This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e56ea8f5-b292-4f84-bdf8-a03c2db99ad0.roa
File:                     e56ea8f5-b292-4f84-bdf8-a03c2db99ad0.roa (raw, json)
Hash identifier:          AOj6vjViFJt8BEgvcGX+zqgTSp6LH6l+20PzIYh9HdU=
Subject key identifier:   3E:26:3C:53:22:EA:59:37:8F:CE:20:33:AA:01:1E:0E:04:76:28:BB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       271F0C73E0F8BC3C4E41256947759D81CBF6F0E3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e56ea8f5-b292-4f84-bdf8-a03c2db99ad0.roa
Signing time:             Wed 12 Nov 2025 02:51:24 +0000
ROA not before:           Wed 12 Nov 2025 02:51:24 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.240.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1f:0c:73:e0:f8:bc:3c:4e:41:25:69:47:75:9d:81:cb:f6:f0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 12 02:51:24 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=ffcfa31731ab61aecf0f427337f4db4df62e0fb2a567473deda242d25dccd4df, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:44:c6:05:8a:81:31:b9:a7:89:af:63:f0:
                    43:e8:9c:36:50:6d:32:f0:f3:e8:4c:58:d9:1a:81:
                    77:75:7c:78:2b:73:74:89:ec:df:6e:f2:a9:07:65:
                    fc:74:83:7f:d7:df:b0:1a:9c:69:6d:0a:4c:93:78:
                    59:84:19:7a:d4:45:04:ad:3d:ad:05:7f:ce:56:07:
                    49:20:8b:97:83:66:63:68:d4:97:e4:d6:6d:d3:1c:
                    d4:60:37:2d:d2:6d:c9:a3:13:fe:75:1b:0c:d1:1d:
                    db:68:5f:3f:7d:68:fb:cb:ff:d0:55:06:a2:e3:bd:
                    83:06:ed:fa:ae:25:ea:42:06:c1:51:66:d8:db:32:
                    bb:9d:ac:a6:0e:1a:90:37:8c:b3:e3:47:ce:53:44:
                    37:ee:e3:4c:50:fd:0e:88:b0:be:ee:07:ee:f6:75:
                    2b:ee:ab:62:d8:27:fd:90:d2:a7:dd:9a:fd:07:5b:
                    57:1b:c3:b7:69:6e:24:73:2f:b1:97:fa:0c:0e:67:
                    97:d8:da:49:61:5c:7b:fe:5e:b6:cd:c7:18:b4:fb:
                    7d:30:50:e2:23:3e:22:c6:8a:a4:d1:db:69:e4:24:
                    5e:2b:01:55:0c:a2:7e:4d:9f:88:25:12:e4:92:57:
                    ea:5d:c3:ad:e4:9e:26:02:c1:5a:37:29:f1:24:78:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:26:3C:53:22:EA:59:37:8F:CE:20:33:AA:01:1E:0E:04:76:28:BB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e56ea8f5-b292-4f84-bdf8-a03c2db99ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:e5:d7:9c:7e:43:e8:9b:1f:26:c8:82:0d:2d:53:3b:4a:
         54:f3:6f:b4:40:1f:0c:89:01:00:ee:a6:55:ba:31:10:ec:80:
         bf:08:a7:46:45:3c:67:0e:8d:a9:39:bb:a9:34:65:3b:3b:15:
         f0:0d:13:72:29:31:41:99:7e:c2:2a:a0:bf:5e:11:da:b4:f1:
         4c:6b:45:c1:89:50:fb:6d:8e:30:af:ed:49:d0:3c:83:55:e9:
         50:3d:e6:b6:ea:7d:14:13:d1:f5:0f:e0:71:37:3d:8e:6c:3b:
         a8:ca:0b:e8:38:73:14:fe:f2:29:27:93:0b:a7:f8:5f:1a:00:
         4e:03:a5:d6:fe:c7:70:15:4d:98:28:0b:09:d3:be:c7:da:3a:
         3d:03:a4:14:af:8e:28:7c:a4:9f:54:0d:d0:1f:35:8c:8f:dd:
         63:9a:39:f3:53:c2:e3:52:5a:c9:82:43:80:45:64:55:2e:fe:
         6e:0b:ea:84:6a:95:c3:b3:a2:bd:2e:0b:18:4f:42:4f:8f:d3:
         52:e7:d2:71:b1:17:3b:94:43:53:00:f8:ee:6f:fd:2b:ec:65:
         79:bb:40:2d:9f:30:56:a8:66:dd:19:3c:81:f4:39:ec:6e:78:
         ed:02:79:43:3e:41:e6:0b:e0:27:7a:ca:9e:8c:47:4a:dd:ef:
         dd:d4:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:51:22 2025 by rpki-client