This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e88191e4-7b9b-4a81-b530-baab58ed3087.roa
File:                     e88191e4-7b9b-4a81-b530-baab58ed3087.roa (raw, json)
Hash identifier:          dyyGBvB5jwrWvBPSWLLAr0qf0He0674xjIooI12OXus=
Subject key identifier:   14:7B:81:50:E1:CE:D2:77:D1:C8:06:85:B3:2C:DE:B0:01:4C:93:02
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       70E635D2B5DC188F43B0FAB4D28594EC0F91A922
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e88191e4-7b9b-4a81-b530-baab58ed3087.roa
Signing time:             Sat 15 Nov 2025 04:01:16 +0000
ROA not before:           Sat 15 Nov 2025 04:01:16 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.239.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e6:35:d2:b5:dc:18:8f:43:b0:fa:b4:d2:85:94:ec:0f:91:a9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 04:01:16 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=1842a98aba933ee7199ed7e95f1c3d589379267534fc0398b9b59befc5b7b398, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:b8:32:2f:51:2b:52:ae:be:7b:48:e5:78:
                    57:e4:23:76:98:d7:a2:0d:97:58:eb:7d:7a:42:61:
                    da:90:b8:74:a0:0a:72:c9:49:f5:ee:6c:de:c0:ad:
                    62:b7:58:53:d7:46:46:67:d3:27:20:45:61:a4:d3:
                    5e:3f:a7:d6:64:bf:24:5e:71:82:07:f5:77:6b:4b:
                    c1:42:20:d6:a7:8b:d9:a4:e7:21:51:9a:76:08:24:
                    8f:22:09:93:6a:31:83:52:6f:a4:29:e8:c0:e5:49:
                    c7:90:b4:98:d8:db:1d:4f:4a:71:14:61:2d:4d:34:
                    ac:e9:a2:a3:bf:8b:29:0a:a6:4d:6d:56:e0:95:03:
                    cb:65:a5:56:4d:6c:ba:e9:78:d3:0c:5f:06:8f:67:
                    9f:85:fd:5b:a6:92:52:ff:60:53:a2:e3:a6:c0:be:
                    1e:fc:a2:e0:71:10:97:d3:ae:cb:68:95:88:9f:9b:
                    cf:e1:86:8d:45:d4:af:32:c4:83:95:7d:11:47:ad:
                    dc:9b:7e:25:3b:77:e2:fd:9a:ba:b2:2b:e8:93:b7:
                    eb:a3:54:ac:cb:dd:4b:a7:96:9a:70:e2:ba:c6:98:
                    37:29:60:30:12:d6:e1:a8:94:26:98:a5:07:5e:ab:
                    49:80:a8:65:c8:36:d0:b5:a4:94:b2:25:10:3c:58:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7B:81:50:E1:CE:D2:77:D1:C8:06:85:B3:2C:DE:B0:01:4C:93:02
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e88191e4-7b9b-4a81-b530-baab58ed3087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.239.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:f3:8e:3f:2f:e3:2e:65:c1:9a:72:c0:e7:2b:e3:1f:34:d7:
         c8:2b:2a:be:4b:52:b7:3b:cf:6e:b5:7a:3d:fb:56:2d:6f:46:
         bd:64:e6:7a:e7:cb:09:e3:7f:66:bf:73:ad:34:7f:da:a3:fc:
         1c:e2:f3:80:6b:ca:40:17:ab:84:7f:7b:cb:3b:33:06:fb:8e:
         5f:ce:31:ea:fb:04:bd:b6:b1:0a:98:d9:41:8c:eb:c0:7a:cf:
         c4:29:b7:12:4d:cf:f4:50:67:c4:1a:4a:e3:3f:67:7e:73:16:
         9d:76:65:16:79:a2:59:5e:98:02:5f:9a:86:db:bd:5d:83:bd:
         cb:01:b4:48:52:76:4c:7b:f8:09:a5:64:6d:d7:62:f4:55:79:
         60:72:26:f8:f3:a7:78:57:4d:0b:0b:e3:7f:2e:15:2c:35:56:
         c6:4a:06:42:9a:b7:d6:b4:d6:3c:c8:20:1c:73:41:f7:41:93:
         f6:73:70:f5:e9:de:28:7f:5b:17:20:6c:66:51:a5:59:09:b0:
         dd:21:70:ba:b8:6c:ed:72:28:68:a7:7c:56:fd:94:ba:65:1e:
         78:3b:5c:c6:90:f3:9e:be:80:b1:c0:c1:2b:d1:25:fb:a9:91:
         ff:3e:e3:66:73:3f:3a:a9:ef:3a:60:06:61:75:74:7f:d0:43:
         ff:17:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:23:42 2025 by rpki-client