This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a833f85-4db2-4472-b4da-4540c85b76ac.roa
File:                     6a833f85-4db2-4472-b4da-4540c85b76ac.roa (raw, json)
Hash identifier:          urWUwzCYMl5eHH3Z6Pfp1lRfB4eVvjNmBzlJoDVKxk0=
Subject key identifier:   7D:3C:59:A0:F9:3A:C0:5D:80:EF:5B:B9:EA:BB:1D:22:13:0F:7F:3F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       79857359F1483720DF69980D1616182F3B5A79D3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a833f85-4db2-4472-b4da-4540c85b76ac.roa
Signing time:             Fri 05 Dec 2025 01:50:40 +0000
ROA not before:           Fri 05 Dec 2025 01:50:40 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.182.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:85:73:59:f1:48:37:20:df:69:98:0d:16:16:18:2f:3b:5a:79:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 01:50:40 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=18a23a5d4e2474cb1ca216d5a8d76b38b24c2a770037d028484857b012aa5c02, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:5e:45:da:d9:ac:7d:5b:44:10:d3:03:23:
                    41:e0:1c:d6:2e:4d:1e:49:7f:b9:67:6a:59:95:5e:
                    ac:c4:ce:47:87:27:42:98:fb:48:51:58:ed:ae:d6:
                    29:a3:f1:0e:30:82:7b:ae:77:37:d2:ff:7f:1c:fe:
                    8c:00:0a:51:62:7e:12:ec:ee:ec:43:60:5b:50:43:
                    af:53:2a:ae:ea:f8:8d:99:7b:1c:e2:2c:bf:99:9d:
                    4e:cc:f0:39:78:53:6a:7d:56:f2:fd:2e:cf:be:74:
                    9b:92:62:bb:6b:a4:48:2f:34:bb:f6:b0:91:17:5c:
                    e5:fb:d3:2d:20:05:da:b1:6e:e0:d8:4e:ad:a1:a2:
                    cc:f4:8b:2e:a4:fc:70:60:62:b9:46:c7:54:46:17:
                    4a:e2:dc:c1:14:65:de:a7:1a:18:bc:1e:4b:73:95:
                    f7:64:77:c6:3e:4d:ef:8c:ca:c8:4b:34:22:dd:23:
                    bb:d1:69:b8:4a:e8:6d:e4:ef:a3:ee:59:22:d0:a9:
                    a0:06:0f:c7:34:25:97:d4:89:d5:e8:71:83:38:ee:
                    3d:10:be:34:8e:3d:91:4a:94:ee:81:1c:6b:e5:bd:
                    a7:1d:fb:21:ef:15:2b:92:74:8c:59:d2:70:91:45:
                    5c:5d:88:9f:c9:d5:9d:3a:b4:62:ec:71:84:69:30:
                    c3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3C:59:A0:F9:3A:C0:5D:80:EF:5B:B9:EA:BB:1D:22:13:0F:7F:3F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a833f85-4db2-4472-b4da-4540c85b76ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.182.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:b1:d0:04:3c:d7:52:13:4c:00:26:91:76:47:fa:74:49:b8:
         23:a2:4a:4d:3f:21:ae:e8:eb:60:26:e7:08:4d:eb:fa:73:fb:
         7e:6c:77:3e:17:38:ed:4a:75:99:b2:6c:78:cf:27:ea:df:88:
         4a:3c:bb:c9:b2:b3:1a:d4:df:ac:27:00:44:df:b2:13:a0:a4:
         35:7b:5a:26:ef:ca:be:0f:f1:f2:17:85:3b:ae:cb:3b:7d:bf:
         98:9d:90:27:f5:66:aa:5e:f5:48:45:04:ca:7e:17:df:b3:ee:
         9d:4a:09:b4:c1:f5:58:76:ad:a1:1d:fb:f1:28:bc:4d:71:0c:
         fe:70:25:e3:23:2a:d8:a4:6a:3d:43:34:d1:be:08:52:d9:ac:
         a2:b3:fc:33:f0:47:c1:88:eb:19:76:3a:ef:75:07:de:2f:df:
         02:af:ef:04:a7:68:28:a3:b4:40:b2:eb:aa:e2:28:29:5b:e0:
         d9:02:e0:92:01:b3:3c:01:e2:63:a7:21:3c:fb:2c:5b:72:92:
         5d:46:31:a0:a5:56:4f:ae:16:6e:87:19:ee:ee:0e:82:6f:af:
         1b:2b:c5:c7:fc:bb:75:02:86:3f:8d:43:6b:63:12:d5:49:1b:
         f8:a8:7f:bc:7e:69:a1:dc:81:69:03:79:83:f6:e9:3a:a8:4e:
         03:19:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:42:34 2025 by rpki-client