This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc715acc-67e2-4cf8-acae-eaa14021bb8a.roa
File:                     fc715acc-67e2-4cf8-acae-eaa14021bb8a.roa (raw, json)
Hash identifier:          32Ok+km4eTbpqC/6aqDKCJHUFX6x66tjWO/3B+T6FYw=
Subject key identifier:   FC:04:A1:32:28:34:27:52:7D:63:AE:00:83:90:31:77:75:2F:C6:DE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5E0F2E9ED555EFA1364F98587A16FDA291CC132B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc715acc-67e2-4cf8-acae-eaa14021bb8a.roa
Signing time:             Sat 15 Nov 2025 03:30:13 +0000
ROA not before:           Sat 15 Nov 2025 03:30:13 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.170.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0f:2e:9e:d5:55:ef:a1:36:4f:98:58:7a:16:fd:a2:91:cc:13:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 03:30:13 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=93057f7fad61d96d7594141aff479d2654c0546938d41478c5524c85c0070a93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:19:55:80:c1:30:ff:21:16:bc:67:25:04:
                    b1:60:05:1f:b7:92:6c:cc:8c:71:d3:4e:1d:be:49:
                    5c:a7:e4:22:92:db:23:b5:23:6f:78:f1:8e:2a:8e:
                    0f:30:9c:7e:6e:70:c0:97:01:33:b1:d8:b8:b9:ef:
                    4f:43:1d:82:77:83:39:0c:bc:57:1b:45:90:65:5e:
                    3a:eb:31:e1:00:2f:52:2c:f1:90:70:2d:59:61:ed:
                    2a:bc:88:95:9e:65:ed:f8:3b:68:77:19:00:ee:c8:
                    98:4d:f0:53:93:1b:31:c6:be:f2:fd:83:f7:a8:fa:
                    15:00:82:e4:fb:47:f8:91:68:e6:d6:80:42:1f:05:
                    ec:fe:bf:d5:b2:ae:3c:5b:59:9a:81:93:b7:88:03:
                    22:29:30:be:6a:b1:a8:64:e0:12:19:49:0a:1c:92:
                    f2:ed:fa:0e:68:60:9c:21:90:2d:e6:21:34:b7:df:
                    76:78:f9:b7:03:4e:f4:20:e7:50:60:95:5f:5f:c9:
                    f9:a5:6a:e0:39:e3:88:1b:b6:66:38:9b:db:12:7e:
                    86:1b:0e:0b:b3:c8:ef:a1:4a:6b:eb:03:34:60:05:
                    5c:15:0c:3a:0e:44:d0:f9:18:cc:f0:3a:2d:db:a0:
                    89:1e:cb:1c:fb:69:9d:a9:5f:3a:e9:dd:f4:93:5c:
                    20:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:04:A1:32:28:34:27:52:7D:63:AE:00:83:90:31:77:75:2F:C6:DE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc715acc-67e2-4cf8-acae-eaa14021bb8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.170.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:32:66:4f:7b:20:08:0d:36:46:1e:5d:6e:4b:da:0d:d2:62:
         0a:b6:98:2d:9d:e0:6f:54:a3:ff:08:2d:98:32:11:23:87:a1:
         3c:4c:1b:b8:82:c6:0b:53:e0:fb:cc:35:3b:e9:91:61:2d:c4:
         fe:9a:27:ca:e5:fd:48:78:8f:d6:5b:a5:2d:1d:cc:03:9c:ba:
         20:36:60:17:6e:c1:bf:4b:ce:f9:19:1e:66:13:6d:3f:13:fd:
         e0:eb:3e:ca:51:d4:b8:21:69:4d:e2:4b:50:2b:d1:3f:5a:94:
         79:6f:29:d6:ac:50:ff:65:0f:6f:d3:31:43:fe:7c:57:fe:e2:
         9c:17:37:b0:7c:3c:53:92:6d:97:54:a4:c5:36:f7:40:a9:5f:
         8d:6a:40:8c:cd:dd:3c:aa:10:11:0e:7d:6a:63:61:d4:33:bc:
         c9:69:9d:9e:c6:a0:d1:8e:d1:c2:2d:49:8d:03:c9:0f:d0:64:
         1a:5b:91:a3:27:27:57:28:53:77:ed:fd:00:01:80:31:5b:48:
         f0:77:2d:e1:99:5c:5f:9e:3a:14:89:02:5a:97:11:85:92:77:
         de:fd:fa:34:25:fe:1a:c2:26:f1:b9:70:6a:9a:3a:51:dd:98:
         7f:76:3d:c1:58:ac:9e:f5:45:6a:16:51:e0:d1:05:fb:9b:8c:
         46:bb:33:ca
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXg8untVV76E2T5hYehb9opHMEyswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTE1MDMzMDEzWhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MzA1N2Y3ZmFkNjFkOTZkNzU5NDE0MWFmZjQ3OWQyNjU0
YzA1NDY5MzhkNDE0NzhjNTUyNGM4NWMwMDcwYTkzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWHBlVgMEw/yEWvGclBLFgBR+3kmzMjHHTTh2+SVyn5CKS
2yO1I2948Y4qjg8wnH5ucMCXATOx2Li5709DHYJ3gzkMvFcbRZBlXjrrMeEAL1Is
8ZBwLVlh7Sq8iJWeZe34O2h3GQDuyJhN8FOTGzHGvvL9g/eo+hUAguT7R/iRaObW
gEIfBez+v9WyrjxbWZqBk7eIAyIpML5qsahk4BIZSQockvLt+g5oYJwhkC3mITS3
33Z4+bcDTvQg51BglV9fyfmlauA544gbtmY4m9sSfoYbDguzyO+hSmvrAzRgBVwV
DDoORND5GMzwOi3boIkeyxz7aZ2pXzrp3fSTXCDFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/AShMig0J1J9Y64Ag5Axd3Uvxt4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2ZjNzE1YWNjLTY3ZTItNGNmOC1hY2FlLWVhYTE0MDIxYmI4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIDqsgwDQYJKoZIhvcNAQELBQADggEBAJIyZk97IAgNNkYeXW5L2g3SYgq2
mC2d4G9Uo/8ILZgyESOHoTxMG7iCxgtT4PvMNTvpkWEtxP6aJ8rl/Uh4j9ZbpS0d
zAOcuiA2YBduwb9LzvkZHmYTbT8T/eDrPspR1LghaU3iS1Ar0T9alHlvKdasUP9l
D2/TMUP+fFf+4pwXN7B8PFOSbZdUpMU290CpX41qQIzN3TyqEBEOfWpjYdQzvMlp
nZ7GoNGO0cItSY0DyQ/QZBpbkaMnJ1coU3ft/QABgDFbSPB3LeGZXF+eOhSJAlqX
EYWSd979+jQl/hrCJvG5cGqaOlHdmH92PcFYrJ71RWoWUeDRBfubjEa7M8o=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:55:46 2025 by rpki-client