This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cde8e1b-6d7c-4a23-b93e-944ec0c6a0bd.roa
File:                     8cde8e1b-6d7c-4a23-b93e-944ec0c6a0bd.roa (raw, json)
Hash identifier:          hnKY1n2PMjPrJ76J7o1oZTjnCtFsnVC7zbxoGvQvFLo=
Subject key identifier:   15:1E:E2:5C:0D:02:79:4A:E9:12:21:D7:85:A5:54:44:27:9E:5D:F5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4D974F4D1518A00F97838FCCC09B975F379515
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cde8e1b-6d7c-4a23-b93e-944ec0c6a0bd.roa
Signing time:             Sat 22 Nov 2025 01:00:11 +0000
ROA not before:           Sat 22 Nov 2025 01:00:11 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.173.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:97:4f:4d:15:18:a0:0f:97:83:8f:cc:c0:9b:97:5f:37:95:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 22 01:00:11 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=fdd439b3241a6c6328bb4b6cc59ed0879a40b7b78938539e9cbdb7b2a56da3bb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:7f:80:65:4b:9e:8e:e3:62:75:44:11:43:
                    68:e9:c0:87:de:d8:7e:b8:38:56:f0:d0:9e:c0:a6:
                    d5:b2:20:e3:e7:57:be:ac:89:1b:d6:5c:99:aa:3f:
                    92:c1:74:1c:18:22:ec:67:55:67:0d:cb:2a:6a:3e:
                    7a:b1:8f:51:d2:15:b8:8b:55:e3:56:9d:39:b8:bf:
                    4d:e8:4d:85:3a:44:1c:d7:17:53:38:c9:4c:6e:62:
                    c3:ce:c6:4e:d1:dc:f6:f6:d2:76:c2:59:58:5d:3b:
                    43:4d:df:24:b3:c0:a8:fd:b7:bb:5a:2b:d6:d6:63:
                    36:af:cd:75:f5:48:ea:92:07:0e:e1:5c:74:04:3c:
                    74:87:59:9b:d7:ee:64:4d:a2:40:6e:cf:7e:e8:1d:
                    9f:1e:ad:09:6a:0f:e4:0f:c1:04:bb:e9:43:1b:2a:
                    ed:32:b9:08:a4:67:ac:fc:d1:5e:d6:1c:3f:62:17:
                    77:f1:84:59:b6:f8:6a:da:74:7e:7b:5b:3f:c7:ad:
                    49:03:d0:f5:a0:66:5e:79:12:07:bf:09:cc:df:73:
                    db:c7:00:04:db:ba:9a:5f:12:0f:46:df:18:fb:47:
                    78:3c:28:a8:71:fa:31:4e:0f:98:3a:f7:91:06:9e:
                    5e:83:a6:7a:3d:42:d6:d4:52:7e:bb:94:42:ab:fa:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1E:E2:5C:0D:02:79:4A:E9:12:21:D7:85:A5:54:44:27:9E:5D:F5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cde8e1b-6d7c-4a23-b93e-944ec0c6a0bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.173.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:20:70:1b:9a:57:b7:6f:b5:e4:a7:d5:0c:9c:97:23:0f:af:
         90:99:45:43:37:0d:e4:0a:2f:29:d1:1c:41:9e:88:ea:94:81:
         0c:69:30:22:22:35:0d:d8:36:12:7a:ef:ab:8e:5a:58:23:2a:
         59:6b:d5:e9:48:c2:e8:54:86:48:a3:ef:dd:87:fe:c1:e5:a6:
         ce:81:01:a0:c3:43:72:c8:f6:1f:b4:20:7f:b4:cb:62:51:33:
         b5:f1:18:98:d3:03:04:c4:57:2c:87:41:53:c3:86:c2:d8:8e:
         9b:d4:29:1b:50:06:fd:9f:cf:c0:e4:04:86:1b:87:6a:81:1b:
         f9:db:4b:ee:58:9f:57:2f:f0:f3:6a:db:1d:cb:1b:49:7c:40:
         38:b3:19:ed:53:9f:40:b2:b9:76:c0:41:a3:26:59:c4:c5:f9:
         45:56:9e:3d:37:50:8c:a0:f6:7a:87:26:f3:17:c6:c8:ff:2e:
         11:32:6a:42:e6:d3:4e:af:e2:96:d6:dc:23:1b:68:28:03:e6:
         6a:5a:b8:5c:c9:2f:56:7f:aa:72:9c:0c:2d:fd:53:76:62:e1:
         9e:01:d1:aa:54:db:78:fc:bf:11:8d:09:19:d8:70:81:17:5c:
         08:1d:c1:70:12:8b:48:48:b0:96:7c:88:29:4e:aa:f7:00:1b:
         79:b0:0d:3e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITTZdPTRUYoA+Xg4/MwJuXXzeVFTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx
ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTExMjIwMTAwMTFaFw0yNjAyMjAyMzU5NTla
MHoxSTBHBgNVBAUTQGZkZDQzOWIzMjQxYTZjNjMyOGJiNGI2Y2M1OWVkMDg3OWE0
MGI3Yjc4OTM4NTM5ZTljYmRiN2IyYTU2ZGEzYmIxLTArBgNVBAMTJDVmMjc2MDQ1
LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANJ5f4BlS56O42J1RBFDaOnAh97Yfrg4VvDQnsCm1bIg4+dX
vqyJG9Zcmao/ksF0HBgi7GdVZw3LKmo+erGPUdIVuItV41adObi/TehNhTpEHNcX
UzjJTG5iw87GTtHc9vbSdsJZWF07Q03fJLPAqP23u1or1tZjNq/NdfVI6pIHDuFc
dAQ8dIdZm9fuZE2iQG7Pfugdnx6tCWoP5A/BBLvpQxsq7TK5CKRnrPzRXtYcP2IX
d/GEWbb4atp0fntbP8etSQPQ9aBmXnkSB78JzN9z28cABNu6ml8SD0bfGPtHeDwo
qHH6MU4PmDr3kQaeXoOmej1C1tRSfruUQqv6+ycCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBQVHuJcDQJ5SukSIdeFpVREJ55d9TAfBgNVHSMEGDAWgBQlrdNCsB63pY6t
GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz
MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4
ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw
OTA0ZTQyZDIvOGNkZThlMWItNmQ3Yy00YTIzLWI5M2UtOTQ0ZWMwYzZhMGJkLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt
NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBAOt8DANBgkqhkiG9w0BAQsFAAOCAQEAsyBwG5pXt2+15KfVDJyXIw+vkJlF
QzcN5AovKdEcQZ6I6pSBDGkwIiI1Ddg2Enrvq45aWCMqWWvV6UjC6FSGSKPv3Yf+
weWmzoEBoMNDcsj2H7Qgf7TLYlEztfEYmNMDBMRXLIdBU8OGwtiOm9QpG1AG/Z/P
wOQEhhuHaoEb+dtL7lifVy/w82rbHcsbSXxAOLMZ7VOfQLK5dsBBoyZZxMX5RVae
PTdQjKD2eocm8xfGyP8uETJqQubTTq/iltbcIxtoKAPmalq4XMkvVn+qcpwMLf1T
dmLhngHRqlTbePy/EY0JGdhwgRdcCB3BcBKLSEiwlnyIKU6q9wAbebANPg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:06:55 2025 by rpki-client