This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab26cbb-2157-4a38-99f9-667af205ffc1.roa
File:                     8ab26cbb-2157-4a38-99f9-667af205ffc1.roa (raw, json)
Hash identifier:          lEX1ulSHMAlTzjFiZaGF7uCM7jbDUMVqk1Y/Q1udD8I=
Subject key identifier:   B0:0D:9F:0C:67:9D:C2:3F:47:EB:B0:45:88:19:A7:B3:3B:32:18:7A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1180B9273C46AF62D0BB464B6CC087D869DAE86F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab26cbb-2157-4a38-99f9-667af205ffc1.roa
Signing time:             Mon 08 Dec 2025 01:30:11 +0000
ROA not before:           Mon 08 Dec 2025 01:30:11 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:80:b9:27:3c:46:af:62:d0:bb:46:4b:6c:c0:87:d8:69:da:e8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  8 01:30:11 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=e7668ecc74a14c2de349942dbf1c67cdcf84cdd55ead567608921609bc2eab13, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:98:3b:3b:ae:ec:f3:87:fa:cd:20:10:ba:
                    ab:eb:50:74:80:e4:14:55:d9:63:4d:39:bf:cd:b7:
                    0d:bd:97:20:e4:05:5d:2d:7a:c5:79:bc:1f:12:99:
                    71:fc:bf:e3:a9:ec:ff:9b:41:ca:30:4a:8b:9f:c3:
                    c2:bb:a0:76:5b:30:68:61:a1:98:a2:b8:b4:ce:4a:
                    7d:f7:f7:4e:4f:5d:9d:b3:af:09:84:5a:39:3a:ab:
                    a4:6c:49:21:2b:e4:6d:89:b4:55:52:0c:ed:0a:98:
                    8d:ed:f7:1e:2c:93:48:43:23:90:4d:58:56:63:09:
                    b9:f8:f4:6e:16:c0:9b:12:50:82:b8:db:ad:9f:96:
                    d9:4a:c6:56:e7:82:6d:98:e1:c9:60:2c:4d:f1:b1:
                    d6:25:89:e3:32:a3:d3:6a:e3:e8:56:cd:f6:8b:cd:
                    70:28:a1:e8:72:ea:7a:c9:fc:85:41:f8:29:2e:76:
                    a9:66:69:68:e9:58:85:64:7b:b4:e4:e7:82:31:67:
                    78:d7:9a:0f:38:f7:8e:87:b9:96:65:40:8a:05:88:
                    08:b2:d9:5c:b4:17:a3:e2:1f:f2:99:04:5f:ac:2e:
                    6f:79:01:94:45:91:c0:4a:ba:e8:67:c6:6d:95:a0:
                    2b:45:2e:21:30:ed:ff:2e:d7:8d:f8:d2:e5:a2:dd:
                    54:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:9F:0C:67:9D:C2:3F:47:EB:B0:45:88:19:A7:B3:3B:32:18:7A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab26cbb-2157-4a38-99f9-667af205ffc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:03:34:c2:22:1f:20:de:bf:1c:36:ca:01:9f:7f:d9:ab:cf:
         16:76:ff:a9:53:e3:88:f3:e4:d5:2c:24:4b:7b:2d:33:e3:08:
         19:67:62:28:8d:4d:e2:18:0e:91:b3:cf:ce:77:73:23:ee:df:
         42:b7:46:a3:d8:e2:18:57:76:41:12:b8:0b:49:3e:5f:c1:73:
         ae:03:10:95:c0:83:bf:66:89:71:17:48:dc:12:36:0b:b1:ab:
         9d:47:5b:b6:08:3a:97:f5:37:bc:f1:c5:21:b0:7f:66:5d:a9:
         69:d8:0a:ad:2b:33:bf:0a:87:84:f9:12:16:6b:ce:46:dc:cd:
         1f:fe:8b:6e:1e:5c:fd:3c:a8:59:79:db:a7:05:a5:6a:c1:ce:
         69:81:58:ef:63:24:ef:43:9b:9e:58:69:af:97:e7:ce:a5:51:
         1c:9f:8f:ce:ca:69:39:69:f0:ad:17:5d:ca:d3:42:fb:18:c1:
         3a:e4:78:62:e3:6d:99:1b:68:f5:fe:44:42:db:50:42:45:2b:
         ae:8e:2b:45:bd:f2:a5:b9:4a:7b:a1:98:fd:78:89:49:63:d2:
         1e:a1:10:70:c3:46:d3:2b:3c:80:75:6b:60:71:5a:45:70:e8:
         45:e7:2e:bb:98:dd:bb:87:3e:45:c1:88:dd:f0:1c:82:f2:f4:
         4d:22:07:3e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEYC5JzxGr2LQu0ZLbMCH2Gna6G8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA4MDEzMDExWhcNMjYwMzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNzY2OGVjYzc0YTE0YzJkZTM0OTk0MmRiZjFjNjdjZGNm
ODRjZGQ1NWVhZDU2NzYwODkyMTYwOWJjMmVhYjEzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxoZg7O67s84f6zSAQuqvrUHSA5BRV2WNNOb/Ntw29lyDk
BV0tesV5vB8SmXH8v+Op7P+bQcowSoufw8K7oHZbMGhhoZiiuLTOSn33905PXZ2z
rwmEWjk6q6RsSSEr5G2JtFVSDO0KmI3t9x4sk0hDI5BNWFZjCbn49G4WwJsSUIK4
262fltlKxlbngm2Y4clgLE3xsdYlieMyo9Nq4+hWzfaLzXAooehy6nrJ/IVB+Cku
dqlmaWjpWIVke7Tk54IxZ3jXmg84946HuZZlQIoFiAiy2Vy0F6PiH/KZBF+sLm95
AZRFkcBKuuhnxm2VoCtFLiEw7f8u14340uWi3VThAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsA2fDGedwj9H67BFiBmnszsyGHowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzhhYjI2Y2JiLTIxNTctNGEzOC05OWY5LTY2N2FmMjA1ZmZjMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0X+AwDQYJKoZIhvcNAQELBQADggEBABMDNMIiHyDevxw2ygGff9mrzxZ2
/6lT44jz5NUsJEt7LTPjCBlnYiiNTeIYDpGzz853cyPu30K3RqPY4hhXdkESuAtJ
Pl/Bc64DEJXAg79miXEXSNwSNguxq51HW7YIOpf1N7zxxSGwf2ZdqWnYCq0rM78K
h4T5EhZrzkbczR/+i24eXP08qFl526cFpWrBzmmBWO9jJO9Dm55Yaa+X586lURyf
j87KaTlp8K0XXcrTQvsYwTrkeGLjbZkbaPX+RELbUEJFK66OK0W98qW5SnuhmP14
iUlj0h6hEHDDRtMrPIB1a2BxWkVw6EXnLruY3buHPkXBiN3wHILy9E0iBz4=
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:35:14 2025 by rpki-client