This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2a4f1f1-2e58-4e1e-b6a9-5e0be3a4abb7.roa
File:                     b2a4f1f1-2e58-4e1e-b6a9-5e0be3a4abb7.roa (raw, json)
Hash identifier:          40j00VXqhrAM68SnfF4J/uhwTXCwo92PDEBmti0R6Hw=
Subject key identifier:   5A:91:24:CA:19:E6:79:12:13:61:80:5D:2B:05:DB:95:B2:B7:06:C6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6464F443F6426AFF4C3426CC253682EFAECA2E93
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2a4f1f1-2e58-4e1e-b6a9-5e0be3a4abb7.roa
Signing time:             Fri 05 Dec 2025 01:50:44 +0000
ROA not before:           Fri 05 Dec 2025 01:50:44 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.46.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:64:f4:43:f6:42:6a:ff:4c:34:26:cc:25:36:82:ef:ae:ca:2e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 01:50:44 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=9e228b63ec4d58c7e10f53d1d85f527045cdde8006341919b571292042b3692c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:da:23:8c:3d:e2:3f:00:ee:db:2b:4b:13:
                    19:b2:24:46:c4:7f:35:b0:5f:c4:d0:0d:ed:04:af:
                    d1:1c:ba:a7:80:78:ef:46:0b:a1:08:8c:2d:ae:de:
                    62:6c:39:61:af:c6:8c:6a:1a:4d:2d:a2:49:fd:c1:
                    a4:cc:f4:c7:8e:50:07:5e:38:40:9f:0d:a9:53:dd:
                    3f:bd:b4:c0:68:92:c9:a8:c4:50:7c:f8:21:1f:f4:
                    6f:11:3d:a2:d5:db:49:03:20:3e:7e:c3:00:ab:64:
                    64:9e:e0:40:55:f8:af:1d:7d:4c:6a:85:a2:97:d2:
                    67:60:3d:f4:6f:ad:60:6c:92:21:d2:59:e7:a2:45:
                    9c:d0:15:d5:78:db:18:ad:b3:0c:cd:c6:f9:b2:0a:
                    64:fb:95:56:0e:c6:63:0d:c6:2f:90:c4:f0:a7:82:
                    c2:a9:e9:d8:80:c2:62:64:87:c9:15:ae:46:ce:53:
                    38:1d:d1:c5:58:b8:f4:d4:0b:f4:39:e0:f7:4b:eb:
                    db:ff:35:98:52:e6:fe:46:e9:ea:7c:86:f1:a6:15:
                    35:91:7a:36:63:d2:8d:af:86:ad:fc:08:5a:68:db:
                    a5:fa:e8:21:25:d8:cd:dd:fa:9b:7d:fc:fb:73:63:
                    36:f8:6a:96:b8:2d:a3:06:85:b1:63:95:db:9b:23:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:91:24:CA:19:E6:79:12:13:61:80:5D:2B:05:DB:95:B2:B7:06:C6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2a4f1f1-2e58-4e1e-b6a9-5e0be3a4abb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:68:6d:f3:49:5b:52:d8:12:75:67:71:d0:61:c1:7c:38:94:
         bd:fb:16:5c:ca:20:21:3e:54:34:a6:61:9d:ed:e0:af:e6:c3:
         f1:16:2e:7c:3b:18:7d:40:a0:71:22:40:e3:2b:4d:52:56:34:
         8f:9b:b7:3a:e0:cd:d9:5f:9e:cb:0f:c7:06:b6:3e:cd:88:c5:
         eb:37:6e:d9:ab:0b:26:17:b6:79:11:14:56:f5:37:aa:59:3b:
         78:e1:28:22:f3:e8:d1:1e:a3:28:5e:f2:f8:c3:f0:c7:fc:03:
         77:9b:cc:5e:d4:10:1c:f9:8f:eb:c6:ff:12:75:98:df:a6:8a:
         73:c7:56:bc:e3:26:2c:0e:e5:fd:72:67:4a:de:5e:08:4e:97:
         44:42:1d:8f:3b:fc:2d:0c:57:3a:a3:0a:95:b2:d2:86:36:8e:
         2d:e3:74:8a:15:00:68:cb:68:21:65:8f:11:eb:d6:7d:d3:d7:
         9f:9d:d1:10:e4:21:01:6d:2d:45:1c:6a:82:f8:75:e8:86:6f:
         72:ef:b4:4a:41:3e:48:a6:ac:f0:cc:21:b0:a1:63:3e:fc:2e:
         9d:5e:30:c1:88:ca:5f:7c:71:77:98:44:f5:2f:90:28:86:66:
         67:1f:eb:cd:c9:14:6a:34:ee:6f:22:b0:3b:9c:46:ed:0e:58:
         cd:0a:16:bb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZGT0Q/ZCav9MNCbMJTaC767KLpMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA1MDE1MDQ0WhcNMjYwMzA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZTIyOGI2M2VjNGQ1OGM3ZTEwZjUzZDFkODVmNTI3MDQ1
Y2RkZTgwMDYzNDE5MTliNTcxMjkyMDQyYjM2OTJjMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2PtojjD3iPwDu2ytLExmyJEbEfzWwX8TQDe0Er9EcuqeA
eO9GC6EIjC2u3mJsOWGvxoxqGk0tokn9waTM9MeOUAdeOECfDalT3T+9tMBoksmo
xFB8+CEf9G8RPaLV20kDID5+wwCrZGSe4EBV+K8dfUxqhaKX0mdgPfRvrWBskiHS
WeeiRZzQFdV42xitswzNxvmyCmT7lVYOxmMNxi+QxPCngsKp6diAwmJkh8kVrkbO
Uzgd0cVYuPTUC/Q54PdL69v/NZhS5v5G6ep8hvGmFTWRejZj0o2vhq38CFpo26X6
6CEl2M3d+pt9/PtzYzb4apa4LaMGhbFjldubIw49AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWpEkyhnmeRITYYBdKwXblbK3BsYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2IyYTRmMWYxLTJlNTgtNGUxZS1iNmE5LTVlMGJlM2E0YWJiNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI0LrgwDQYJKoZIhvcNAQELBQADggEBADhobfNJW1LYEnVncdBhwXw4lL37
FlzKICE+VDSmYZ3t4K/mw/EWLnw7GH1AoHEiQOMrTVJWNI+btzrgzdlfnssPxwa2
Ps2Ixes3btmrCyYXtnkRFFb1N6pZO3jhKCLz6NEeoyhe8vjD8Mf8A3ebzF7UEBz5
j+vG/xJ1mN+minPHVrzjJiwO5f1yZ0reXghOl0RCHY87/C0MVzqjCpWy0oY2ji3j
dIoVAGjLaCFljxHr1n3T15+d0RDkIQFtLUUcaoL4deiGb3LvtEpBPkimrPDMIbCh
Yz78Lp1eMMGIyl98cXeYRPUvkCiGZmcf683JFGo07m8isDucRu0OWM0KFrs=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:56:48 2025 by rpki-client