This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d71ddc40-8a8d-4a0e-9291-43528dabda2f.roa
File:                     d71ddc40-8a8d-4a0e-9291-43528dabda2f.roa (raw, json)
Hash identifier:          UOaBNwTRyHa5gP22nvk2oqlTmHkxKo2JcdvoNpCToVI=
Subject key identifier:   E9:05:3C:BA:2D:13:C4:41:4E:10:24:FA:C4:86:FC:A2:50:AC:13:BA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3105E3215A8DF98A7E919027E8492F1485A460D2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d71ddc40-8a8d-4a0e-9291-43528dabda2f.roa
Signing time:             Sat 06 Dec 2025 03:21:20 +0000
ROA not before:           Sat 06 Dec 2025 03:21:20 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.240.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:05:e3:21:5a:8d:f9:8a:7e:91:90:27:e8:49:2f:14:85:a4:60:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  6 03:21:20 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=db801d27c5cf5f44c37eb37629663f5bca1e51bb9845dab2221168bf035edcd9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:fb:c7:59:7b:b5:2f:0c:3f:21:75:34:69:
                    69:a9:9b:e5:cd:43:35:d0:ee:9a:09:58:dc:79:53:
                    57:76:6c:3a:78:1a:26:7e:df:5b:7c:bd:53:4b:0d:
                    f5:34:d0:1f:5b:51:ec:c9:14:e3:58:58:b3:31:b8:
                    47:10:b7:cf:a7:a0:3a:5c:9b:cd:6d:1c:37:0f:92:
                    87:b9:91:54:7a:f2:ea:68:f5:67:bb:e4:5b:3c:54:
                    71:ea:ca:2f:ab:ed:f2:76:8d:69:82:e9:db:e7:d4:
                    c8:24:6f:b4:c6:8a:64:c4:80:5f:2e:a5:f2:f9:34:
                    53:a8:ef:0d:08:3a:3e:3c:59:d8:06:71:16:07:2a:
                    13:da:fa:6f:59:11:f5:64:59:a6:29:76:e9:fa:24:
                    c5:8d:a5:64:02:38:7b:00:d4:e6:ac:35:c9:29:bd:
                    67:37:f8:58:6c:a8:5d:9d:c8:7c:d4:5d:99:74:29:
                    38:9d:b6:f3:a5:c5:72:7b:72:22:67:d7:22:ff:7a:
                    d2:1a:a0:92:e1:7e:8d:6c:01:31:a8:ec:d2:05:81:
                    a9:41:aa:32:80:2d:eb:fb:3c:1b:a4:0a:b7:a2:25:
                    49:8d:fe:6b:01:ae:84:c6:65:e5:d6:38:3d:fc:12:
                    da:16:4f:99:c6:06:9f:f8:87:3a:07:cd:5b:e1:f4:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:05:3C:BA:2D:13:C4:41:4E:10:24:FA:C4:86:FC:A2:50:AC:13:BA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d71ddc40-8a8d-4a0e-9291-43528dabda2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:96:50:ea:15:6e:f1:84:25:aa:4f:0f:36:ff:84:68:1c:9c:
         e6:16:6c:c8:59:ba:f7:33:f4:63:c0:74:16:02:1e:f3:79:00:
         25:70:88:00:c6:47:74:05:93:29:7d:b7:e6:4f:19:54:82:12:
         e0:fb:7f:d1:94:f9:32:37:69:44:b2:63:f8:4a:0b:4c:26:0f:
         63:c1:d9:31:c6:39:a4:8a:8a:7d:5e:f0:9e:bc:66:83:53:dc:
         0b:95:70:a6:43:ec:44:e7:91:1f:35:c9:e8:2f:e0:b8:b3:dd:
         25:39:9a:6a:4a:63:85:ce:7a:b4:a2:6d:eb:82:5f:9a:8e:2a:
         e5:ad:a8:5b:04:48:28:dd:71:88:c8:e0:a0:8c:95:27:5e:a5:
         39:42:a3:53:f0:c2:1e:a4:1e:11:73:c6:4b:c5:18:58:bc:3e:
         c0:2c:31:79:de:5c:e6:94:11:e6:a3:82:e8:7e:11:5e:d6:0e:
         fa:2c:70:55:bd:1d:73:02:87:09:48:d9:9c:ee:da:ab:e0:2c:
         44:80:9b:55:10:ee:c3:b9:e0:fd:17:8d:12:37:34:66:49:a8:
         8a:e7:64:f7:2f:f3:7d:da:90:a9:9b:d1:9e:f3:82:82:a8:37:
         82:56:b1:d9:f8:43:39:ff:66:9e:84:df:ee:9b:54:ea:e7:82:
         5b:f8:c7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:50:29 2025 by rpki-client