This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3f6448c-8375-475e-a6ee-5a29bc572f60.roa
File:                     e3f6448c-8375-475e-a6ee-5a29bc572f60.roa (raw, json)
Hash identifier:          xsIRyIG6L78pxtKymi6x9N474KddWN4oZroZH+BuAOQ=
Subject key identifier:   9E:02:19:26:60:26:54:90:0C:0D:19:E7:69:47:8E:38:5D:E8:50:18
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3DE4C66DE727E3138AB04B9CA973CF30E49C869D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3f6448c-8375-475e-a6ee-5a29bc572f60.roa
Signing time:             Sat 15 Nov 2025 01:40:08 +0000
ROA not before:           Sat 15 Nov 2025 01:40:08 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.167.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e4:c6:6d:e7:27:e3:13:8a:b0:4b:9c:a9:73:cf:30:e4:9c:86:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 01:40:08 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=fa669c99251f21854732dd0f0242cd12e1b78821a9891a0ef21397ece460a7f4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:d2:ba:ab:23:1f:e6:94:85:1f:3a:ad:a1:
                    ca:5b:97:fb:ca:42:50:33:dd:05:a2:ea:e4:cf:4b:
                    be:f6:01:4b:2d:57:d5:9c:6f:b5:d4:4f:a9:8e:20:
                    3a:8e:1f:c0:4d:aa:b8:bd:4c:9c:22:69:2c:f9:b8:
                    db:76:ee:02:96:07:93:71:41:54:e9:dd:1f:a8:80:
                    79:9c:77:c3:38:db:39:70:bb:4b:42:dd:b3:f4:a8:
                    50:35:3d:cc:b6:02:b9:00:3d:89:68:18:ae:20:28:
                    dd:c8:d1:11:bb:70:79:1a:7a:54:f9:77:f8:66:10:
                    69:f5:d5:2f:c8:2f:6f:4c:f7:c1:5c:1e:92:60:2d:
                    30:8b:1e:a7:73:da:28:f1:12:76:d9:3c:0f:a4:91:
                    12:58:7d:91:6f:c9:15:f4:dd:48:04:d1:da:60:bd:
                    6a:25:15:3c:31:15:cb:3a:7f:99:76:2d:df:eb:a4:
                    57:39:b2:c4:8e:e6:25:aa:57:f2:9c:38:e4:60:47:
                    f6:11:01:35:11:ff:ec:d9:72:fb:ca:a2:5d:dd:8a:
                    c2:2d:c5:c2:89:c7:c4:06:dd:89:6c:64:e1:c8:51:
                    0d:4d:f6:b5:8e:25:28:78:85:7a:f6:8f:8d:55:ab:
                    e8:81:69:cc:b2:62:b1:c0:79:92:ab:36:e6:33:56:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:02:19:26:60:26:54:90:0C:0D:19:E7:69:47:8E:38:5D:E8:50:18
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3f6448c-8375-475e-a6ee-5a29bc572f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.167.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:55:48:b8:91:58:62:ac:a8:36:5b:ed:d8:44:e9:b0:65:95:
         73:ad:78:a5:d6:00:30:be:31:ba:91:d2:5a:99:b8:8c:a4:e3:
         70:4f:cc:f6:35:a8:90:52:88:d1:91:9c:60:c9:26:5a:35:88:
         df:47:ac:61:15:ad:59:0f:a2:fe:5a:2d:85:7f:4f:28:df:51:
         c9:f4:0e:23:bd:10:d4:06:b8:47:e4:ed:53:40:b4:1a:ff:ea:
         58:dc:fb:6c:f2:42:77:b9:c9:a8:8f:91:f7:b2:60:9b:b2:48:
         2b:1f:01:e2:3e:21:12:4e:16:fa:ce:79:50:c1:c5:77:3d:a2:
         a9:a0:b8:23:30:3a:62:5d:6b:de:c0:13:64:e0:0d:7d:3f:d3:
         72:4d:99:6a:5f:98:1c:e2:62:24:85:5d:be:1d:b5:db:e7:60:
         95:22:32:cd:0d:0b:8b:fa:7e:fd:bc:72:27:2a:f1:d5:1c:82:
         c4:09:45:bc:92:3f:b6:b0:82:4b:50:cd:c9:8b:bf:90:21:e4:
         06:35:a0:48:97:e3:6f:10:07:f5:a3:c2:da:87:26:fa:6b:e5:
         36:b5:d7:24:b5:0a:f5:c4:f5:05:01:6c:8d:a4:ac:b3:44:cc:
         ea:6c:00:e5:03:21:9e:8c:a7:2e:c1:70:45:1c:db:d8:21:52:
         4e:c2:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:54:04 2025 by rpki-client