This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ff3ac83-d864-490f-baa4-a1e6c4a2e136.roa
File:                     9ff3ac83-d864-490f-baa4-a1e6c4a2e136.roa (raw, json)
Hash identifier:          6XTAy+5BqMb3XC1lMBIXuAxb97GUMvE7lsRpS9NCGGs=
Subject key identifier:   94:EA:01:CA:AE:88:87:79:CC:71:EE:A6:71:CD:8C:9D:CA:0F:26:B2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       547B0D41267C3D4B1B73592B1A66AA38CCBC5B20
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ff3ac83-d864-490f-baa4-a1e6c4a2e136.roa
Signing time:             Fri 05 Dec 2025 01:10:50 +0000
ROA not before:           Fri 05 Dec 2025 01:10:50 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.124.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7b:0d:41:26:7c:3d:4b:1b:73:59:2b:1a:66:aa:38:cc:bc:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 01:10:50 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=6e473b1106910d3be8b7bf695de7ced9dc78684cb6212b115488f62918c4914c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f4:83:0c:e3:a3:ed:79:8a:d7:66:f4:4c:de:
                    aa:46:d1:94:cf:8d:dd:f5:d6:53:22:d9:25:c7:24:
                    2c:11:5f:90:73:89:bf:64:81:b9:66:76:7a:f1:35:
                    58:14:d7:49:8e:b5:c4:32:82:16:bc:f9:72:7b:88:
                    81:c7:ba:18:cf:a1:11:1d:75:b0:8e:86:4c:72:ed:
                    2b:d6:97:32:a4:53:36:0c:de:c7:2a:e7:9d:c3:1c:
                    ce:47:c6:7f:74:2c:e2:a9:6f:d7:f8:22:01:ae:ad:
                    2c:2a:b7:7c:76:8c:ef:03:48:24:af:8e:fe:a3:78:
                    73:62:c4:54:f0:71:87:98:50:bf:44:6d:ff:8e:75:
                    ff:02:95:7c:e2:94:d6:45:18:46:9a:94:13:d4:89:
                    b6:69:62:00:a2:9a:96:8a:f4:8d:14:e7:2a:a5:09:
                    fb:cd:2e:71:e2:1e:b8:bc:31:58:d2:30:cd:eb:73:
                    dd:62:2c:77:15:59:41:f2:50:08:73:c9:bb:f0:4a:
                    02:fa:72:2c:f2:8f:91:05:df:f3:b4:be:c7:38:73:
                    b1:56:05:22:b7:5e:79:b3:88:6a:51:ee:27:5b:e3:
                    6b:fd:4a:3e:f5:dc:1e:a4:d7:7d:41:23:e1:62:a8:
                    a2:3f:f4:41:a3:57:d0:f1:ea:0d:4c:d5:94:12:0c:
                    6f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EA:01:CA:AE:88:87:79:CC:71:EE:A6:71:CD:8C:9D:CA:0F:26:B2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ff3ac83-d864-490f-baa4-a1e6c4a2e136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:f6:55:1f:f9:20:d7:01:fe:34:46:39:9c:ab:b5:d1:1f:
         2a:ae:ad:d4:00:59:56:1b:06:17:fc:35:c2:12:28:0d:bd:ca:
         81:6d:b8:6b:c3:43:cc:5e:cd:98:d6:88:c9:ca:d0:e9:59:13:
         6b:09:a1:6c:93:f9:16:58:4c:85:89:15:d1:4e:b0:e5:38:b2:
         6e:9e:8b:1d:00:55:21:b8:c5:47:55:82:24:68:99:72:7a:37:
         8d:d1:a1:e0:86:e7:78:2a:e3:d8:72:70:d4:93:55:df:7a:66:
         6c:ea:be:98:6b:07:cc:49:c8:c2:cd:69:4a:ba:f6:6c:73:e9:
         f5:e0:8d:de:32:c3:5a:77:90:a0:cc:29:fe:7f:2a:b5:65:81:
         64:75:4e:67:a7:da:d3:3f:5c:e3:a0:8a:a2:e0:09:ca:be:c8:
         09:f4:a5:9b:e0:fe:12:9b:60:bb:b4:e5:75:9f:7f:3b:f6:8c:
         8d:e8:c6:14:a5:46:df:9d:73:f3:c2:e5:72:74:04:4c:c7:e5:
         8a:37:a2:cd:b0:5f:a6:c0:62:60:58:75:17:54:ce:56:9c:4a:
         44:c4:7a:cd:75:55:25:22:c7:5a:d1:4a:08:19:b6:dd:e7:67:
         55:d9:07:80:fd:fc:89:4a:1f:af:e1:c5:ad:08:02:6c:be:ce:
         d8:76:d0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:38:35 2025 by rpki-client