This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc38dbda-2f53-4c4c-b5b6-8e1e0bca7197.roa
File:                     bc38dbda-2f53-4c4c-b5b6-8e1e0bca7197.roa (raw, json)
Hash identifier:          hUwEzpF4oPpDTueTqR7Gv84PseBMIbUHCJl0R4bUah4=
Subject key identifier:   1D:35:1B:82:56:8C:1F:3E:CE:79:F6:25:1D:A2:BB:00:20:8D:1F:4E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       05820FFDD526A07F51C498038F83D8EAFD8687F1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc38dbda-2f53-4c4c-b5b6-8e1e0bca7197.roa
Signing time:             Wed 12 Nov 2025 02:51:24 +0000
ROA not before:           Wed 12 Nov 2025 02:51:24 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.228.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:82:0f:fd:d5:26:a0:7f:51:c4:98:03:8f:83:d8:ea:fd:86:87:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 12 02:51:24 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=34bed749f0e7dae014625aec51c899238b765ad4297dbb753343a553ec6532df, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:c0:b4:ac:b5:95:41:43:67:33:e7:74:a7:
                    3b:dd:d3:4a:3e:f0:a8:9d:f5:a2:8a:e7:f5:6c:3e:
                    e2:41:6b:72:47:2d:d2:0d:38:e8:51:3a:41:63:29:
                    ca:e4:57:6e:a6:26:df:4b:db:f4:33:25:7c:b8:1d:
                    b3:5f:e0:38:b2:0b:57:6b:2e:f7:1d:7f:0f:a4:c6:
                    e7:af:6e:a2:db:6a:a9:9f:69:25:9a:ad:02:42:76:
                    2f:fc:5b:c6:33:43:24:84:6d:c6:17:38:12:1c:95:
                    c1:09:56:26:d5:b3:4c:4a:e5:8d:4a:1b:b1:a1:1f:
                    9a:03:96:c8:80:76:58:0f:cf:a8:98:cf:e4:48:01:
                    c5:1d:84:6b:8f:88:51:39:49:32:e5:7e:61:2a:c4:
                    d4:16:56:df:92:44:7a:de:d6:de:f3:18:3b:c5:d4:
                    49:6c:54:ab:da:39:56:a4:a7:9f:1f:d1:30:52:bf:
                    3c:f0:1c:df:0b:ea:57:5f:e8:09:da:f0:af:e4:f3:
                    fc:59:eb:33:4a:13:18:ad:96:8e:a5:d0:7d:3d:8c:
                    2a:69:be:13:c2:a5:f7:b9:29:7d:05:be:6a:7a:62:
                    bf:ee:38:7c:dc:06:8d:c4:1b:7e:8a:0d:28:cf:9a:
                    55:d9:6c:20:19:30:1d:53:f2:f5:ba:2a:4d:5f:6a:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:35:1B:82:56:8C:1F:3E:CE:79:F6:25:1D:A2:BB:00:20:8D:1F:4E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc38dbda-2f53-4c4c-b5b6-8e1e0bca7197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.228.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:9c:36:39:80:b7:8e:67:a6:2c:5a:93:d2:4e:bb:ae:42:12:
         06:f9:3d:04:3a:b3:ea:5b:e0:ac:a9:3e:03:60:61:e1:e9:36:
         1e:eb:7f:27:e6:b9:dc:1c:70:44:bd:b9:55:6f:96:8e:17:67:
         57:f8:12:7c:c1:db:38:bc:cf:39:d1:6c:b2:1e:af:22:c7:cc:
         71:a3:db:4c:96:dd:ed:e4:13:58:46:dc:13:d0:9e:4a:4d:db:
         3d:2d:b1:7b:d2:bd:c0:85:7c:10:7b:8f:02:a4:fa:c9:66:36:
         40:44:80:98:54:48:00:f7:8d:d5:ae:58:c5:e2:34:2d:e0:ac:
         f4:93:78:8c:df:55:5c:79:6d:ce:1d:19:3c:64:68:a5:3c:c2:
         3e:cf:1c:89:83:39:f5:0c:c0:cd:77:e9:af:59:e6:86:86:5f:
         14:a7:ff:cb:22:27:a6:78:ec:bb:b4:f6:a3:54:6b:64:6a:43:
         ec:64:66:f2:04:3d:93:a0:51:55:c6:ab:eb:83:d2:02:05:c8:
         fe:43:cd:c9:ef:a2:12:64:57:b7:a2:e9:94:d2:4e:a7:77:55:
         bd:91:39:00:bb:50:9b:8d:e9:3d:45:7f:4b:84:e8:be:00:c3:
         49:79:74:b6:e4:b5:ff:3c:7a:34:1a:5a:55:a1:42:91:c5:83:
         48:24:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:52:14 2025 by rpki-client