This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f557e861-2ddc-414d-a142-a8f9d23ac2b0.roa
File:                     f557e861-2ddc-414d-a142-a8f9d23ac2b0.roa (raw, json)
Hash identifier:          F9/LxqFhhUT80OupYVmk0Ga4qPK8Ue3mS363k5FCzI4=
Subject key identifier:   21:F9:AD:5E:AA:29:CE:CC:11:15:FD:97:F6:A2:D6:DA:9F:0E:30:B2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       48784A5539276E319415390B7509565AAB15E467
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f557e861-2ddc-414d-a142-a8f9d23ac2b0.roa
Signing time:             Thu 13 Nov 2025 01:21:35 +0000
ROA not before:           Thu 13 Nov 2025 01:21:35 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:78:4a:55:39:27:6e:31:94:15:39:0b:75:09:56:5a:ab:15:e4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 13 01:21:35 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=2ee97bbd3610a8194020ea067a6d61eaf8766ef5edaed88e5f165ab54b826806, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:36:d9:da:1c:33:8b:35:8e:fb:44:ca:28:
                    b2:4f:84:20:9f:fb:84:a5:da:7a:a2:0e:2b:42:ea:
                    6b:ae:e0:f0:35:9a:19:74:54:60:a7:1e:17:28:f5:
                    9e:90:91:db:a6:ee:1b:20:34:6f:db:ba:83:33:47:
                    96:f6:6f:56:bf:07:7c:5d:92:a8:d0:ac:86:d1:88:
                    b7:6f:24:a9:aa:29:1f:65:6c:b9:bd:71:2d:70:4a:
                    51:54:a9:78:35:10:a6:63:04:20:38:7f:ff:74:f3:
                    36:b3:e4:9a:9e:aa:c7:c1:72:bd:a4:37:9a:93:7f:
                    0c:de:43:01:ee:b8:25:92:00:22:23:27:7a:f3:ba:
                    11:8b:b9:e7:98:9c:ae:99:31:f3:79:cc:ae:d8:d6:
                    5c:b4:63:f9:a7:71:d8:4e:2d:62:f3:d2:b1:b9:f1:
                    41:ec:83:47:87:07:f6:c6:3b:51:dc:8f:07:28:b6:
                    76:28:4b:c0:50:34:cd:68:e8:d4:23:b0:2d:ab:58:
                    04:c6:d9:f4:c4:f6:fa:9c:86:75:8a:0b:3c:7e:8f:
                    6f:2b:62:d9:e6:c5:b6:17:6c:6e:b2:2c:f6:5b:fe:
                    fa:8e:d7:0a:a1:db:b7:c2:56:25:de:ed:e7:ec:1d:
                    06:e3:53:35:8f:c2:1a:9f:ba:39:68:e6:08:b0:f7:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F9:AD:5E:AA:29:CE:CC:11:15:FD:97:F6:A2:D6:DA:9F:0E:30:B2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f557e861-2ddc-414d-a142-a8f9d23ac2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d1:d6:85:58:9f:cf:00:d5:f6:76:94:89:d8:52:de:72:e8:
         49:37:51:10:b5:5f:21:8b:d9:3e:5d:c7:d1:9b:8d:26:de:ca:
         e2:d4:b0:eb:ef:34:14:3b:1a:ba:bb:48:f8:a2:09:b6:b9:2e:
         bc:8a:d2:bb:68:e1:17:6c:de:a1:76:46:ab:d1:69:ba:1f:98:
         4e:4d:bb:0f:8f:43:95:4c:1a:39:b7:31:8d:f4:17:d0:db:f4:
         68:5d:11:a8:3c:51:80:5a:bf:a3:f7:d5:cc:d0:6e:da:57:6a:
         99:83:54:bc:50:a6:af:41:13:1a:71:e4:60:9a:9a:77:c4:5c:
         d6:7d:5f:e5:ec:98:ba:3e:a0:c7:6a:1b:f2:21:ad:98:1b:fb:
         75:5f:50:b7:23:bf:d3:2d:58:2a:23:e6:b3:d1:d1:1a:0d:78:
         6a:2e:72:0a:8e:d7:5a:ff:a1:1e:63:5f:8c:26:c1:67:1b:fc:
         f6:b7:8f:1f:bd:76:af:61:91:fe:9f:ac:d6:b5:24:0c:b2:2c:
         35:25:0c:49:e7:ba:41:39:da:3f:e7:cd:15:8e:43:a0:07:9b:
         a9:7d:78:47:c6:93:6c:70:ee:17:50:cf:af:6c:65:24:39:ab:
         a4:71:9a:8a:ba:59:a1:f0:d6:b6:92:90:0e:e7:ea:85:b9:35:
         87:ce:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:10:34 2025 by rpki-client