This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa
File:                     d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa (raw, json)
Hash identifier:          wuZ91N1bo2k0IlVnkUF4MNNCtBepMJHSjicpBDtQNnw=
Subject key identifier:   DB:4E:A0:85:0D:AF:52:66:70:D0:34:CF:9E:01:98:B2:C7:27:DC:F3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7184D06C4801EDC9AE3129993348C2308784604B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa
Signing time:             Tue 02 Dec 2025 01:01:15 +0000
ROA not before:           Tue 02 Dec 2025 01:01:15 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:84:d0:6c:48:01:ed:c9:ae:31:29:99:33:48:c2:30:87:84:60:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  2 01:01:15 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=66f51115d4eb73f869d6a76983197c874ac3d3358368e1317a44c8afe92bbcc0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:b0:f2:85:b5:0d:fa:a8:07:04:77:98:51:
                    d7:6a:e6:8e:bd:fd:c3:fb:07:f2:71:7d:03:b9:1b:
                    f3:38:6d:60:e5:cc:ea:79:d3:d1:8f:33:32:eb:ab:
                    94:58:f9:e1:38:e4:63:df:7f:0d:d0:0f:27:92:25:
                    b3:9f:e1:6b:1a:1b:b8:70:53:5d:f1:15:78:d8:0b:
                    49:7a:88:f9:99:d1:45:e6:81:64:aa:69:db:a9:45:
                    d3:7e:44:d1:94:24:07:bf:44:30:a8:dd:c7:98:c4:
                    22:93:ca:fe:bf:8e:2b:e2:07:8c:d5:6e:b9:9c:25:
                    4c:23:17:ba:36:e8:45:72:a6:96:c9:4e:2d:43:3f:
                    70:3c:59:29:41:9e:3a:53:25:d8:3a:54:ef:56:52:
                    8d:fb:7e:9a:f1:fe:55:be:f0:df:a9:01:2b:78:af:
                    7f:38:62:41:4a:93:61:4b:09:8e:cf:d7:be:52:eb:
                    78:7d:a9:0b:10:47:4f:b0:ef:82:62:84:d7:dc:28:
                    7d:e0:1c:24:cc:ed:a3:83:88:cd:0b:06:ab:4c:b2:
                    c5:78:6b:89:5b:50:70:94:7e:cb:55:9d:8c:a4:ca:
                    da:e4:52:75:a4:6d:e3:f8:85:ec:1e:8b:90:e0:d9:
                    0b:6c:82:05:69:46:91:c1:fc:8f:ee:c9:6c:da:1a:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4E:A0:85:0D:AF:52:66:70:D0:34:CF:9E:01:98:B2:C7:27:DC:F3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:f6:d2:47:1f:3c:80:7c:9d:99:8d:45:ef:76:d4:8a:93:3d:
         46:2a:4f:1f:8c:4e:25:7d:a9:e8:4a:59:91:c5:58:54:a8:10:
         f4:a1:2f:f4:21:35:0b:f4:87:dd:d2:64:6b:53:c8:8d:bf:a2:
         24:37:8e:fc:64:a6:4b:7b:88:d7:e0:c5:78:3a:91:bf:28:65:
         c7:3a:21:89:e7:e8:73:f9:cb:5d:bf:41:a9:6d:c9:cc:d2:c3:
         1d:ef:7f:86:03:d1:d1:3f:da:ef:7f:dd:39:c0:91:df:c5:f2:
         72:a0:7a:c7:64:d7:78:50:5f:f9:96:79:dc:44:05:94:22:7e:
         4e:23:57:a9:bb:54:80:9e:8e:eb:bb:db:5b:49:7c:01:3c:26:
         18:56:57:36:d0:5f:cb:5f:1f:09:e0:77:4e:e8:a5:1a:17:8c:
         00:49:e8:52:f8:91:1c:dc:f3:17:85:2b:d8:7a:5e:ee:64:8d:
         3e:91:a0:59:ed:7f:90:cb:e1:7e:16:6b:ca:ef:2f:dd:e9:b4:
         8c:9b:14:42:77:53:02:53:e4:1c:10:3c:d9:74:04:93:cd:41:
         58:63:f6:81:48:81:5d:8f:98:e3:52:99:2c:67:de:35:74:17:
         d5:6e:4b:87:c1:7d:f3:c4:92:3d:8e:0f:f5:51:f4:7e:24:d4:
         4b:a8:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:21:10 2025 by rpki-client