This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b46d64dc-fbee-452d-8a2c-f23e72c4feac.roa
File:                     b46d64dc-fbee-452d-8a2c-f23e72c4feac.roa (raw, json)
Hash identifier:          3l5o3O9zCgsQnNtyogmfEWi03o3h3K1o7/hEWs67y+c=
Subject key identifier:   97:81:38:7B:43:C3:BF:C9:36:93:E8:62:97:ED:BE:3D:21:B3:5A:92
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0D60FCE02AECF2CB816C80CCF9B395B7A43D20
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b46d64dc-fbee-452d-8a2c-f23e72c4feac.roa
Signing time:             Tue 02 Dec 2025 01:00:07 +0000
ROA not before:           Tue 02 Dec 2025 01:00:07 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:60:fc:e0:2a:ec:f2:cb:81:6c:80:cc:f9:b3:95:b7:a4:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  2 01:00:07 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=3b5829090f1d4b68cc79c92e9eb430153dfaf93763a4f81e07bf641153a855eb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:2e:4f:46:11:b4:0b:99:a6:37:a2:fe:62:
                    f6:73:30:c7:0c:f8:16:96:78:51:60:f4:c5:f2:dd:
                    4e:10:10:87:d2:de:c3:b3:8c:7a:ef:5a:3b:3a:cc:
                    4c:bd:8f:ac:a8:21:5d:4f:5e:7a:e2:b5:e6:c6:93:
                    7a:3c:64:e0:0d:e9:e8:d9:58:69:6a:b1:c5:dd:99:
                    d6:37:a5:26:67:34:7a:3f:25:1d:0e:f2:3b:26:d9:
                    5f:47:ac:61:c5:c5:a7:08:49:0b:7f:f8:d5:3a:cd:
                    84:fc:49:c4:6a:a1:0a:17:e7:39:29:c5:a8:22:e6:
                    8c:27:2a:a7:4d:a4:54:06:b3:96:62:ae:d8:82:da:
                    c6:82:42:68:1c:2d:f9:ce:d8:73:5d:50:9a:5b:f1:
                    49:b8:ce:45:30:c4:c0:40:7a:00:f1:55:7b:34:9c:
                    16:d7:5a:eb:b5:79:74:f0:cd:45:e0:be:89:75:3d:
                    7c:f1:7e:17:a7:29:72:d9:99:1a:85:7d:1a:c7:47:
                    1f:ac:dc:50:13:69:a5:46:41:5a:56:a4:e5:c7:80:
                    ca:29:0d:61:0f:8c:88:d6:c3:b4:15:48:b0:19:af:
                    e3:c5:bc:88:fa:61:cf:ec:21:67:81:1f:96:5a:94:
                    2a:9f:53:0f:50:17:f2:8d:16:f7:e7:10:4e:2d:4c:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:81:38:7B:43:C3:BF:C9:36:93:E8:62:97:ED:BE:3D:21:B3:5A:92
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b46d64dc-fbee-452d-8a2c-f23e72c4feac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:fe:44:6f:94:b4:2a:58:ae:70:03:78:85:ba:ce:d2:18:86:
         45:67:ae:3c:b2:ae:7f:47:ae:f8:f0:76:cb:cf:d0:0f:5d:32:
         93:10:6e:e8:09:27:58:37:20:cb:21:ec:66:18:6b:61:6a:3f:
         58:11:62:04:3f:a1:44:5c:6b:5b:a4:65:b2:1b:e4:e6:b4:a5:
         1d:19:86:2c:ae:fa:fa:ac:8a:79:8f:43:a2:c0:8d:7e:a9:8a:
         5f:52:2e:86:6e:47:bc:28:4f:09:d9:73:5f:8b:a3:7f:c1:ea:
         22:71:9b:68:62:ad:5a:aa:72:3c:76:9d:a1:8e:ad:ab:73:eb:
         f6:63:ea:db:dd:fd:9d:a1:d9:fe:bb:80:4e:34:97:ed:20:9d:
         21:e6:61:48:21:9f:f4:8b:10:b3:49:16:a2:13:61:c7:a8:fe:
         fa:0e:b2:7f:b3:f4:92:61:53:a3:25:31:01:98:70:68:7d:41:
         06:0c:63:61:57:66:1b:23:17:63:12:37:70:4a:80:d1:82:73:
         16:45:98:f4:1a:1b:4f:c2:fe:fe:72:e1:2a:8d:71:0f:f3:aa:
         94:30:5d:01:5f:05:a4:ce:36:5d:54:1a:6b:eb:06:c5:b4:9a:
         8d:7e:85:3a:cb:1a:ff:82:4a:da:86:73:0c:48:86:ff:8d:10:
         e6:82:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:34:28 2025 by rpki-client