This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa
File:                     dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa (raw, json)
Hash identifier:          XSU/mttU8uGTDyYXWjeda9huEs4q1tG5bt2TdWs8ZJE=
Subject key identifier:   9E:0D:47:87:D0:72:F0:55:A6:E2:03:9E:31:3B:A9:01:EA:B7:85:E0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       23C5D44118FD501C6F4B06A17ECD5882357D78D6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa
Signing time:             Sat 29 Nov 2025 00:40:10 +0000
ROA not before:           Sat 29 Nov 2025 00:40:10 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c5:d4:41:18:fd:50:1c:6f:4b:06:a1:7e:cd:58:82:35:7d:78:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 29 00:40:10 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=5017b02245ff22ba4e55ba762bc45b83876a032a962f7023bdcb7ea0ba513cb4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:41:3f:31:7f:ec:38:93:a2:46:35:89:f3:
                    ef:f7:de:d4:ca:d9:46:78:3d:cf:1c:14:8e:a7:db:
                    54:32:18:eb:95:17:b4:8b:60:3d:a2:41:c1:f9:a9:
                    b4:54:77:87:59:04:67:f9:73:57:49:5b:97:44:c8:
                    48:9a:8e:73:d1:5c:41:7d:0f:8f:8d:25:bc:f4:7d:
                    55:17:b0:7e:e8:ac:12:82:68:d3:71:3e:77:7e:03:
                    aa:69:d6:ea:7f:cc:bb:1b:92:ea:e0:e9:5a:cb:7c:
                    c1:c4:ff:8f:45:3b:d4:94:b7:c9:51:55:1d:bd:26:
                    b0:77:96:94:c9:a2:17:f2:1d:9e:08:91:59:b0:50:
                    0a:3b:ab:a5:7a:1d:46:48:6c:c2:bf:d5:d5:14:19:
                    3c:fb:c4:f5:ef:5a:7b:18:82:10:3f:33:27:92:02:
                    53:b4:3a:65:06:31:4a:bc:5a:32:71:a6:96:79:33:
                    da:e8:4d:02:6d:d4:28:f7:08:8a:25:90:a5:55:88:
                    78:92:1c:5d:3d:19:ce:eb:c3:a2:e0:df:49:68:fc:
                    24:1d:cc:be:9f:dc:e1:e5:79:58:69:a4:e1:f2:51:
                    5c:2b:56:f5:26:26:06:d0:85:8c:f3:07:08:5f:b2:
                    99:dd:14:42:f8:6f:4f:81:83:eb:91:95:e7:06:6f:
                    41:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0D:47:87:D0:72:F0:55:A6:E2:03:9E:31:3B:A9:01:EA:B7:85:E0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:1e:6d:fe:a6:23:38:15:fd:81:4c:45:aa:e7:70:aa:d9:86:
         f1:c0:e9:7d:97:3f:cb:8e:1f:1d:17:6d:4e:a3:ef:54:1f:6d:
         85:01:4a:8e:c7:da:8c:8a:2e:da:81:41:49:29:77:18:cd:b7:
         91:0f:8a:13:23:6e:8e:f9:ce:79:8b:57:9d:5f:13:e6:f4:b8:
         70:9f:30:ee:b6:2c:17:8c:0d:59:20:f0:50:7c:b9:8b:21:0f:
         98:a5:19:6f:d9:f9:4a:06:19:b6:5c:92:39:ab:ec:3a:d5:06:
         cf:6a:01:49:33:2a:b4:db:4f:a5:43:f1:82:fa:d6:03:8f:4b:
         c9:5e:25:2e:0c:db:6c:89:81:86:b1:a8:89:22:bb:db:84:57:
         dc:e4:2a:b0:1d:fc:f1:a8:41:e6:a9:c8:61:ac:70:4d:22:c4:
         a3:e2:eb:14:1f:1f:96:cd:80:c8:6a:37:5f:47:60:98:d6:ed:
         b9:dd:d9:94:85:de:7f:5f:c4:e1:71:32:4b:e7:ca:70:37:24:
         92:19:0e:44:0d:cd:af:37:d3:8f:ee:f3:7a:61:c0:ef:8a:b9:
         8f:f3:a5:f4:65:c5:b5:93:1b:40:b4:9a:97:b4:fb:01:14:82:
         7f:ce:83:81:47:78:df:c7:17:81:52:60:24:64:9d:13:38:bc:
         36:86:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:57:07 2025 by rpki-client