This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa
File:                     b19e5975-1e99-4224-8288-ed3afb4fc704.roa (raw, json)
Hash identifier:          QZx14X+lxrX1wm7nOXl4GBewfeITfBtxdybSz1SZwwM=
Subject key identifier:   5A:F2:EB:82:DB:CC:46:8E:84:30:8F:78:A5:09:A5:07:27:A2:E2:94
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       133A16B25CF7E4A26A4EAD667AD288D549D98F8F
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa
Signing time:             Sun 07 Dec 2025 00:10:11 +0000
ROA not before:           Sun 07 Dec 2025 00:10:11 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        198.41.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3a:16:b2:5c:f7:e4:a2:6a:4e:ad:66:7a:d2:88:d5:49:d9:8f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Dec  7 00:10:11 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=08665f7e4c626fe31d696e35098cea63472152907b503b94b26df494e3874178, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:30:4e:9b:1e:4e:22:70:d0:ce:93:1d:8a:
                    22:7e:ab:18:c6:38:22:99:e6:c7:bf:23:99:b3:1d:
                    11:01:f9:86:83:0e:24:93:db:a1:48:da:4a:03:b9:
                    02:fe:d3:1c:0e:dd:74:17:1b:fc:3d:a8:7e:75:64:
                    e4:af:39:7f:59:e3:1a:74:04:e1:10:97:b6:3c:ce:
                    0e:6e:7e:3f:23:fe:42:75:d3:92:44:27:41:bd:8f:
                    00:82:57:84:a8:9c:85:16:6a:b0:e4:9e:fe:41:3f:
                    80:4e:f1:56:f8:7c:46:3c:4c:5f:a3:58:3a:11:b1:
                    8e:0f:ea:fa:32:6e:52:fb:ca:cd:0f:f6:5e:7d:f3:
                    bc:2d:34:a9:3d:4a:5e:d7:bb:b4:5b:62:9a:60:cb:
                    77:46:8e:d6:d7:7e:da:cb:c1:44:e9:e9:40:32:2e:
                    ae:0d:bc:e0:f9:7c:ad:de:cc:23:00:29:99:d8:32:
                    4b:b9:4a:5f:e8:d7:7c:4b:3e:e4:a2:20:93:bb:49:
                    c6:31:f1:a7:27:f9:06:85:2f:4b:e4:d9:15:31:d7:
                    b3:c5:62:04:14:17:f6:2b:b6:7f:47:4b:c3:35:d7:
                    8a:cd:f1:97:a4:ec:f5:a8:cd:1f:82:44:bd:0b:ad:
                    6c:05:d5:18:c6:37:cb:bd:fc:05:4d:db:2b:29:4d:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:EB:82:DB:CC:46:8E:84:30:8F:78:A5:09:A5:07:27:A2:E2:94
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:16:62:e5:d3:b8:e5:b2:20:8c:fa:93:27:63:4d:d0:13:5b:
         1c:2f:b6:b2:5d:2f:4b:14:b5:a0:ca:9d:74:48:7f:3e:ec:41:
         da:93:4e:fe:0b:bb:c8:0e:b9:40:81:9e:ac:c4:ea:aa:8c:ba:
         c0:00:7b:dc:d5:3c:ff:4d:d0:e3:48:85:e1:63:39:23:d4:cc:
         fc:68:07:90:90:a3:2a:b9:dd:82:e4:7b:ef:e6:ef:26:ba:0d:
         90:cd:1a:04:b2:a7:ae:86:bb:ef:dd:bd:e4:15:4d:5a:67:13:
         3d:5e:cf:09:5c:6d:8d:22:cb:c5:ff:ea:6b:1e:78:02:bd:2c:
         46:b1:ce:b0:ef:46:d9:6c:cc:81:6f:45:5b:dd:fe:73:79:1d:
         22:84:f9:ca:28:a6:0b:cb:54:4d:b6:3c:f1:4d:38:56:8c:26:
         29:c0:fb:58:b9:13:ae:8d:b6:23:ce:7f:c0:b4:35:8e:77:2f:
         61:d4:44:8d:14:15:03:de:aa:b4:63:2a:9c:f4:03:4d:00:af:
         95:e4:f7:83:63:e9:ad:cb:1f:9f:3c:7a:9d:d8:2d:ac:64:79:
         1d:5a:08:1d:8f:2e:aa:80:9b:43:1d:a5:74:25:33:3d:0c:e9:
         5d:16:1b:bc:07:f0:86:44:fd:c0:6a:39:96:57:57:a5:6b:ce:
         59:f8:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:35:14 2025 by rpki-client