This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa
File:                     7c53740e-7300-4028-b024-414ad3814267.roa (raw, json)
Hash identifier:          P1HHnXtM7b+7R8JIe9C5PT0IzlNE5hTXQIWV+hqgjE4=
Subject key identifier:   59:7C:04:0D:17:E9:7C:68:C6:71:33:CB:6F:16:8A:A2:B0:E2:ED:65
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       52297995534294EDCB6E351DF743356CBD3DF152
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa
Signing time:             Wed 10 Dec 2025 00:20:07 +0000
ROA not before:           Wed 10 Dec 2025 00:20:07 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:29:79:95:53:42:94:ed:cb:6e:35:1d:f7:43:35:6c:bd:3d:f1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Dec 10 00:20:07 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=857e812b954b2b7b15238d030535d6d301f3e48cb2ea5ca1fcc865d4d131c386, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:a0:24:5c:2c:fa:e1:45:4d:d7:1f:83:8a:
                    4d:5b:71:da:16:f5:fb:a9:ca:8b:63:e9:9e:db:11:
                    8f:9d:df:2f:be:8a:df:48:a6:cb:8e:ad:9e:f8:fc:
                    5c:06:ae:1a:a0:6f:a1:00:fd:72:10:51:ff:63:ff:
                    9c:8f:4d:7a:9a:0d:bc:8f:24:d4:cd:71:15:fe:c0:
                    af:df:b5:88:f5:44:1c:9c:a0:11:71:3b:a1:c5:fa:
                    50:57:f2:1f:ce:fc:02:34:d4:8f:6d:e4:c9:ac:91:
                    72:87:a4:ed:43:86:6b:60:0f:a5:0f:35:54:fe:3c:
                    ff:bd:10:dc:dd:89:42:58:3b:1b:e1:88:0f:c3:5b:
                    87:73:43:65:8f:85:0a:6f:c6:8a:5a:9e:e8:e4:fd:
                    04:a4:f9:9a:4e:94:0f:0b:a8:28:1b:a6:24:a1:b4:
                    f2:35:78:58:78:4e:46:36:0c:11:cd:08:a2:67:ab:
                    a3:25:4a:a6:9a:ca:0d:af:e6:13:cc:62:92:6c:13:
                    5c:87:4d:ec:23:ba:c6:c6:30:66:67:1e:87:15:63:
                    5e:2d:69:f2:1d:56:f4:9e:f5:be:86:47:4f:b2:ce:
                    33:f7:6a:17:b7:f9:3e:55:24:52:63:72:11:60:90:
                    bc:6b:3b:e0:b8:b1:5b:0a:a9:08:2a:90:53:1f:3b:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7C:04:0D:17:E9:7C:68:C6:71:33:CB:6F:16:8A:A2:B0:E2:ED:65
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:4a:11:da:cc:ba:44:d4:78:2d:57:c2:fc:b2:ab:80:df:b1:
         0e:2b:4c:39:97:dd:77:33:7d:0d:6c:92:ed:8e:8a:1b:57:65:
         e6:6d:c6:7c:c7:fe:fc:ee:fa:fb:d6:fc:4d:a6:d9:cf:eb:76:
         d8:12:17:ec:ef:0c:db:85:c3:fd:f3:29:c5:bc:eb:2b:32:3b:
         74:03:3f:08:0c:f1:2f:0e:a3:ec:06:55:53:4f:79:af:76:52:
         ef:1e:78:ac:0d:92:6c:d4:89:c2:06:c6:6c:a5:1b:29:de:53:
         7a:b6:59:da:58:03:71:7c:c9:04:d3:b0:71:da:f7:82:83:00:
         3a:6c:9d:83:b4:58:90:d5:69:a6:a6:5a:65:b3:d0:75:d1:73:
         8b:77:bd:23:2e:1e:d1:aa:ea:77:6b:17:22:ec:a3:ed:8a:30:
         73:a4:b9:a2:37:06:32:e3:2d:d0:be:56:21:c9:3f:53:96:3e:
         9d:dd:b7:18:12:1b:5c:26:4b:f8:94:7c:ad:b0:71:36:56:16:
         bf:11:7f:52:dd:21:64:48:2c:f9:40:14:ba:cf:f2:8b:d0:d2:
         a0:65:f6:f9:f6:47:6d:b1:c9:9e:f8:e0:7c:16:61:0e:b7:39:
         70:02:58:cc:9e:df:80:ed:57:48:8e:26:0b:1a:92:0d:e4:84:
         7d:82:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:10:24 2025 by rpki-client