This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c18648e0-13bc-44d9-9590-7470b8934b71.roa
File:                     c18648e0-13bc-44d9-9590-7470b8934b71.roa (raw, json)
Hash identifier:          CE5y2iZaTaYYKP6mGHUbAM/4D53wjCm2SdcotO5JjgQ=
Subject key identifier:   2B:2F:A0:16:8A:57:6C:96:B5:04:D5:DA:2C:9E:B8:15:EC:C6:8A:EC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3F6BED2523DED89283E305DCBDF8F2843376A586
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c18648e0-13bc-44d9-9590-7470b8934b71.roa
Signing time:             Fri 14 Nov 2025 00:20:10 +0000
ROA not before:           Fri 14 Nov 2025 00:20:10 +0000
ROA not after:            Fri 19 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6b:ed:25:23:de:d8:92:83:e3:05:dc:bd:f8:f2:84:33:76:a5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 14 00:20:10 2025 GMT
            Not After : Dec 19 23:59:59 2025 GMT
        Subject: serialNumber=cec053ec4f0bd17bbc27f06fd272aaf233995c87e83030d71f57a249ba573312, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f1:db:a5:15:6e:99:e4:31:fe:5b:13:9f:99:
                    7e:13:b7:cf:33:49:43:bb:17:4e:ee:34:eb:91:43:
                    8e:e3:a2:5c:8f:22:6a:d2:db:8c:c7:2b:aa:2d:41:
                    1c:ae:4c:35:88:f2:4a:23:71:5e:26:a2:a1:73:7e:
                    9e:13:39:0b:27:5e:0a:53:68:63:23:ff:bf:5f:f4:
                    e1:1b:5e:7e:b6:54:c7:a1:3a:55:39:9c:0c:8b:9a:
                    1c:7e:90:67:c9:af:3b:65:c8:f6:76:88:4d:a7:4a:
                    c8:58:a6:c0:60:ce:37:33:00:9c:eb:12:92:e2:97:
                    d4:9d:73:2b:03:53:f0:d3:1b:fe:b6:f7:06:2d:fc:
                    5b:79:66:bd:99:f6:64:0c:4d:d3:28:0a:f3:6c:e0:
                    53:89:3f:91:27:5f:6b:90:23:8d:f2:ea:4a:d4:21:
                    d1:30:70:5f:9e:c7:a4:f4:da:5c:ef:64:e9:85:7a:
                    76:59:ed:c5:f8:f2:bd:fd:17:a2:c1:a2:2e:9b:60:
                    4c:68:05:a6:7a:fd:32:60:03:81:ed:ea:0d:d7:8e:
                    35:c2:11:e0:a7:af:fc:ef:81:65:c9:8a:d5:be:23:
                    0e:87:b2:fc:a2:ee:ee:b0:74:f8:68:77:4c:08:66:
                    f4:3a:15:17:63:8b:00:c1:42:29:a8:48:86:c7:ec:
                    6f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2F:A0:16:8A:57:6C:96:B5:04:D5:DA:2C:9E:B8:15:EC:C6:8A:EC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c18648e0-13bc-44d9-9590-7470b8934b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:bf:c8:13:f1:40:d6:99:9f:a0:22:8b:90:2b:56:bb:d0:b7:
         3a:cf:7f:e0:d1:88:71:3e:a7:d5:33:f5:ed:52:fd:44:fb:db:
         b6:2e:7b:30:22:73:8c:84:3d:b5:09:f2:64:bb:3f:53:7f:6c:
         1c:66:0f:f3:c7:14:81:c6:c5:2c:41:20:96:73:0d:45:70:15:
         99:ad:0d:94:ac:95:80:cc:f8:02:49:73:85:30:37:52:58:29:
         01:c8:78:e0:17:d3:f0:aa:1f:96:07:5f:d5:ff:47:fb:0f:64:
         45:1e:25:38:d0:12:06:58:ab:88:55:1b:d0:de:62:7d:13:9b:
         aa:82:82:cd:d6:ff:82:49:b1:f0:7c:cb:ae:9a:85:8f:79:fb:
         4c:21:99:8e:dc:1d:e2:24:da:a1:d4:70:05:9a:cd:7f:69:e3:
         c6:43:42:3e:c4:8b:98:4e:30:dd:fd:b3:f5:73:51:73:28:41:
         cf:0d:64:71:a4:69:0a:c7:af:a3:02:44:aa:1e:e7:13:3e:27:
         92:f1:e6:a4:cd:33:8e:d1:23:cb:66:b9:b1:3c:99:af:a8:49:
         4d:e4:d9:28:7b:25:38:c9:5a:30:95:01:85:8a:b3:93:6d:6c:
         03:1a:23:0d:19:70:63:cf:de:a2:44:b9:c3:77:34:df:9f:3c:
         48:89:56:2b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUP2vtJSPe2JKD4wXcvfjyhDN2pYYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTE0MDAyMDEwWhcNMjUxMjE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZWMwNTNlYzRmMGJkMTdiYmMyN2YwNmZkMjcyYWFmMjMz
OTk1Yzg3ZTgzMDMwZDcxZjU3YTI0OWJhNTczMzEyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDP8dulFW6Z5DH+WxOfmX4Tt88zSUO7F07uNOuRQ47jolyP
ImrS24zHK6otQRyuTDWI8kojcV4moqFzfp4TOQsnXgpTaGMj/79f9OEbXn62VMeh
OlU5nAyLmhx+kGfJrztlyPZ2iE2nSshYpsBgzjczAJzrEpLil9SdcysDU/DTG/62
9wYt/Ft5Zr2Z9mQMTdMoCvNs4FOJP5EnX2uQI43y6krUIdEwcF+ex6T02lzvZOmF
enZZ7cX48r39F6LBoi6bYExoBaZ6/TJgA4Ht6g3XjjXCEeCnr/zvgWXJitW+Iw6H
svyi7u6wdPhod0wIZvQ6FRdjiwDBQimoSIbH7G93AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKy+gFopXbJa1BNXaLJ64FezGiuwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2MxODY0OGUwLTEzYmMtNDRkOS05NTkwLTc0NzBiODkzNGI3MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEDrqwwDQYJKoZIhvcNAQELBQADggEBADm/yBPxQNaZn6Aii5ArVrvQtzrP
f+DRiHE+p9Uz9e1S/UT727YuezAic4yEPbUJ8mS7P1N/bBxmD/PHFIHGxSxBIJZz
DUVwFZmtDZSslYDM+AJJc4UwN1JYKQHIeOAX0/CqH5YHX9X/R/sPZEUeJTjQEgZY
q4hVG9DeYn0Tm6qCgs3W/4JJsfB8y66ahY95+0whmY7cHeIk2qHUcAWazX9p48ZD
Qj7Ei5hOMN39s/VzUXMoQc8NZHGkaQrHr6MCRKoe5xM+J5Lx5qTNM47RI8tmubE8
ma+oSU3k2Sh7JTjJWjCVAYWKs5NtbAMaIw0ZcGPP3qJEucN3NN+fPEiJVis=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:32:29 2025 by rpki-client