This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77146ab-d97d-4dc3-b1f1-87a7e33c24ed.roa
File:                     b77146ab-d97d-4dc3-b1f1-87a7e33c24ed.roa (raw, json)
Hash identifier:          MrgMkieIkYQrQFPeUwn4PFg9BTtAAU1bl8/WSMafdaE=
Subject key identifier:   AF:5A:97:5D:54:EC:49:5B:89:A2:32:12:BA:4B:F7:42:15:6D:CC:CE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2BB4B07E85ACD36EF0CF2D06DB55411038E25DCD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77146ab-d97d-4dc3-b1f1-87a7e33c24ed.roa
Signing time:             Sun 16 Nov 2025 00:41:17 +0000
ROA not before:           Sun 16 Nov 2025 00:41:17 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.192.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b4:b0:7e:85:ac:d3:6e:f0:cf:2d:06:db:55:41:10:38:e2:5d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 16 00:41:17 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=a1c0577fc5b845267ddb26428a84d31f9b2867d6f945afde070144576d58c804, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:b8:13:2a:d6:d1:db:8e:5d:4d:f7:ea:ef:
                    4d:5f:f8:18:9d:04:53:c5:76:b3:d5:d6:7f:93:40:
                    b3:e5:c3:b4:c1:02:8a:90:dc:37:76:be:5c:a2:b3:
                    bd:87:f9:7b:37:bc:f8:dd:7f:35:55:7d:f9:f3:cf:
                    42:c5:8b:7c:26:ec:09:ec:8a:bb:60:7a:23:54:0d:
                    c7:ae:c3:ba:da:17:08:c0:30:1a:21:1d:b0:a3:a2:
                    30:e5:a3:b1:67:e2:f6:ad:c0:75:73:99:d8:71:cd:
                    9e:a9:9f:9f:27:6c:be:4f:59:46:d4:bf:da:44:39:
                    2e:31:82:1f:34:f6:55:b3:58:26:cd:eb:bc:89:60:
                    f3:a7:1a:b4:36:2c:b6:2a:74:88:0d:7a:d4:a1:74:
                    3c:3f:4e:32:25:a9:4e:04:93:b7:22:c7:71:d8:85:
                    96:d9:a9:1f:5c:18:d8:32:1d:c2:c5:9c:19:72:98:
                    2c:92:01:f5:50:87:ef:37:90:93:5f:50:9c:11:5d:
                    8c:d3:fe:68:be:93:8a:81:63:d8:11:04:6e:5e:f2:
                    24:fe:34:b5:d5:a6:5f:7b:a7:01:ec:58:41:48:d2:
                    39:2a:b0:a0:eb:69:60:09:34:2b:b7:68:ff:cd:1f:
                    2d:ad:e9:8e:cc:15:aa:fb:96:0b:bf:43:fb:6c:99:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5A:97:5D:54:EC:49:5B:89:A2:32:12:BA:4B:F7:42:15:6D:CC:CE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77146ab-d97d-4dc3-b1f1-87a7e33c24ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.192.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:ef:51:a8:41:f6:0b:49:87:f4:a9:12:a9:8a:7e:fc:08:
         4d:be:a5:f6:5e:62:50:95:1f:87:83:c0:4c:31:f7:8e:db:4a:
         1b:45:01:97:52:fe:1c:57:9e:82:9e:b6:e9:9c:82:17:d3:38:
         1c:32:a2:8f:c8:25:87:43:69:1f:1e:df:61:b7:03:de:27:e5:
         fe:63:79:06:e4:6c:d6:dd:47:33:c7:75:ad:de:14:d7:94:3b:
         8f:98:b9:ac:b7:93:a0:fc:ff:23:7c:6b:72:7d:ce:32:16:91:
         83:49:87:f5:9e:6c:a4:91:12:73:49:73:b7:27:61:03:6a:c8:
         d7:b1:7f:09:d6:6d:f1:35:0e:84:95:5a:c9:be:fb:6e:85:8f:
         ae:2c:e7:63:24:a9:ca:08:02:32:ac:f3:7c:5c:40:9d:e2:5f:
         d1:46:9d:19:98:ae:3d:af:36:2d:f0:24:e4:53:35:0d:3b:08:
         e5:f0:46:46:3f:26:a5:0d:05:7d:73:a0:5f:b9:3b:93:5d:2e:
         80:a7:7d:f3:32:d5:65:e8:4d:b5:70:a1:cb:f6:6b:43:3b:37:
         61:bc:12:54:57:2b:7e:93:a7:92:9f:d4:e9:b6:87:34:50:a6:
         d1:fd:f5:24:1e:56:19:09:52:2a:e2:90:c1:b7:bf:2d:46:5d:
         74:c8:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:45:00 2025 by rpki-client