This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f618be0e-c545-4b6c-bfb1-e66d47b0a3a2.roa
File:                     f618be0e-c545-4b6c-bfb1-e66d47b0a3a2.roa (raw, json)
Hash identifier:          WsPaz8p5Eqjs5BitjCW7/sm75tdivl80Y5yIAbR6/9g=
Subject key identifier:   1A:03:5D:44:A9:27:98:EA:E1:F0:37:C8:D5:47:1F:89:2A:47:7F:36
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       48DC76AF150C7C5D7E3E6D3DB2E7CF6C6BA4AF75
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f618be0e-c545-4b6c-bfb1-e66d47b0a3a2.roa
Signing time:             Mon 08 Dec 2025 01:50:07 +0000
ROA not before:           Mon 08 Dec 2025 01:50:07 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.84.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:dc:76:af:15:0c:7c:5d:7e:3e:6d:3d:b2:e7:cf:6c:6b:a4:af:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  8 01:50:07 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=ea7b8b4e41baaaefebcf6a1f525fc7da2b59d29ea95eaee5aa0c358ade9454b4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:bc:0f:75:88:53:1d:e3:1a:5d:fe:0e:63:
                    2d:3f:61:58:ec:7f:74:58:5d:ad:9d:f9:f3:21:07:
                    a8:09:d7:0f:c7:20:b6:02:24:6f:ff:80:f9:84:ed:
                    5c:06:8a:e6:2b:89:48:dd:2c:70:88:ce:8b:ea:d8:
                    2d:de:a8:7f:ba:e6:c1:ae:f1:4e:b4:05:78:0f:5d:
                    3e:20:79:45:08:71:7b:59:fe:8c:86:ab:05:45:cd:
                    63:25:e1:c2:3f:90:b2:a3:91:1d:96:2d:d7:f2:c4:
                    8f:56:69:53:cc:f5:88:5a:68:fb:ac:7c:80:e1:4d:
                    ec:e6:b9:18:1b:cb:3f:a0:b0:61:93:ba:cb:b0:b7:
                    8e:7f:30:e6:5e:0b:f6:17:04:09:82:e8:1b:5e:bd:
                    c8:18:7a:a6:1d:60:89:fc:b5:09:3b:b5:f5:1e:90:
                    5b:2d:95:cf:18:0d:4c:dd:6f:71:06:30:59:47:08:
                    8c:0f:a3:d2:c9:04:5a:ff:6e:3e:6f:92:f9:15:58:
                    3a:7e:7d:73:75:2c:f3:e5:a7:01:4c:2d:e0:e2:84:
                    0f:da:c4:c0:f1:53:ad:82:d0:7a:79:8e:68:68:f4:
                    6b:b6:bb:18:bf:b8:fe:c6:a0:c5:46:73:a3:ad:9d:
                    02:03:d7:66:dc:18:31:76:f6:21:2b:95:01:8f:d9:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:03:5D:44:A9:27:98:EA:E1:F0:37:C8:D5:47:1F:89:2A:47:7F:36
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f618be0e-c545-4b6c-bfb1-e66d47b0a3a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.84.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:28:82:e4:5c:82:7f:96:25:c2:e4:fe:6a:b2:5c:5e:8b:ae:
         1c:8f:73:aa:a9:b6:c4:16:a5:de:ce:fc:c7:55:88:a3:4a:6a:
         7a:45:18:e1:af:15:b7:c0:16:f9:a5:bc:c2:a3:2d:9a:20:9b:
         b7:34:17:17:6a:a5:36:11:f2:64:17:36:ac:94:62:a8:13:4d:
         c6:4d:cd:41:6d:05:4c:e7:44:f2:69:28:c7:29:2c:5a:04:a5:
         00:4b:95:56:d7:8d:f7:ad:51:58:77:27:9d:5b:44:a7:45:6b:
         3c:fa:89:e4:b9:94:c0:89:1b:01:07:06:7e:ed:b8:76:b2:45:
         52:ef:e6:38:f3:2a:81:5a:c5:ae:38:b2:e8:70:9b:11:a6:ef:
         fa:7d:2b:4f:0b:97:90:da:fd:c8:55:36:02:91:de:9b:d6:2f:
         89:cd:b3:64:ac:15:85:6a:57:17:cd:ed:34:88:7d:8b:76:ee:
         12:82:c0:ef:78:c7:c0:03:de:1a:b6:2f:85:17:62:20:f1:ac:
         9b:ac:f7:4d:45:66:a1:2a:fa:10:19:3b:18:4d:4e:a7:f9:6d:
         48:25:40:5d:be:e2:de:2d:19:47:11:e3:1d:cf:3e:32:b0:b7:
         8c:ce:cd:2e:a3:61:2e:ac:18:85:f6:3c:75:0b:d3:64:a2:10:
         44:3e:08:2f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSNx2rxUMfF1+Pm09sufPbGukr3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA4MDE1MDA3WhcNMjYwMzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYTdiOGI0ZTQxYmFhYWVmZWJjZjZhMWY1MjVmYzdkYTJi
NTlkMjllYTk1ZWFlZTVhYTBjMzU4YWRlOTQ1NGI0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCf9LwPdYhTHeMaXf4OYy0/YVjsf3RYXa2d+fMhB6gJ1w/H
ILYCJG//gPmE7VwGiuYriUjdLHCIzovq2C3eqH+65sGu8U60BXgPXT4geUUIcXtZ
/oyGqwVFzWMl4cI/kLKjkR2WLdfyxI9WaVPM9YhaaPusfIDhTezmuRgbyz+gsGGT
usuwt45/MOZeC/YXBAmC6BtevcgYeqYdYIn8tQk7tfUekFstlc8YDUzdb3EGMFlH
CIwPo9LJBFr/bj5vkvkVWDp+fXN1LPPlpwFMLeDihA/axMDxU62C0Hp5jmho9Gu2
uxi/uP7GoMVGc6OtnQID12bcGDF29iErlQGP2QZdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGgNdRKknmOrh8DfI1UcfiSpHfzYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Y2MThiZTBlLWM1NDUtNGI2Yy1iZmIxLWU2NmQ0N2IwYTNhMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU0VAAwDQYJKoZIhvcNAQELBQADggEBAIcoguRcgn+WJcLk/mqyXF6LrhyP
c6qptsQWpd7O/MdViKNKanpFGOGvFbfAFvmlvMKjLZogm7c0FxdqpTYR8mQXNqyU
YqgTTcZNzUFtBUznRPJpKMcpLFoEpQBLlVbXjfetUVh3J51bRKdFazz6ieS5lMCJ
GwEHBn7tuHayRVLv5jjzKoFaxa44suhwmxGm7/p9K08Ll5Da/chVNgKR3pvWL4nN
s2SsFYVqVxfN7TSIfYt27hKCwO94x8AD3hq2L4UXYiDxrJus901FZqEq+hAZOxhN
Tqf5bUglQF2+4t4tGUcR4x3PPjKwt4zOzS6jYS6sGIX2PHUL02SiEEQ+CC8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:27:34 2026 by rpki-client