This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90305c59-d0d1-409b-8a64-dcd0688634ac.roa
File:                     90305c59-d0d1-409b-8a64-dcd0688634ac.roa (raw, json)
Hash identifier:          upkO07mZO52Yfr1u5NL1mUibsWJm25o2h8+qfejs9uw=
Subject key identifier:   C6:AB:F8:6A:13:4B:61:72:7C:80:22:97:12:38:6D:8F:FE:FC:23:44
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       41ACB5214E66DFE7A2F182ABD64C0AFADB9A8A35
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90305c59-d0d1-409b-8a64-dcd0688634ac.roa
Signing time:             Fri 05 Dec 2025 01:51:13 +0000
ROA not before:           Fri 05 Dec 2025 01:51:13 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.124.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ac:b5:21:4e:66:df:e7:a2:f1:82:ab:d6:4c:0a:fa:db:9a:8a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 01:51:13 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=40ba668c06e8755da1d206b3f9242c843080c99e6cda3a3052d36c206175deac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:f3:e9:a5:06:9d:46:4d:1a:f4:91:04:ae:
                    0e:b7:82:ea:99:66:06:cf:d7:1d:b9:58:e9:dd:cf:
                    3b:c4:58:3e:b8:e7:67:c4:6a:25:c2:81:30:92:19:
                    04:a7:85:2f:c7:f9:97:9f:d1:27:86:22:cb:4f:93:
                    5d:89:f9:64:b9:dc:8a:62:d9:5e:c9:cd:24:ad:7d:
                    d2:be:07:15:7a:dd:d3:fb:71:16:b6:34:77:19:e8:
                    e2:c3:e0:15:f2:90:d4:27:d6:78:37:3d:e7:9e:94:
                    c4:89:17:8f:e5:64:2d:46:e4:1e:47:9d:9d:9d:52:
                    77:60:da:34:83:44:96:61:10:5b:6f:94:12:e4:93:
                    8b:17:4c:a1:ee:b5:0f:8d:64:9a:d9:34:d1:e8:9c:
                    36:74:30:cb:3b:db:bc:d1:fd:34:62:4b:06:9b:7e:
                    9a:18:4d:78:bd:c6:e1:48:e1:03:c4:91:02:ed:e6:
                    c8:60:e5:d2:d0:92:d1:39:d0:a2:65:1d:b8:ad:33:
                    1f:72:c3:05:cb:c8:b3:96:c8:fc:d8:eb:95:34:8a:
                    78:a9:a5:77:69:e4:a0:29:1e:b6:b3:59:88:81:e2:
                    ae:fb:cb:46:e2:bb:6f:b0:3c:48:d4:8c:ea:c6:a5:
                    aa:46:04:16:8a:a6:f6:b9:e0:02:28:ab:28:a3:9f:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AB:F8:6A:13:4B:61:72:7C:80:22:97:12:38:6D:8F:FE:FC:23:44
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90305c59-d0d1-409b-8a64-dcd0688634ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ee:d4:c8:aa:2e:d9:55:77:f7:af:2d:54:d5:ad:b9:ad:f2:
         d3:71:ad:52:32:fe:33:73:ef:f3:36:88:f1:ec:67:e7:3d:d2:
         95:ee:67:af:58:0c:da:64:22:72:84:29:19:81:9e:14:80:42:
         97:32:88:07:dc:b9:26:21:cb:30:50:6c:7a:40:e3:0a:ed:ab:
         ca:0e:6e:b3:34:98:22:63:ea:6b:3c:5a:6a:48:7e:50:07:3f:
         97:f3:cd:1a:61:f3:ae:eb:eb:5c:0c:6a:fe:7f:54:92:b3:24:
         65:7d:a1:15:f7:8b:cb:79:0f:d9:db:54:49:7c:3a:a3:fa:0a:
         99:60:5b:2c:d5:a8:14:06:3b:2d:61:45:94:33:d5:b1:20:91:
         b5:a0:5d:b0:74:0d:05:03:6a:12:dd:a7:dc:5c:39:c3:8e:0a:
         76:c7:40:0c:21:bb:1c:b9:b5:0f:4e:d6:b2:a6:26:a0:d3:e4:
         cf:8a:84:ac:46:31:28:a0:62:a9:e3:67:56:93:5a:77:e0:dd:
         72:ec:c8:63:2c:d8:64:15:62:87:05:2c:88:56:12:c9:11:92:
         f7:31:fa:d7:4e:7c:08:3e:c4:51:7b:28:d4:cb:51:08:e9:67:
         9e:73:c6:03:2b:0b:b0:2a:92:9c:df:5b:fa:d3:15:d6:0c:1b:
         9c:23:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:58:40 2025 by rpki-client