This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09343932-6139-4202-abc7-0c3569567307.roa
File:                     09343932-6139-4202-abc7-0c3569567307.roa (raw, json)
Hash identifier:          kXV17dcvKdmwyYnltuFcf0cGo5MrlGC4eMbarBzJAg8=
Subject key identifier:   C5:97:63:D0:F7:44:D0:71:09:EE:95:7F:83:BB:AD:F0:92:D8:D0:32
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3D8580F22D7FDA696EC2A95A534BBC56B456E4FE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09343932-6139-4202-abc7-0c3569567307.roa
Signing time:             Wed 10 Dec 2025 01:31:30 +0000
ROA not before:           Wed 10 Dec 2025 01:31:30 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.244.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:85:80:f2:2d:7f:da:69:6e:c2:a9:5a:53:4b:bc:56:b4:56:e4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 01:31:30 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=d7b0442606ca65c5c02be5543f7bd763bc8811a485db84d61cd01212d2292e50, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:fb:db:a1:b3:01:9b:9c:24:1d:b3:82:eb:
                    17:bd:68:0a:95:2a:0a:d3:d5:db:dd:18:b9:c9:3f:
                    25:b5:02:e8:d0:20:6c:cb:f7:c1:9f:b4:6c:73:88:
                    d1:a8:10:ee:c2:6f:3a:d8:6f:76:59:af:f6:bb:20:
                    db:49:a4:07:dc:7b:16:e9:a5:48:a4:97:27:2d:2c:
                    6a:d5:c7:5d:6e:eb:9c:9d:ed:1a:c7:8e:81:d8:9a:
                    3a:f6:a6:f3:68:bc:56:27:83:f9:1c:59:ca:06:66:
                    4a:64:36:69:6a:33:74:32:16:d6:54:7c:ed:7c:f3:
                    84:7e:c6:60:2f:bd:6f:2d:49:9d:c3:e6:97:e8:20:
                    d4:d3:2b:37:69:51:84:62:dc:85:31:0e:7f:1e:75:
                    30:6e:5e:cc:0a:ac:ac:0e:23:89:26:c9:86:f2:2a:
                    4c:25:e3:ea:de:a8:aa:ab:2c:51:9c:06:4e:92:81:
                    c9:a5:8c:cd:73:44:6d:d0:c9:04:bd:43:76:4b:56:
                    d6:1d:d2:4a:3b:72:2d:54:f7:7b:85:a9:00:23:9c:
                    55:3b:94:c2:d1:04:a2:1f:96:ba:2b:4a:16:1c:89:
                    9c:41:38:00:c3:30:a4:64:7f:98:1a:a3:80:72:a5:
                    a7:b9:cc:78:d6:cf:98:d5:6e:3f:3f:ae:1b:6e:91:
                    6a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:97:63:D0:F7:44:D0:71:09:EE:95:7F:83:BB:AD:F0:92:D8:D0:32
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09343932-6139-4202-abc7-0c3569567307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.244.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c0:41:19:86:ac:23:e3:08:d6:56:fe:df:c3:95:be:a0:70:
         f3:8c:f2:47:5d:de:3d:44:ae:12:2f:46:99:bb:19:69:22:e0:
         69:05:ac:9c:c2:ef:03:0a:03:33:ae:e4:dc:7f:41:8b:fe:22:
         15:1e:68:05:35:93:ef:3c:d0:d6:65:4b:c1:17:02:5f:9e:71:
         4c:88:f3:cb:52:ae:b9:ef:45:02:47:46:4a:ae:83:c6:8e:da:
         fd:a9:a5:f2:fb:46:41:07:d9:cf:9d:ca:66:2f:61:98:b1:ae:
         ac:b0:f6:94:99:ec:20:ef:a9:76:ad:fc:86:e7:2a:3d:d5:aa:
         0a:b7:b2:69:04:17:0f:b6:67:81:4d:b3:31:5b:e0:a3:9a:f5:
         1d:67:b9:85:df:42:67:cb:78:c3:4f:9b:6b:73:89:a5:e0:4d:
         ba:85:84:bc:a3:22:ae:5f:2e:d8:81:65:55:a6:14:ec:20:36:
         44:34:2d:b1:4e:29:53:ea:0c:dc:ff:28:8a:61:58:a2:9f:5c:
         a5:13:00:34:20:c9:46:e6:a3:ba:f4:d0:b9:41:93:24:58:de:
         44:59:b8:83:19:85:3f:b9:60:e5:9a:d4:f2:7f:6c:0c:14:a2:
         f9:bd:d5:55:a0:ba:31:5a:27:1a:a1:c4:d3:a0:f9:52:09:72:
         44:31:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:14:01 2025 by rpki-client