject: serialNumber=df90c99052bab8268c9b4eeab41cb9413a5861a6bd8f762c7ddc800ee5c61653, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8a:4d:0f:73:d1:0f:3a:3a:d8:d8:f2:28:6d:
                    a8:6d:7e:88:df:37:77:2b:be:dd:76:43:ec:08:29:
                    f7:43:d7:a5:24:61:b1:51:b1:11:f7:d9:2b:9d:68:
                    16:c4:d5:b8:6d:b6:8c:a2:22:d3:d3:b7:d3:12:4a:
                    e0:f8:1f:bb:b2:31:0c:1b:09:d5:88:e9:f0:16:7d:
                    2a:c0:4f:ca:6d:85:46:be:b0:b8:86:66:80:59:fb:
                    82:83:e8:53:bf:37:fb:90:ef:11:af:45:38:dd:64:
                    04:b3:44:57:e2:f0:a7:87:e4:ce:54:81:fd:18:4d:
                    87:4a:71:8c:fb:71:75:9b:5f:d2:19:7b:af:b8:37:
                    71:ad:73:11:41:88:ef:30:be:75:f2:69:a8:59:d7:
                    f5:d0:ec:b1:5a:43:b8:ee:43:51:5b:ac:a3:b4:9e:
                    e9:ca:97:24:3d:d0:92:03:f4:55:6b:98:52:cd:fe:
                    06:58:b4:d4:f7:62:42:3d:31:6d:c2:c5:38:bf:73:
                    18:47:b7:c3:4e:3b:64:ed:ee:e3:d5:88:17:17:03:
                    fa:65:67:ef:dc:ec:c6:4e:1c:78:56:3e:b7:3b:f2:
                    e9:73:bf:55:f8:2b:a6:aa:6d:f0:00:77:c4:ec:81:
                    ab:79:71:26:9c:9f:dd:54:93:08:c1:93:5c:38:99:
                    86:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:84:6F:17:9F:8D:29:1B:98:95:C5:0C:F0:8C:CB:87:71:CA:DB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/659150c4-efee-4728-ad12-9912bff7fec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:7a:7f:0a:4f:eb:d0:8b:33:9e:a4:4d:20:76:61:d8:21:44:
         5d:b2:07:92:f1:0a:fb:13:cd:39:a8:27:2d:01:e6:66:d4:c1:
         3d:2a:29:3c:04:f0:dc:72:b0:fc:dd:69:00:d4:ab:93:ee:3f:
         5d:86:e4:eb:84:71:82:cd:c9:0a:9e:4f:64:46:3b:c3:14:8a:
         3f:d4:4c:e4:63:26:98:a6:a1:e8:43:e6:7a:a3:5e:c8:ad:7f:
         2d:f0:17:aa:85:84:5f:d9:a8:40:b0:b0:c5:69:2a:1e:43:6e:
         b8:55:4a:9f:a1:2e:ff:32:70:97:91:bf:22:12:d8:37:70:e9:
         40:86:0e:ce:7f:4a:1e:ff:2c:90:4d:5c:d2:00:27:a8:8d:7d:
         2c:3c:8d:f4:22:34:e3:2b:d9:eb:23:da:57:1b:c5:34:4b:57:
         a7:ed:ae:7d:a3:c0:5c:29:b1:8e:05:9c:6a:41:fd:9f:67:d6:
         3e:b0:70:4a:15:c9:27:8a:6e:ce:40:52:c0:8e:31:26:cd:e1:
         a7:c6:1c:7c:31:f2:2a:47:63:e9:66:5f:61:bc:3b:cb:31:45:
         57:ec:84:01:1c:9e:05:15:5b:bf:cb:20:77:7a:19:1f:f4:18:
         f7:fb:3d:73:f6:7d:f2:ce:07:49:96:54:31:28:d0:a5:9d:cf:
         cc:f9:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:51:10 2025 by rpki-client