This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/888ef377-7e57-4736-9e90-5894d98e6e31.roa
File:                     888ef377-7e57-4736-9e90-5894d98e6e31.roa (raw, json)
Hash identifier:          1EV4MbKGvEQ3LmS4ydWAsQYzXlk+VfvFGrEzS6+Vm3Q=
Subject key identifier:   4A:8D:FB:29:BC:4A:64:E2:2D:27:9D:B9:C7:8F:2A:6E:E6:5F:A1:62
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       03A79422990BCFC8C59B0E599C3CB7A1B1966C97
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/888ef377-7e57-4736-9e90-5894d98e6e31.roa
Signing time:             Sat 15 Nov 2025 01:50:04 +0000
ROA not before:           Sat 15 Nov 2025 01:50:04 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        15.230.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:94:22:99:0b:cf:c8:c5:9b:0e:59:9c:3c:b7:a1:b1:96:6c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 01:50:04 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=8b1137237b26b0628cbd6f9ffe0bcc54ef8eaff81ff0d127fffc6453dc4bd900, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:40:e0:6c:8e:03:15:c4:6a:da:89:9b:91:
                    96:81:c3:cd:9c:7b:91:23:24:58:c9:8e:ba:19:0f:
                    b0:66:cd:31:cf:49:ec:56:2c:e5:42:52:07:b0:31:
                    7d:95:e2:55:d4:82:95:bc:32:f2:dc:d3:0f:d3:a8:
                    1b:f9:8c:ea:67:f8:72:af:a2:0d:b5:91:8c:bd:38:
                    14:9f:d2:d2:0b:94:f0:be:cf:5a:5e:cf:a8:32:90:
                    c3:f9:c6:4e:32:c3:40:b9:c5:18:89:f0:68:57:45:
                    e5:22:86:bd:f0:1b:47:d0:24:f3:ec:56:6c:9a:bd:
                    6a:ed:53:fc:38:cb:11:95:c1:28:6a:d8:20:79:7e:
                    f5:e5:3f:d9:72:a3:b1:6d:c4:8a:f8:f9:75:f8:4b:
                    35:04:0d:02:e1:06:ad:c3:e9:92:a0:bf:ed:af:02:
                    8f:52:d5:4d:b7:53:5f:f2:fb:08:71:1f:52:0f:4f:
                    54:01:a7:2c:f5:04:46:b7:9a:4f:3a:d9:46:44:40:
                    d2:5f:3a:85:aa:ad:59:f8:19:a5:04:74:1c:a0:ad:
                    bf:ae:5f:79:5a:f3:25:ad:5c:05:9b:4e:c8:a8:6c:
                    f5:1b:ca:b6:71:ce:24:7e:98:70:53:d5:e7:dd:3d:
                    b6:d2:1f:ac:86:1f:ef:ad:93:5f:e1:e2:86:27:d0:
                    4a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8D:FB:29:BC:4A:64:E2:2D:27:9D:B9:C7:8F:2A:6E:E6:5F:A1:62
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/888ef377-7e57-4736-9e90-5894d98e6e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:35:09:88:f7:2c:6a:e5:bb:53:c5:72:28:05:82:f2:47:
         9c:fe:eb:d9:2a:6a:47:9c:7d:52:c2:04:f9:16:70:17:db:0d:
         5a:25:e8:9b:74:18:19:ec:9e:96:44:88:ca:9f:be:44:ca:00:
         b5:4c:8c:12:e4:aa:20:73:20:e5:94:ad:6a:7f:ac:b1:49:0c:
         83:58:51:bf:86:15:cb:df:93:1d:7a:82:34:7d:3a:55:ea:24:
         af:f3:0e:be:b2:ea:59:e4:d6:a9:69:6a:5e:50:28:18:38:ae:
         ba:f7:e6:28:bf:c8:82:3f:82:09:62:b3:11:be:e5:38:dd:2c:
         de:93:fe:14:c4:a1:54:4a:4c:64:d3:57:1b:84:29:34:6f:19:
         a0:bb:cf:4c:76:e2:e2:78:31:7b:26:8f:69:ba:6e:84:45:ab:
         4d:61:48:06:9d:10:57:f8:cb:65:9e:c7:3e:6a:9e:d2:aa:55:
         9b:28:75:49:70:68:74:29:ab:10:bf:82:27:5d:3e:f9:46:6d:
         9e:de:35:45:3e:52:b7:66:4e:42:50:cb:55:5f:f8:4a:f8:73:
         38:aa:99:68:52:b0:bb:cb:cd:5d:c5:55:78:44:20:d2:94:17:
         93:29:7a:7c:42:d5:52:b7:d0:54:f5:08:cf:9c:ee:a1:8e:25:
         7f:95:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:35:15 2025 by rpki-client