This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4750821-4696-482a-98a8-b2b91bd78c72.roa
File:                     f4750821-4696-482a-98a8-b2b91bd78c72.roa (raw, json)
Hash identifier:          bXpUJNeJgIwR2er++kv99jioQzjxiDG3+SJv5wSesPE=
Subject key identifier:   F0:35:8B:88:2B:69:53:CF:BA:EE:73:37:35:9E:8C:1B:0B:99:D8:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1EA0959D03CF26B40B79101CA64BC7B3940D5D47
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4750821-4696-482a-98a8-b2b91bd78c72.roa
Signing time:             Wed 10 Dec 2025 02:20:37 +0000
ROA not before:           Wed 10 Dec 2025 02:20:37 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        47.255.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a0:95:9d:03:cf:26:b4:0b:79:10:1c:a6:4b:c7:b3:94:0d:5d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 02:20:37 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=3fcb620e59eeeb2a43cfe48822913660b99cc741099194644f98f92dd0d71bb1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:1c:c1:4b:e5:b0:57:53:1e:f9:b3:85:32:
                    97:47:fa:88:a8:c8:f0:e7:8a:16:9f:70:66:ea:63:
                    46:dc:7d:d4:b4:f0:69:91:6e:d6:3b:2c:6a:3f:e1:
                    63:73:d6:52:2a:7c:42:bb:aa:5e:68:28:b0:37:78:
                    63:c1:2c:2f:78:88:cf:73:a8:31:a3:3c:23:f9:5c:
                    45:ad:6d:c1:69:29:38:54:24:5e:44:1a:13:26:cc:
                    ac:39:5c:07:18:a6:f1:dc:66:94:89:4e:72:b1:4f:
                    15:6e:66:eb:5a:59:6c:df:df:2f:6f:27:92:92:23:
                    52:d9:04:10:ea:ca:77:a0:f6:16:73:b7:a0:4f:99:
                    fa:f9:29:1c:5a:50:7c:ea:e0:bc:19:ae:91:ec:96:
                    9a:eb:cc:d3:3e:da:58:3d:f4:ab:a4:2b:a4:1c:3c:
                    3d:23:d5:e2:64:af:eb:81:d4:a2:07:72:f2:f3:db:
                    a4:a9:ee:6d:d4:46:71:1c:39:35:af:ca:4b:e7:ee:
                    11:48:e2:9f:78:a9:10:15:4c:be:1d:bf:36:e9:0c:
                    5f:83:d4:f9:c9:71:de:c7:47:8b:5d:50:20:79:75:
                    34:0c:22:31:68:f2:ba:bd:1b:a7:7f:ff:5c:92:79:
                    9f:92:bb:12:39:15:cc:1b:18:cb:e1:ff:aa:c4:29:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:35:8B:88:2B:69:53:CF:BA:EE:73:37:35:9E:8C:1B:0B:99:D8:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4750821-4696-482a-98a8-b2b91bd78c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:4e:27:27:c9:9e:7f:d2:7f:3f:d5:cd:17:b8:bd:46:0f:d2:
         d2:0b:87:40:b1:79:95:ce:1b:37:74:43:c6:c2:b6:67:e2:3d:
         05:62:03:3d:07:3e:45:32:5e:08:08:8c:13:bf:24:29:85:a4:
         a1:46:58:a9:e7:89:69:e3:65:a9:4d:33:66:2f:c3:b3:1b:f1:
         92:12:ac:28:53:92:6b:69:4f:d2:9d:94:16:fe:c6:4b:c9:78:
         ca:0b:30:33:52:18:d2:57:96:6d:53:ae:6b:46:34:7b:af:03:
         a0:ed:92:12:3e:06:5c:84:49:e8:05:60:71:0c:ea:80:65:e8:
         4a:e4:49:80:1b:8c:fc:cd:13:80:9e:ac:9b:19:e1:1b:c0:af:
         5c:f4:99:ac:02:7d:12:7d:32:cc:14:01:f0:d8:ed:64:8b:fa:
         18:fa:5b:d1:73:6f:d3:b3:3c:db:d2:1b:d9:17:dc:7c:90:29:
         f5:e8:32:28:24:96:fc:d3:31:4e:6d:cf:9e:dc:65:52:36:73:
         cd:67:6a:34:43:dd:14:a4:9f:b5:b3:f8:06:f3:5e:c2:5a:77:
         f1:0f:d1:77:46:b5:7b:6d:cb:92:e4:1b:c4:dc:70:57:89:c1:
         92:eb:e8:1a:99:29:53:06:93:88:95:81:f6:79:65:1b:8f:bf:
         79:02:51:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:40:14 2025 by rpki-client