This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95623234-eb19-40bd-857a-fdb70fc0a21f.roa
File:                     95623234-eb19-40bd-857a-fdb70fc0a21f.roa (raw, json)
Hash identifier:          WD2rK2uJzJIPUfUZkVYHhSeQEUI5jBT0M1e6pEfwXtE=
Subject key identifier:   29:E9:5C:81:BC:BC:CC:CB:3E:2A:C2:D4:3C:23:C6:71:09:F4:FD:9F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7A02D09DBFF30C048B26F9E5F1074D594B8FA588
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95623234-eb19-40bd-857a-fdb70fc0a21f.roa
Signing time:             Tue 02 Dec 2025 01:10:37 +0000
ROA not before:           Tue 02 Dec 2025 01:10:37 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:02:d0:9d:bf:f3:0c:04:8b:26:f9:e5:f1:07:4d:59:4b:8f:a5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  2 01:10:37 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=d8354fa2d2a53a08cbfdb6fa0839c7166bfa843feae198b4b19b57eb720051d0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:df:45:6f:15:d9:64:6c:39:e2:a3:31:39:
                    6b:4a:6b:90:6c:0e:8c:e0:a3:3c:c4:a7:a3:28:b0:
                    d8:81:dc:f1:32:b4:58:62:ac:ea:67:87:be:26:fb:
                    ef:db:d8:1f:b4:67:64:77:75:7a:0f:b2:1b:63:8f:
                    ce:a7:13:a2:b1:82:06:e7:8e:33:9e:ca:7c:d7:c1:
                    ff:a4:cd:3f:17:6f:f6:2c:a0:ed:9a:8c:aa:61:70:
                    7f:26:14:81:bf:24:4e:54:8b:84:74:57:b8:df:bf:
                    cb:53:e4:47:ad:8f:e4:74:dc:02:32:2b:ba:d9:fa:
                    fe:f0:78:58:51:d7:16:1b:63:24:58:7b:82:b7:ee:
                    b0:d8:1d:f9:a2:93:1f:58:1d:66:af:8d:35:87:15:
                    ec:fb:ea:0d:1f:3e:0c:c0:00:bb:ca:63:35:10:b2:
                    ea:bf:f7:5d:29:52:b6:92:10:f7:04:e9:73:82:ed:
                    3d:55:33:2c:4c:27:d7:e6:fb:01:dc:cd:cf:aa:e5:
                    17:6b:5f:f6:a5:6a:13:1b:64:b6:d7:28:cd:80:50:
                    91:e0:08:98:f9:3b:b0:fc:19:89:f3:6e:e7:75:66:
                    c9:8f:ca:49:dc:09:51:ac:12:9d:b8:5f:f3:6e:e1:
                    3b:d4:78:50:58:89:dc:3d:3b:ed:18:d2:a3:1f:92:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E9:5C:81:BC:BC:CC:CB:3E:2A:C2:D4:3C:23:C6:71:09:F4:FD:9F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95623234-eb19-40bd-857a-fdb70fc0a21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:72:87:38:c0:74:af:84:4f:cf:45:78:aa:57:0a:a5:a1:
         ea:b7:d5:09:26:8b:35:2c:c7:df:13:48:b9:25:bc:df:59:89:
         fb:43:81:9a:d9:aa:91:f0:53:30:07:1f:f1:d7:3a:23:e8:35:
         72:76:f7:11:f5:48:a0:13:85:df:16:95:f4:0e:4b:04:a3:d6:
         76:99:f4:ab:cc:34:e5:a8:e1:4d:8c:bb:02:f4:b3:ff:bd:bc:
         7e:04:91:8b:08:93:51:44:8c:c0:15:db:fc:0e:62:48:65:cc:
         97:74:7e:69:d1:fc:1c:26:b3:48:7c:b7:8e:27:1d:8d:09:5e:
         fd:f8:0d:67:04:81:d4:f8:cb:e8:b5:6a:0d:83:ac:85:38:ab:
         b5:66:c2:fa:c4:a4:fa:87:fc:18:45:dd:fc:8c:a5:c8:49:9d:
         6b:01:3b:92:eb:84:04:75:34:5e:c1:1c:f2:df:cd:1d:cd:fc:
         1b:de:c6:cd:94:9b:05:df:e7:01:0f:0a:5f:b9:00:45:ea:ba:
         14:16:b8:01:53:49:21:3e:64:4d:6f:50:5f:ee:61:30:84:65:
         ba:57:e9:b1:b2:69:4e:01:63:ed:5a:8a:20:07:38:6a:96:d4:
         9e:5b:9a:82:3f:5e:e3:bd:b9:85:87:91:47:b1:d2:b0:a7:87:
         59:12:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:16:26 2025 by rpki-client