This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7f7a9ca-5814-4d9c-b0ba-df905f80f48d.roa
File:                     a7f7a9ca-5814-4d9c-b0ba-df905f80f48d.roa (raw, json)
Hash identifier:          A6GrhE+a1O62lJwUF/loYtavHJfnRSOY0b10Fs0HS18=
Subject key identifier:   03:7E:37:8F:C8:8B:5F:94:22:3A:E1:20:4F:4E:28:E1:5B:2E:2A:DF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5CA906C1AA28990F58117FDF0BF41D25DE99DEB6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7f7a9ca-5814-4d9c-b0ba-df905f80f48d.roa
Signing time:             Sat 22 Nov 2025 01:20:14 +0000
ROA not before:           Sat 22 Nov 2025 01:20:14 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a9:06:c1:aa:28:99:0f:58:11:7f:df:0b:f4:1d:25:de:99:de:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 22 01:20:14 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=03c1e44f621125d62dcbd02e1a24e451b69b374cb4195f67dd8fc823620f7647, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:43:8c:12:04:5e:91:cb:c4:59:00:13:b4:
                    09:9e:72:60:7b:a0:54:48:27:53:9a:38:41:26:19:
                    68:2b:f1:1e:e3:aa:24:52:74:7f:f9:a2:55:90:16:
                    fd:71:53:8f:91:9a:10:9d:91:15:f9:03:92:4c:c0:
                    43:92:35:5f:2a:77:8a:72:e6:a2:e8:4f:ed:7b:b4:
                    0d:4a:96:0e:72:54:48:00:e7:8e:44:07:e8:14:bc:
                    68:d2:f0:ec:89:7e:02:ff:3d:a7:09:60:94:42:e6:
                    04:fd:db:39:4e:07:ce:d8:6a:65:82:a0:00:87:11:
                    26:7f:92:90:de:83:3e:a0:83:d7:08:37:fb:b5:4b:
                    37:23:de:bc:5d:82:d8:a1:2d:76:42:53:3f:9b:10:
                    ae:0c:10:2a:ae:12:8d:6c:c3:c5:90:09:de:b5:27:
                    a8:05:aa:9c:98:25:7f:e7:ea:8b:87:08:38:92:77:
                    34:69:97:b6:6f:23:74:cc:c3:7a:67:53:7e:ca:d8:
                    d6:aa:a3:a2:c4:aa:95:40:5d:46:98:ec:58:34:18:
                    ef:32:d4:71:b0:c8:b2:58:80:51:bc:1e:25:bd:df:
                    2c:c2:1a:e5:bf:76:8a:3c:fc:15:89:2f:0f:72:5d:
                    32:1e:87:23:5a:a0:80:23:66:15:7f:ff:5a:98:84:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:37:8F:C8:8B:5F:94:22:3A:E1:20:4F:4E:28:E1:5B:2E:2A:DF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7f7a9ca-5814-4d9c-b0ba-df905f80f48d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:11:40:4a:56:fb:7a:80:e6:84:48:57:0c:c3:61:0e:27:5b:
         22:81:f6:fd:79:c0:74:83:f2:c2:f6:b3:94:de:5b:d4:08:de:
         cf:e8:4e:49:7f:64:36:97:f7:86:20:9e:ce:7a:6f:1b:21:44:
         fc:30:a8:ac:da:86:ec:4e:14:df:9d:60:ea:b0:d6:cd:f0:5a:
         32:ff:1b:7d:0f:a9:f3:d6:4a:4b:c1:0b:b8:f0:e5:55:a9:0c:
         e9:2c:e7:b4:d3:c2:5b:ba:46:10:e6:75:62:b3:33:11:e9:02:
         1b:8c:ff:7f:6a:3c:0c:2f:e2:09:fa:75:5a:b7:c3:04:40:e0:
         19:59:d5:ae:e1:93:4b:4a:83:ca:be:ec:1a:ce:0d:3a:d4:08:
         c2:1a:d7:12:11:dc:04:83:d0:1b:05:53:fd:b7:03:94:37:fd:
         0b:a2:96:b9:e7:e0:a9:cb:af:e2:a0:ef:7d:07:73:94:7e:76:
         91:fd:d5:32:86:4f:7c:12:c2:6e:a2:52:f6:ec:9c:98:ac:05:
         50:92:fa:e8:d1:31:fe:e5:3c:0f:1c:41:16:d3:42:80:d9:af:
         e4:d5:55:91:ed:30:44:b7:f9:7c:2a:4e:13:62:b0:08:2d:bc:
         9b:d0:50:2c:45:d9:0e:31:1e:91:2b:47:af:16:29:ea:d2:a0:
         a2:53:9d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:51:25 2025 by rpki-client