This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/870406d2-aa0d-4a6a-bd97-25b18206e3a7.roa
File:                     870406d2-aa0d-4a6a-bd97-25b18206e3a7.roa (raw, json)
Hash identifier:          DGH01uKDlSfOOHxHLQkJujOIFMNR7oQl9NOR0o8Qzz0=
Subject key identifier:   9D:FD:59:8D:09:56:E2:AE:9D:ED:D4:E2:43:0F:1A:B1:B1:51:3F:93
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       58C43CCAB73B274DA2ED13FEF27569911DCE2D17
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/870406d2-aa0d-4a6a-bd97-25b18206e3a7.roa
Signing time:             Sat 06 Dec 2025 03:00:56 +0000
ROA not before:           Sat 06 Dec 2025 03:00:56 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.255.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c4:3c:ca:b7:3b:27:4d:a2:ed:13:fe:f2:75:69:91:1d:ce:2d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  6 03:00:56 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=32fa8d88776ccfdec73f27b0c2b9d1a946d5bed6fd03ffda001009abab1463b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:43:b5:c0:eb:f4:9a:12:19:4c:05:c6:0e:
                    c3:64:96:86:e1:eb:a0:13:fa:68:0f:54:16:c7:4a:
                    b5:d9:76:32:d7:26:4a:4a:30:61:6a:f7:1a:26:43:
                    6f:fc:5d:ae:5c:8d:28:c1:a9:b2:76:6c:2d:16:7d:
                    c4:17:70:19:b8:f0:83:64:8e:c2:0d:d9:32:ff:93:
                    04:41:6f:36:c3:08:37:5c:8a:99:60:ed:47:38:74:
                    d6:c6:38:86:aa:17:d2:f7:b7:ea:b8:d5:aa:28:77:
                    5c:32:b6:2b:f2:ec:b4:4b:df:67:a2:cf:2a:48:68:
                    7b:05:ea:4f:ed:e5:8b:dc:05:e4:0a:ac:6b:6d:ac:
                    03:b0:0f:87:47:37:07:02:8c:9e:6a:93:8b:0b:30:
                    62:ef:f9:e6:96:ae:b2:44:12:fc:e7:7f:25:e6:be:
                    c9:bb:5d:66:45:77:d9:ee:ea:6c:e9:c3:68:5f:22:
                    c5:46:8c:b2:a7:77:18:1c:ad:67:f5:12:b1:b3:5b:
                    66:91:65:ec:39:4d:df:de:ed:29:bb:c3:3b:87:c3:
                    89:9e:c0:a4:a6:8f:a1:1f:79:5c:2d:7b:40:a8:5b:
                    13:83:a5:53:47:fd:62:42:d3:b7:1f:9c:41:56:1a:
                    ec:f9:6a:18:c8:e5:90:64:cf:a4:98:49:6a:01:75:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FD:59:8D:09:56:E2:AE:9D:ED:D4:E2:43:0F:1A:B1:B1:51:3F:93
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/870406d2-aa0d-4a6a-bd97-25b18206e3a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.255.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         10:f0:f6:55:d7:48:26:74:cc:45:4b:ab:21:4c:70:e6:9f:7d:
         67:fc:2e:c7:22:2b:8f:d2:4a:df:12:04:a2:8d:da:71:77:cd:
         b3:e9:17:a0:de:22:2f:3f:3a:2f:3f:d5:82:25:25:bf:53:e8:
         a2:bb:cd:ec:e2:8c:28:00:d6:79:c0:2c:a4:8c:64:44:f4:9e:
         f8:eb:04:4e:21:52:86:fe:12:bf:61:0c:1a:2d:65:e9:0b:11:
         de:2a:bb:e7:7e:70:6c:25:66:17:83:ca:44:60:cd:20:12:71:
         37:9b:c3:52:7c:4c:fa:7b:66:33:d2:a4:2d:99:9a:77:1b:16:
         c2:48:27:ce:e7:60:14:47:1f:89:06:03:9f:fa:d9:e5:99:46:
         52:9c:25:ee:04:38:69:1d:78:11:90:1c:75:50:ee:ab:5c:01:
         e6:41:eb:ca:79:5c:b1:86:b0:4e:45:6e:c5:5c:38:75:e3:02:
         e3:8a:5e:e2:66:ed:89:18:27:c4:27:1a:20:6c:2a:e5:e1:51:
         e6:27:d3:7a:92:8f:ad:e6:44:8f:4a:ba:0d:37:f0:82:54:05:
         54:b8:af:0c:cb:c8:01:5b:ec:18:34:04:e0:8d:87:ee:95:83:
         d1:74:cd:28:00:bc:2e:a1:90:19:c3:55:6b:70:6d:2d:b6:1c:
         78:55:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:56:57 2025 by rpki-client