This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6d31808-7d9a-4bce-a7f4-1b1e99dbb10a.roa
File:                     a6d31808-7d9a-4bce-a7f4-1b1e99dbb10a.roa (raw, json)
Hash identifier:          rEM211QCueo05raLMwUL8bAZQEn2DlmhBcSEIzy9uzY=
Subject key identifier:   B6:86:18:DD:76:59:A0:53:C5:5F:4A:49:9A:D9:7A:59:BF:D0:7B:87
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3EE3A9CDA181C9E65E534700BCC78DDADCE19A3B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6d31808-7d9a-4bce-a7f4-1b1e99dbb10a.roa
Signing time:             Fri 05 Dec 2025 01:40:09 +0000
ROA not before:           Fri 05 Dec 2025 01:40:09 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.46.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e3:a9:cd:a1:81:c9:e6:5e:53:47:00:bc:c7:8d:da:dc:e1:9a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 01:40:09 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=29e390c41eed4a80599786bb2af0fb7f2094e3b20c4846bd8a274d1a50d15d1a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:98:e3:37:98:97:41:bb:64:76:0e:c2:f3:55:
                    7c:9b:c9:50:e7:02:21:f1:04:9d:10:24:bb:19:10:
                    92:cc:63:0e:7d:4d:41:9b:a2:e5:4c:d9:51:8c:48:
                    db:f9:33:f9:e0:42:75:16:46:50:97:0e:7e:18:b2:
                    a3:bc:6e:21:dc:af:3a:84:33:62:66:88:54:fe:fd:
                    4d:7b:4b:61:98:86:71:df:42:ba:f4:d5:5b:25:33:
                    db:b1:8a:b4:12:84:5d:4f:dc:9d:df:23:d7:d1:09:
                    76:9e:72:b3:6e:99:4b:39:00:84:0e:41:a9:24:1a:
                    55:ae:ff:78:ca:26:67:1c:b7:3f:f7:7b:2b:e9:0b:
                    ca:78:04:8e:df:ac:71:33:33:d5:c5:ad:48:c3:96:
                    bf:1e:90:97:69:f8:54:b4:39:dd:6c:84:5f:a4:a8:
                    70:d7:5d:7c:ad:32:54:b2:c9:e5:d8:2a:1c:10:19:
                    ae:c2:3c:0e:dd:30:7e:d7:78:1c:74:f8:61:02:5e:
                    ed:a0:b2:ea:eb:59:cf:1a:d0:7e:44:52:09:48:80:
                    f7:d4:56:0c:4d:a0:23:c6:65:a9:56:af:82:75:47:
                    9e:67:cb:ff:ad:99:eb:10:9b:35:77:c9:46:a2:9a:
                    54:03:08:1b:05:98:89:b4:0d:49:c3:55:71:27:d7:
                    e0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:86:18:DD:76:59:A0:53:C5:5F:4A:49:9A:D9:7A:59:BF:D0:7B:87
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6d31808-7d9a-4bce-a7f4-1b1e99dbb10a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:38:0c:d3:cb:b6:01:e9:af:ed:4f:46:a6:bf:1d:57:bc:8b:
         cb:e6:12:23:64:a7:e3:01:fa:e9:6f:8f:04:9b:7c:89:fa:64:
         7b:01:bd:42:49:84:10:92:12:9c:f3:28:a1:28:d9:25:7d:7f:
         96:3f:f3:1b:5f:48:96:16:bd:e2:50:03:af:65:33:14:c3:15:
         58:fd:a3:aa:67:c8:4c:6a:65:ca:64:ea:2f:30:fe:2e:6d:a5:
         eb:7f:4c:c9:56:4b:2a:85:1c:3e:11:0c:da:7e:4a:a1:10:81:
         ac:f1:52:1b:19:29:21:7b:bf:ce:47:7f:57:ab:36:9c:a6:ab:
         16:db:55:b9:d6:4e:61:b6:50:d8:bd:f6:52:1b:72:7a:6a:f4:
         93:01:33:fb:fa:22:47:02:1c:4a:db:dc:5c:88:d3:50:c2:89:
         0b:ac:92:6a:03:c1:f8:ea:90:88:8d:18:a2:15:0d:91:1f:0f:
         04:e8:9c:c9:3c:d1:ec:e4:c0:ea:80:6d:e2:e1:d6:f0:40:f2:
         a2:45:b5:7e:4b:c7:44:02:05:a0:7e:67:9a:bf:0f:3c:63:5b:
         69:0d:b1:e9:e6:20:02:25:bc:ff:6c:20:e2:25:cf:9d:59:ea:
         dd:c8:a9:1e:ec:71:9e:e2:86:00:3d:e3:a0:3d:ed:77:1a:d5:
         49:21:7e:6b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPuOpzaGByeZeU0cAvMeN2tzhmjswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA1MDE0MDA5WhcNMjYwMzA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyOWUzOTBjNDFlZWQ0YTgwNTk5Nzg2YmIyYWYwZmI3ZjIw
OTRlM2IyMGM0ODQ2YmQ4YTI3NGQxYTUwZDE1ZDFhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDemOM3mJdBu2R2DsLzVXybyVDnAiHxBJ0QJLsZEJLMYw59
TUGbouVM2VGMSNv5M/ngQnUWRlCXDn4YsqO8biHcrzqEM2JmiFT+/U17S2GYhnHf
Qrr01VslM9uxirQShF1P3J3fI9fRCXaecrNumUs5AIQOQakkGlWu/3jKJmcctz/3
eyvpC8p4BI7frHEzM9XFrUjDlr8ekJdp+FS0Od1shF+kqHDXXXytMlSyyeXYKhwQ
Ga7CPA7dMH7XeBx0+GECXu2gsurrWc8a0H5EUglIgPfUVgxNoCPGZalWr4J1R55n
y/+tmesQmzV3yUaimlQDCBsFmIm0DUnDVXEn1+C7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtoYY3XZZoFPFX0pJmtl6Wb/Qe4cwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2E2ZDMxODA4LTdkOWEtNGJjZS1hN2Y0LTFiMWU5OWRiYjEwYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0LrYwDQYJKoZIhvcNAQELBQADggEBABA4DNPLtgHpr+1PRqa/HVe8i8vm
EiNkp+MB+ulvjwSbfIn6ZHsBvUJJhBCSEpzzKKEo2SV9f5Y/8xtfSJYWveJQA69l
MxTDFVj9o6pnyExqZcpk6i8w/i5tpet/TMlWSyqFHD4RDNp+SqEQgazxUhsZKSF7
v85Hf1erNpymqxbbVbnWTmG2UNi99lIbcnpq9JMBM/v6IkcCHErb3FyI01DCiQus
kmoDwfjqkIiNGKIVDZEfDwTonMk80ezkwOqAbeLh1vBA8qJFtX5Lx0QCBaB+Z5q/
DzxjW2kNsenmIAIlvP9sIOIlz51Z6t3IqR7scZ7ihgA946A97Xca1Ukhfms=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:10:30 2025 by rpki-client