This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0ceaf2e-3d55-4e18-95db-0bbe4ce5c548.roa
File:                     c0ceaf2e-3d55-4e18-95db-0bbe4ce5c548.roa (raw, json)
Hash identifier:          3ortIZJ7SGaKLZwR8204zXOsfCxxWh1tM9Xl3WZqjEw=
Subject key identifier:   E5:A9:7D:EF:84:FA:46:7A:B8:1B:1D:4C:FA:AD:FB:9A:A5:B0:BF:22
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       453150581850BFADCDCCB348916BF486DEC629ED
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0ceaf2e-3d55-4e18-95db-0bbe4ce5c548.roa
Signing time:             Fri 05 Dec 2025 01:50:06 +0000
ROA not before:           Fri 05 Dec 2025 01:50:06 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:31:50:58:18:50:bf:ad:cd:cc:b3:48:91:6b:f4:86:de:c6:29:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  5 01:50:06 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=0704c568b57e4712ddfeba7fcf187c2554a90b03e96cc02cac0b0d3d6ed32358, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:c5:f9:13:d4:10:9b:63:4d:e8:92:fb:e6:
                    a8:1c:bf:60:30:77:c5:8b:e5:78:74:ca:8d:8b:58:
                    39:c6:78:c0:24:54:a2:a5:f8:cb:01:e0:b0:f3:51:
                    91:83:8b:40:db:df:55:b9:2a:3e:ba:74:ba:b4:47:
                    89:f4:e3:9e:4f:b5:13:76:2c:2a:0d:44:a5:3b:42:
                    0f:d3:5c:e8:f4:f4:a1:4d:40:33:43:40:28:c0:cc:
                    5f:59:fb:6d:81:b8:ea:42:98:5d:54:b5:5e:ac:96:
                    9b:bf:ab:70:29:88:1c:8d:4b:a1:cb:86:26:a7:ac:
                    4f:d2:4f:77:dd:49:96:e3:67:03:d3:a2:8b:e2:0c:
                    f4:da:6d:4b:5b:90:bc:45:9d:d3:f8:78:98:c2:b4:
                    d3:a8:dd:59:b3:28:ae:a7:70:d1:70:0c:5e:fb:41:
                    78:59:09:6d:35:ca:df:f1:37:6f:db:91:8f:fa:28:
                    7d:b6:02:26:e5:58:ea:cd:a4:f4:c0:b5:b5:46:8d:
                    2f:69:34:48:aa:86:bd:23:b5:00:c7:38:c9:0e:c0:
                    7b:ca:e4:e8:a7:36:f5:d9:85:e1:db:ad:62:9a:5b:
                    3a:ea:70:0e:2f:52:4e:d2:36:79:fc:c6:98:59:4e:
                    24:9a:8f:80:f1:9a:57:c0:4d:03:fd:6d:cc:f1:d1:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A9:7D:EF:84:FA:46:7A:B8:1B:1D:4C:FA:AD:FB:9A:A5:B0:BF:22
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0ceaf2e-3d55-4e18-95db-0bbe4ce5c548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:ca:52:d5:37:7e:cf:ce:b2:fd:c3:f7:26:13:83:30:00:00:
         4c:a4:7d:6d:f8:3c:1e:db:85:d8:f7:e4:92:a3:d3:64:61:22:
         4a:b9:95:00:3f:b2:be:8c:e7:14:ae:c3:ef:ae:12:bc:32:4d:
         12:b8:9e:b0:31:8f:50:b1:02:e3:2c:f7:1c:b5:a7:71:dd:90:
         4e:fe:da:03:0f:80:b0:3e:fb:31:78:5e:01:19:8c:07:2c:19:
         56:d5:b9:0a:4e:3c:3a:77:06:68:9c:c3:f2:cb:12:77:2e:d8:
         b6:57:04:55:e4:de:4d:05:76:f0:7a:a4:58:ad:67:21:51:c6:
         dd:9f:19:d6:ab:c1:f0:28:83:23:39:87:f8:61:c5:6a:e6:f3:
         1c:ad:5a:91:f3:bd:f0:b5:3c:04:f9:fa:d8:42:6a:3b:f4:ea:
         1b:25:c5:9d:f2:4a:b9:2a:4f:25:3e:4b:8d:ac:b4:ab:fc:91:
         0d:57:f7:0d:3e:bc:26:7d:c2:29:9a:77:3b:af:60:f5:07:c0:
         27:6f:f3:15:a9:80:b6:2b:3f:a3:b5:ed:c5:e0:7c:42:7d:ac:
         1f:17:e0:73:5c:aa:74:68:5e:7a:9f:b1:87:7e:99:03:8f:35:
         b5:89:a6:0c:59:73:20:1b:ea:22:0e:1e:4c:e2:81:28:48:ed:
         67:28:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:48 2025 by rpki-client