This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ad3e6b6b-4645-458a-9ce0-0d3280cc1a7e.roa
File:                     ad3e6b6b-4645-458a-9ce0-0d3280cc1a7e.roa (raw, json)
Hash identifier:          o6Q4xcRrq/kyRZXabUN83rjcwJDVN4AxlBl9WsxPogI=
Subject key identifier:   31:05:5F:78:A6:45:77:5F:76:C7:FE:8B:44:CE:1A:2F:FE:5F:DF:44
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       40E12581A5E956317C7AA4F2FDAA84016CFEFB9F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ad3e6b6b-4645-458a-9ce0-0d3280cc1a7e.roa
Signing time:             Fri 05 Dec 2025 01:31:04 +0000
ROA not before:           Fri 05 Dec 2025 01:31:04 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e1:25:81:a5:e9:56:31:7c:7a:a4:f2:fd:aa:84:01:6c:fe:fb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 01:31:04 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=91235e1aa9ed2bd3abe8cd82bd8268460ece2f607cc0387de88ef68fb9a480ec, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:67:01:6b:5d:ad:5c:22:90:bc:1d:24:63:
                    24:a1:46:57:a3:cc:a0:45:bf:64:c0:32:72:a5:ac:
                    20:c7:b6:4b:4d:03:9a:0c:70:5d:1e:bf:6e:c8:3d:
                    31:05:4b:46:f0:df:1c:aa:f7:02:cf:c1:d7:39:26:
                    6e:b9:f6:cb:04:60:23:ba:1c:85:ed:a6:d5:ff:16:
                    1a:a1:a9:39:20:d6:07:48:ab:eb:08:24:ac:4b:d6:
                    7e:22:9c:22:cc:1c:57:e6:2f:3a:f4:70:c8:a2:71:
                    d3:24:1e:77:13:67:93:ff:ee:f2:12:6a:f3:b5:eb:
                    ad:32:57:6e:72:27:c7:24:5d:7f:06:de:a2:c2:4c:
                    fc:d9:10:2b:ce:dc:cc:04:22:96:0e:e1:ee:4c:33:
                    f1:bb:ba:05:68:ac:2e:30:22:47:ac:43:3e:6a:4e:
                    6d:e0:f2:3b:67:dd:20:7c:fa:77:2d:68:1c:11:3a:
                    9d:f3:e7:6d:59:7d:17:05:c5:44:00:f3:83:f4:0f:
                    f5:21:53:ec:27:0b:dd:17:0e:01:74:30:4a:b6:40:
                    26:e7:2a:bf:10:86:ed:bc:2c:b8:bf:fa:d0:44:90:
                    8c:0f:b8:1c:56:74:7e:ec:8d:62:2c:ef:c7:bc:d9:
                    29:39:71:48:fe:bc:e3:18:58:18:74:19:5e:e2:ad:
                    b8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:05:5F:78:A6:45:77:5F:76:C7:FE:8B:44:CE:1A:2F:FE:5F:DF:44
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ad3e6b6b-4645-458a-9ce0-0d3280cc1a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:af:b3:2a:6a:f4:bb:ca:38:f5:d5:62:59:f5:7d:12:0d:65:
         27:db:aa:ea:cc:9a:73:ce:cb:32:05:18:fc:54:dd:92:cc:af:
         0f:79:28:08:ae:84:72:00:0c:43:28:e4:c7:30:96:f1:bc:93:
         37:61:88:b7:9a:55:e3:7e:ff:84:49:1a:22:ef:e6:f8:a0:eb:
         21:31:75:32:cd:63:72:2e:d8:95:0c:05:be:ed:bc:d9:d4:14:
         78:7b:f7:43:8a:e0:7a:f8:10:d1:64:a5:0d:26:e8:53:bc:f4:
         fb:73:12:fe:e6:97:f1:c2:8e:00:9a:ec:ff:74:29:68:98:d7:
         0b:3b:83:c5:3a:e4:0f:78:f3:ba:72:76:85:e7:e0:6c:df:c9:
         88:5e:30:14:04:d7:6e:4a:64:43:6a:cf:8b:2f:b1:e3:4a:77:
         9f:15:9f:ea:a1:28:7a:66:eb:2f:ac:d4:a0:e6:71:70:95:f7:
         5d:ca:33:39:ab:bc:e5:f4:ad:e8:27:90:ae:67:4c:b7:03:88:
         a1:14:e0:e2:21:4e:48:06:15:ed:26:c4:45:e7:d0:6f:55:8c:
         d9:23:71:21:64:4e:cc:c4:bd:80:69:62:4e:8a:56:58:22:2a:
         5b:65:01:4d:05:ae:2a:73:c1:c8:73:24:7d:c9:9b:9c:28:88:
         8d:7a:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:51:25 2025 by rpki-client