This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cebf1067-0055-46be-8282-d6c85e2294a0.roa
File:                     cebf1067-0055-46be-8282-d6c85e2294a0.roa (raw, json)
Hash identifier:          0LK3Ztjc0QIldUQ6OpybIlikpriCfZJ7JomC/H9zJCY=
Subject key identifier:   54:C3:FB:7B:73:C7:6C:81:19:23:D5:54:9E:29:BC:A9:5E:C6:CC:57
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       27A3E5B014EBD10D70F1EDFEBD77832502FBF1E4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cebf1067-0055-46be-8282-d6c85e2294a0.roa
Signing time:             Sat 06 Dec 2025 03:12:22 +0000
ROA not before:           Sat 06 Dec 2025 03:12:22 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.197.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a3:e5:b0:14:eb:d1:0d:70:f1:ed:fe:bd:77:83:25:02:fb:f1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  6 03:12:22 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=4421105d3fe9b223db0165c08f1401acc5c73c714535c260bfeefc8fef2df7b2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:fc:45:15:2c:ec:a8:15:40:58:28:5a:02:
                    f0:c0:70:1b:ba:f2:7c:d4:b9:e5:fe:06:24:e9:c5:
                    ae:e9:11:2b:70:19:11:4d:26:cb:a5:dd:29:14:4c:
                    af:76:1d:0c:da:0e:eb:5d:09:b5:9d:91:54:e2:7a:
                    fd:48:15:13:74:9b:fe:90:6a:db:ec:45:84:77:74:
                    73:5e:34:ed:2b:67:76:e3:a3:41:7f:4c:6d:bb:e7:
                    d7:35:53:7c:f3:7c:da:12:fc:e4:81:d2:5d:52:79:
                    42:66:5f:0a:f3:fe:a6:86:9a:76:55:5d:77:3c:60:
                    89:da:d8:ea:bc:a2:1d:d6:f0:40:63:62:43:77:1c:
                    94:9a:58:4c:5d:30:6c:8a:97:98:3d:1e:db:3a:d6:
                    3d:56:da:b6:66:23:9a:7e:3e:c8:a2:5c:c6:34:be:
                    de:6f:c7:dc:e0:0a:39:b2:fc:d5:4f:49:86:8d:1d:
                    6a:e0:dc:7f:71:50:26:64:e0:63:88:51:fd:2d:9a:
                    6e:a5:f4:fe:da:d1:78:c2:2d:2f:66:65:b0:ee:f1:
                    11:1e:19:6c:dc:f3:d4:f5:29:c8:c2:c7:94:4a:ee:
                    6e:b1:e8:55:00:84:c8:c3:06:39:15:4a:fe:18:d5:
                    04:16:56:4b:de:a5:19:a1:97:24:f9:45:6c:a4:c7:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C3:FB:7B:73:C7:6C:81:19:23:D5:54:9E:29:BC:A9:5E:C6:CC:57
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cebf1067-0055-46be-8282-d6c85e2294a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.197.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:8f:b3:88:ed:04:6d:b7:67:59:67:be:26:b8:9b:52:01:88:
         c7:38:3c:93:30:ff:05:fe:c7:78:f5:dc:27:0d:ba:60:27:e5:
         88:bf:ab:fb:14:92:3b:4d:b8:c9:3a:33:59:82:cc:7a:e6:5b:
         23:ef:cd:b5:9c:a9:a1:39:c2:30:66:94:66:4e:78:1b:f6:dd:
         66:34:ba:20:5a:37:24:91:0e:11:8e:fc:2c:3f:e4:ea:fe:31:
         a5:15:3f:61:70:e1:7a:a4:ac:ea:c6:bf:fd:91:60:8b:68:7e:
         68:c5:36:bb:6e:a8:62:c0:e7:1c:fc:fb:2b:6f:96:34:82:f8:
         df:64:98:cd:59:c0:d6:88:a0:df:d8:e8:5b:48:7a:bf:ec:4f:
         07:4d:66:ae:a3:4e:3b:e6:01:b8:5f:a5:38:6e:c8:ce:a8:60:
         65:92:85:12:ab:b3:eb:ff:b8:57:04:20:de:6f:2d:23:8a:14:
         68:f9:8e:aa:19:16:f6:a9:9d:56:6a:68:b3:75:51:5f:61:a7:
         ed:6a:34:a3:ee:cf:8c:a7:7d:fc:ba:a6:80:cf:f5:96:58:46:
         eb:97:0d:96:39:66:a8:47:7f:33:6a:64:da:33:ec:11:3e:e7:
         78:1d:3a:5a:21:bd:36:34:a8:ed:15:51:92:b0:45:26:12:db:
         28:53:e8:e7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ6PlsBTr0Q1w8e3+vXeDJQL78eQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA2MDMxMjIyWhcNMjYwMzA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NDIxMTA1ZDNmZTliMjIzZGIwMTY1YzA4ZjE0MDFhY2M1
YzczYzcxNDUzNWMyNjBiZmVlZmM4ZmVmMmRmN2IyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC57/xFFSzsqBVAWChaAvDAcBu68nzUueX+BiTpxa7pEStw
GRFNJsul3SkUTK92HQzaDutdCbWdkVTiev1IFRN0m/6QatvsRYR3dHNeNO0rZ3bj
o0F/TG2759c1U3zzfNoS/OSB0l1SeUJmXwrz/qaGmnZVXXc8YIna2Oq8oh3W8EBj
YkN3HJSaWExdMGyKl5g9Hts61j1W2rZmI5p+PsiiXMY0vt5vx9zgCjmy/NVPSYaN
HWrg3H9xUCZk4GOIUf0tmm6l9P7a0XjCLS9mZbDu8REeGWzc89T1KcjCx5RK7m6x
6FUAhMjDBjkVSv4Y1QQWVkvepRmhlyT5RWykx37NAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVMP7e3PHbIEZI9VUnim8qV7GzFcwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2NlYmYxMDY3LTAwNTUtNDZiZS04MjgyLWQ2Yzg1ZTIyOTRhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAE2xcIwDQYJKoZIhvcNAQELBQADggEBABWPs4jtBG23Z1lnvia4m1IBiMc4
PJMw/wX+x3j13CcNumAn5Yi/q/sUkjtNuMk6M1mCzHrmWyPvzbWcqaE5wjBmlGZO
eBv23WY0uiBaNySRDhGO/Cw/5Or+MaUVP2Fw4XqkrOrGv/2RYItofmjFNrtuqGLA
5xz8+ytvljSC+N9kmM1ZwNaIoN/Y6FtIer/sTwdNZq6jTjvmAbhfpThuyM6oYGWS
hRKrs+v/uFcEIN5vLSOKFGj5jqoZFvapnVZqaLN1UV9hp+1qNKPuz4ynffy6poDP
9ZZYRuuXDZY5ZqhHfzNqZNoz7BE+53gdOlohvTY0qO0VUZKwRSYS2yhT6Oc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:19:16 2025 by rpki-client