This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3552eea-b91d-4f9c-a9b1-7e9edfcf6707.roa
File:                     c3552eea-b91d-4f9c-a9b1-7e9edfcf6707.roa (raw, json)
Hash identifier:          w6whdM1cZu70TLQz0T/g5a2GIAN9eF1w63O1v27xdSE=
Subject key identifier:   7C:B2:38:2A:F3:08:F3:4C:B4:11:E6:15:49:71:48:3A:BB:1A:FD:86
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       32A7BD41C7BCD5EA4EFA097D78830D95FE102988
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3552eea-b91d-4f9c-a9b1-7e9edfcf6707.roa
Signing time:             Sat 29 Nov 2025 01:52:01 +0000
ROA not before:           Sat 29 Nov 2025 01:52:01 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.145.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a7:bd:41:c7:bc:d5:ea:4e:fa:09:7d:78:83:0d:95:fe:10:29:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 01:52:01 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=9b47bb9697073404948326da1dda4d30e8a43ba8dd2fdfa82f58f3a97bc92c9c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:c0:80:f2:a6:95:40:e4:6c:5e:b1:98:9d:
                    e7:85:23:f2:06:75:b0:6b:12:bd:26:85:94:9b:a2:
                    9b:75:10:01:38:29:c2:44:18:bb:cc:00:ca:85:c4:
                    15:3d:4e:10:bd:3e:ea:27:76:e2:46:ae:ca:05:c4:
                    1a:4d:b5:49:21:fb:46:32:8e:e9:00:e5:51:8e:43:
                    e6:24:52:6d:ce:d4:c5:18:c6:d7:dd:44:3c:d9:08:
                    8b:64:1a:05:8a:a3:64:bf:2d:6a:97:d3:fd:75:11:
                    d2:3c:41:07:b7:5e:45:bb:32:3c:d0:4d:cf:c7:bc:
                    da:09:63:ba:a9:13:0c:70:a0:b1:2e:e1:e5:87:dc:
                    23:d3:ab:8e:6d:0c:c7:18:eb:c3:a0:2d:3a:f4:ca:
                    10:fc:2b:c1:15:9b:02:78:19:cc:29:ba:e0:a6:f4:
                    4f:ce:6f:bf:0e:eb:53:7c:a6:91:23:c7:1c:84:ad:
                    47:e2:5f:27:13:ce:b8:a2:36:56:44:f7:c1:d9:6d:
                    7d:a2:a7:9f:5f:f3:05:f9:bf:b8:fe:7c:ca:39:72:
                    50:2a:07:bb:25:46:7e:02:17:a0:a0:02:67:80:48:
                    e0:79:55:4f:43:12:2a:22:ba:71:6b:02:62:43:a9:
                    ca:9f:ea:81:a6:57:31:9d:3e:f8:64:78:62:6d:21:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B2:38:2A:F3:08:F3:4C:B4:11:E6:15:49:71:48:3A:BB:1A:FD:86
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3552eea-b91d-4f9c-a9b1-7e9edfcf6707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.145.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:84:6b:c3:c4:af:c6:1c:0f:93:31:d4:2b:fa:79:54:1d:65:
         e7:e5:a4:35:3e:5b:c3:fb:95:ee:eb:14:de:d8:4e:2a:f3:60:
         7e:79:d9:a5:11:a1:d8:19:63:f6:94:9a:f5:7e:5f:99:79:32:
         dd:b0:b5:ab:5e:9b:6b:d1:c7:ff:f8:61:8e:45:60:48:c7:79:
         e4:b8:07:b6:97:a8:a3:77:01:e3:38:c1:cd:6a:99:66:58:95:
         c4:13:4c:11:86:8e:64:a3:33:3a:e9:00:3d:23:27:3a:4f:a5:
         69:01:d2:af:a0:0d:50:46:91:5d:52:7f:01:3c:5f:57:86:15:
         3e:3f:8b:ec:14:86:05:3d:25:a1:6b:2f:cf:f0:88:8f:5d:48:
         d1:6a:46:e7:34:d1:20:8c:6c:16:9b:fe:da:27:1e:8d:b0:8c:
         a0:e6:8d:44:05:8e:d3:19:ce:64:4d:e7:b9:9f:fd:4c:bd:8b:
         c5:0f:fb:60:3f:b5:08:7d:c7:a8:c8:7c:b7:ed:79:01:b4:14:
         c7:bc:36:5e:df:1c:4f:45:d1:21:50:30:24:c9:8f:fe:7b:13:
         d6:53:b9:85:5d:bc:b5:45:b2:88:d9:2e:44:c8:cf:a4:cb:1a:
         a8:8b:a6:58:b0:20:d2:ef:fc:78:87:8f:41:8c:5d:4f:7e:c2:
         ce:a1:ab:83
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMqe9Qce81epO+gl9eIMNlf4QKYgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTI5MDE1MjAxWhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YjQ3YmI5Njk3MDczNDA0OTQ4MzI2ZGExZGRhNGQzMGU4
YTQzYmE4ZGQyZmRmYTgyZjU4ZjNhOTdiYzkyYzljMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCux8CA8qaVQORsXrGYneeFI/IGdbBrEr0mhZSbopt1EAE4
KcJEGLvMAMqFxBU9ThC9PuonduJGrsoFxBpNtUkh+0YyjukA5VGOQ+YkUm3O1MUY
xtfdRDzZCItkGgWKo2S/LWqX0/11EdI8QQe3XkW7MjzQTc/HvNoJY7qpEwxwoLEu
4eWH3CPTq45tDMcY68OgLTr0yhD8K8EVmwJ4GcwpuuCm9E/Ob78O61N8ppEjxxyE
rUfiXycTzriiNlZE98HZbX2ip59f8wX5v7j+fMo5clAqB7slRn4CF6CgAmeASOB5
VU9DEioiunFrAmJDqcqf6oGmVzGdPvhkeGJtIbf/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfLI4KvMI80y0EeYVSXFIOrsa/YYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2MzNTUyZWVhLWI5MWQtNGY5Yy1hOWIxLTdlOWVkZmNmNjcwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAADkfIwDQYJKoZIhvcNAQELBQADggEBABiEa8PEr8YcD5Mx1Cv6eVQdZefl
pDU+W8P7le7rFN7YTirzYH552aURodgZY/aUmvV+X5l5Mt2wtatem2vRx//4YY5F
YEjHeeS4B7aXqKN3AeM4wc1qmWZYlcQTTBGGjmSjMzrpAD0jJzpPpWkB0q+gDVBG
kV1SfwE8X1eGFT4/i+wUhgU9JaFrL8/wiI9dSNFqRuc00SCMbBab/tonHo2wjKDm
jUQFjtMZzmRN57mf/Uy9i8UP+2A/tQh9x6jIfLfteQG0FMe8Nl7fHE9F0SFQMCTJ
j/57E9ZTuYVdvLVFsojZLkTIz6TLGqiLpliwINLv/HiHj0GMXU9+ws6hq4M=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:52:43 2025 by rpki-client