This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a59fb8b-76dd-478b-8633-7422730479a3.roa
File:                     6a59fb8b-76dd-478b-8633-7422730479a3.roa (raw, json)
Hash identifier:          wy4kvhEJKmqjOT8vN8hPI6K4jKx24nk66vthVWXqr/c=
Subject key identifier:   CB:86:30:73:10:43:BD:1E:A7:15:C3:36:FE:58:8D:33:F7:60:8D:75
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3D2CB7C83294820E6CE2355CD45117C3C5B8CD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a59fb8b-76dd-478b-8633-7422730479a3.roa
Signing time:             Mon 08 Dec 2025 01:20:48 +0000
ROA not before:           Mon 08 Dec 2025 01:20:48 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2c:b7:c8:32:94:82:0e:6c:e2:35:5c:d4:51:17:c3:c5:b8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  8 01:20:48 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=2d9ab69574ef290110ef4e7d54324e5d9400495e1762fc734d684c6ff651d2b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f3:0a:67:d9:14:c0:d1:0f:14:a9:ab:c5:7d:
                    c7:93:c5:ae:9b:81:4a:c2:39:97:5b:6b:4a:32:84:
                    97:b1:06:5d:2d:cf:c5:1e:6d:08:de:64:c1:38:83:
                    7b:a7:6d:3c:f9:73:bb:99:0f:14:13:c0:0d:fd:e9:
                    0d:71:af:24:fa:9c:11:43:59:9f:6c:57:1a:bb:be:
                    02:0b:a8:b2:42:92:a9:c8:53:10:4b:70:88:5c:0a:
                    bd:da:16:0a:fc:20:7d:d0:27:3f:41:08:09:3f:41:
                    6c:9e:52:31:f2:66:48:54:8c:b4:0d:d1:3b:30:55:
                    8b:40:b7:41:d5:65:12:a0:e9:3b:62:c5:8b:e0:13:
                    91:a3:4b:77:5e:b7:b9:5f:ff:20:4a:54:4d:65:be:
                    e8:51:1a:43:8a:ba:11:94:66:79:7b:f7:84:76:cf:
                    89:00:36:d7:eb:d3:29:16:af:1f:dd:a5:6c:be:7a:
                    40:ab:9b:b2:87:7f:09:99:dd:a4:76:5f:28:da:ff:
                    3e:51:48:1f:e9:e4:88:3e:0c:bc:8b:04:6a:bc:79:
                    08:75:f3:53:38:9f:e8:b3:33:1d:c8:3d:74:00:f8:
                    04:47:55:f9:a2:44:ca:17:ca:c9:83:8d:35:7b:e6:
                    5f:34:a0:ba:39:06:16:cb:5f:af:6e:ba:b2:a1:19:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:86:30:73:10:43:BD:1E:A7:15:C3:36:FE:58:8D:33:F7:60:8D:75
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a59fb8b-76dd-478b-8633-7422730479a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:52:e8:fc:fa:19:d0:44:e4:0c:a9:5a:ee:6f:5c:56:16:09:
         33:de:47:e2:04:82:92:e1:bd:84:86:51:59:69:94:21:6e:a0:
         5a:16:c1:63:34:8c:ee:dc:f3:ab:4f:6f:5e:1c:b1:25:98:df:
         8b:5e:69:1f:2a:e2:cf:22:18:48:30:bc:29:aa:2f:19:36:ca:
         c1:53:2c:7e:5c:51:c5:75:60:12:14:da:44:ed:d3:7a:af:5d:
         3b:43:2b:47:f3:29:7c:b9:03:aa:8c:d7:40:6a:79:16:d6:98:
         71:fc:16:6e:e0:5c:7a:15:e1:1a:6b:ff:67:e1:7e:e6:43:29:
         52:7d:5c:88:a9:58:c3:20:4a:ec:88:8b:87:15:7e:59:9a:2b:
         68:da:c9:1d:a2:03:cc:28:5e:6f:b3:fd:e3:07:47:05:72:90:
         72:48:d7:51:1c:93:bb:8f:a1:52:3d:03:c5:de:50:d9:56:43:
         dc:db:04:77:5a:33:c2:7f:f1:4d:6c:a1:0f:1c:9e:f7:9e:89:
         31:c2:d9:48:2b:03:91:7e:72:fe:d8:95:02:f0:82:74:90:ae:
         f9:b1:04:e3:37:8b:5c:11:b0:c6:07:a5:82:6e:0d:50:0f:14:
         a6:4f:e4:08:15:dc:ce:6a:6c:a7:f4:3f:e2:61:79:d0:16:bc:
         54:93:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:39:01 2025 by rpki-client