This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caff51cf-3d50-4617-90e4-1060c3585112.roa
File:                     caff51cf-3d50-4617-90e4-1060c3585112.roa (raw, json)
Hash identifier:          q31fUMRRFid2TjSNNfv1R4EApfRSmcRuuEG49axa78c=
Subject key identifier:   CE:25:33:19:58:40:AB:33:E0:9B:43:30:DD:AE:AE:8D:24:CE:FA:80
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5D91695239772C0A90DC705B7BB90E2FCEB30BB3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caff51cf-3d50-4617-90e4-1060c3585112.roa
Signing time:             Sun 16 Nov 2025 00:40:11 +0000
ROA not before:           Sun 16 Nov 2025 00:40:11 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.240.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:91:69:52:39:77:2c:0a:90:dc:70:5b:7b:b9:0e:2f:ce:b3:0b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 16 00:40:11 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=900e86e03c3f5215e9e86a0609cc7a57ab2e72d944a2d5df65dc6de638b3ddd5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:a0:53:79:4f:44:91:95:6d:69:ce:f4:d2:
                    00:78:95:06:4e:61:29:7a:0b:ff:b8:5b:a7:74:2b:
                    e8:09:22:ca:cf:9b:de:a6:57:0d:d2:79:8c:2c:1c:
                    61:df:e8:bb:01:16:d6:a5:9a:c5:01:69:f9:35:5c:
                    d7:a1:a7:43:0a:88:f2:bc:17:36:ad:a7:63:c3:4b:
                    c6:dc:f8:dd:aa:08:1f:e8:55:14:b0:af:8f:95:ff:
                    e1:0a:df:57:b8:db:ee:99:07:0c:fb:23:d7:a1:20:
                    a0:5b:87:d4:c6:65:fc:5f:cb:f6:7d:5c:90:27:8c:
                    8a:55:04:d1:8f:22:ae:d9:6f:7d:9e:f9:0f:1f:a2:
                    82:ed:38:02:bd:58:e9:37:f6:55:a4:00:de:19:4b:
                    2c:ec:4d:28:31:17:2b:c6:3f:80:2b:9b:da:6b:cb:
                    c0:67:84:cf:db:13:f7:96:e2:ca:ae:20:36:ed:97:
                    df:30:90:b0:2d:3a:96:fb:61:b5:78:3d:88:b3:1a:
                    f7:5a:22:2d:df:07:47:2a:4f:29:48:da:00:b4:38:
                    96:96:46:b4:46:b1:86:6a:72:e5:f9:52:ac:3e:ec:
                    3a:61:ed:25:60:61:05:2c:34:ac:37:5a:7f:52:dd:
                    04:6d:10:d5:d0:84:ab:34:ce:1e:40:48:af:78:2f:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:25:33:19:58:40:AB:33:E0:9B:43:30:DD:AE:AE:8D:24:CE:FA:80
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caff51cf-3d50-4617-90e4-1060c3585112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:06:61:2f:7a:4d:b9:4b:eb:5f:d3:bf:fe:79:e1:f8:ff:a7:
         18:8d:97:64:c6:41:9d:f0:c3:6d:a7:bd:ce:95:bc:41:c3:ae:
         72:8c:bf:04:7a:4a:fb:d4:b8:3d:e4:c2:71:4e:c1:d6:59:1b:
         7e:77:0e:22:60:22:60:bc:be:1c:3e:26:1d:87:d2:e2:35:a8:
         57:b6:13:67:56:f7:5f:85:d7:30:3f:5b:5f:12:ac:96:cc:2a:
         d5:c1:21:69:ea:53:f3:c5:76:4d:cf:db:9b:05:be:3d:cc:30:
         4b:87:2b:4e:fc:7a:41:94:4e:fd:fb:5b:4f:d5:31:19:c9:d9:
         01:97:b7:38:35:38:61:19:f7:88:6b:46:a3:cf:8b:28:1e:e9:
         ea:bb:42:a9:2c:de:cd:da:5d:bd:da:92:5f:c5:66:c7:54:5a:
         f8:fb:fe:ed:eb:dc:aa:81:db:ec:dd:45:3e:1c:49:ba:05:44:
         01:d2:e1:97:bf:3c:50:4c:e0:e4:24:a0:0e:6f:79:48:50:68:
         0c:b4:87:3a:c8:dd:49:c1:2a:e9:93:13:73:eb:27:36:5a:ff:
         ab:4a:b7:6d:43:99:ea:69:cc:78:1a:8e:db:0f:2c:ff:b0:62:
         45:3e:dd:bf:cf:e5:11:70:2f:64:b0:65:d6:0b:83:56:c7:9a:
         e7:0d:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:55:28 2025 by rpki-client