This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e990b6-39f4-428c-bb01-f760616cd068.roa
File:                     c3e990b6-39f4-428c-bb01-f760616cd068.roa (raw, json)
Hash identifier:          HpMWNApJ0c6zCuoJ9G/F8H05MTCy26zuW9alO5xr8NE=
Subject key identifier:   F6:0F:2B:B1:B1:55:95:66:A0:43:78:AE:89:10:69:A2:21:3F:78:4B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       082DF7BE53EE007C3D134D3525701CDBEFEFD9DF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e990b6-39f4-428c-bb01-f760616cd068.roa
Signing time:             Sat 29 Nov 2025 00:50:04 +0000
ROA not before:           Sat 29 Nov 2025 00:50:04 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.35.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2d:f7:be:53:ee:00:7c:3d:13:4d:35:25:70:1c:db:ef:ef:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 00:50:04 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=3d425cb3db16dc318723e82adead9837dea31417b85ad2f15ce56e9c48eaa955, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:d2:fa:e5:1b:bb:98:72:b9:54:cd:1b:b7:
                    36:d5:18:fc:40:70:d9:83:79:32:41:c3:5d:7e:d6:
                    9c:1c:a7:05:53:af:cd:10:1a:c6:fe:dd:97:a9:f0:
                    e4:7b:77:48:ed:f6:91:49:ab:df:ea:84:af:c7:7e:
                    08:21:60:d1:75:01:3e:36:0c:70:8f:e8:10:4c:3b:
                    2f:0d:6b:05:e5:97:8b:97:26:8c:17:e6:f4:3c:8e:
                    d6:2b:7b:b7:fc:3c:11:87:10:f3:40:8b:85:c6:a6:
                    2c:80:0c:63:5a:3d:8e:b1:3a:b1:42:eb:ed:f8:b8:
                    35:11:96:f2:b6:2f:d6:3a:77:5b:61:c8:72:d6:66:
                    dd:6a:4d:5c:b1:77:69:77:60:ed:69:28:ff:0f:7c:
                    2d:00:f5:1e:a7:cc:e2:8c:43:5e:a1:30:65:b1:e9:
                    98:d0:35:e8:43:d1:f3:3f:be:51:6a:11:4b:cd:5c:
                    87:30:5e:d5:51:73:08:1b:43:f2:78:49:94:52:e5:
                    25:6d:3f:9f:d9:d1:35:61:08:f7:ee:b1:0d:02:4d:
                    8c:a8:c5:2e:60:af:80:30:64:b4:0f:0e:20:40:09:
                    0c:2f:ae:0d:d4:0a:42:f8:c2:55:59:fe:d4:50:e0:
                    ab:24:55:4f:23:0b:07:39:52:c7:4c:c3:6e:2d:d0:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0F:2B:B1:B1:55:95:66:A0:43:78:AE:89:10:69:A2:21:3F:78:4B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e990b6-39f4-428c-bb01-f760616cd068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.35.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:b4:49:74:24:02:9f:fd:43:82:75:4d:b1:41:8a:8f:67:c0:
         75:72:3b:57:3e:41:8c:74:d7:53:ab:f1:32:83:01:f2:ad:43:
         d1:d5:8d:d6:2c:fa:cc:48:d2:f1:03:18:85:40:b9:5c:7e:94:
         4a:df:eb:9c:76:53:fe:7b:8a:40:cc:7c:19:bb:3c:09:55:e0:
         0a:23:ba:fe:96:55:f4:c3:56:15:31:f6:1a:62:86:eb:9d:14:
         47:ce:da:f6:7e:eb:48:0d:a0:24:f1:0f:37:29:b5:5b:44:56:
         b8:10:b2:03:95:6a:1a:70:63:8b:b7:2d:2c:0e:c1:78:31:b4:
         ce:a5:bc:40:06:dc:48:62:5e:4f:66:22:1b:fb:d2:0f:6a:13:
         d1:a3:52:2b:09:7f:1a:68:7d:86:26:cd:df:7d:c3:37:f9:c4:
         b1:2f:29:6b:b4:06:5d:25:41:42:3e:04:c8:80:d4:66:cb:a4:
         f3:20:b8:93:f9:a9:bf:5d:40:6c:3c:0a:89:b3:ea:8c:ad:7f:
         07:fb:34:d7:1f:50:82:56:a8:f7:64:d4:74:19:5c:b1:ff:dd:
         4f:3b:97:42:0c:13:fa:37:a2:ec:f2:2f:3a:e9:1e:cd:46:60:
         e9:fe:23:99:d1:25:2d:7f:e6:28:d7:78:1f:d0:f7:fc:78:f3:
         f9:53:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:48:22 2025 by rpki-client