This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12d6bef6-0b8c-41e5-a39d-7547f03a9b56.roa
File:                     12d6bef6-0b8c-41e5-a39d-7547f03a9b56.roa (raw, json)
Hash identifier:          Owoujxn86btTG7h4UGwwv5yzAk8iibRO6D2bcksq5us=
Subject key identifier:   43:E8:4B:C3:F0:9B:C7:72:48:DE:36:66:52:D1:0D:FC:E1:B8:99:64
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       39DA20D3358D8739A089656839E32A6FB7D3455C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12d6bef6-0b8c-41e5-a39d-7547f03a9b56.roa
Signing time:             Wed 10 Dec 2025 03:41:38 +0000
ROA not before:           Wed 10 Dec 2025 03:41:38 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:da:20:d3:35:8d:87:39:a0:89:65:68:39:e3:2a:6f:b7:d3:45:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 03:41:38 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=5db73cda628703e61ee663b533c5c3aef2896957cbaf93d5585768759e9d15a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:37:cd:69:c4:10:e3:3e:cd:0a:e9:32:d5:
                    30:06:90:32:e3:59:be:d8:39:08:b7:a8:9a:1a:2f:
                    79:50:66:f9:b9:73:77:f6:b6:c1:51:2d:2b:dd:29:
                    ec:8c:f3:bb:ee:02:a7:db:55:86:da:3d:cc:c4:33:
                    0c:a8:21:64:68:ab:09:5f:bd:28:d4:88:67:66:31:
                    81:95:82:5a:dc:d5:dd:de:d4:b3:8b:27:18:c3:9b:
                    b0:dd:0f:00:d6:d8:1e:65:bc:cd:2d:45:ee:05:88:
                    94:8d:46:fd:6f:fb:56:5f:e2:d4:c6:ea:b2:b8:09:
                    1c:2c:e9:3b:a4:67:23:8e:f8:e9:d7:fb:15:d0:8b:
                    77:72:cb:db:d3:0d:e5:d5:a9:38:ff:ee:eb:15:17:
                    5c:13:ac:31:c0:39:37:3a:4d:c7:4c:e9:84:52:14:
                    cc:5b:56:81:9c:6b:be:b4:14:2f:45:d4:df:1e:9e:
                    18:23:a7:9f:f3:c1:d7:58:41:1a:91:f8:a7:fd:19:
                    d4:40:0e:85:bb:5e:37:f7:b4:85:d3:6c:39:6e:3c:
                    92:64:50:7f:1d:db:7a:20:bc:7a:c6:4c:26:94:83:
                    d3:21:0d:a0:6f:ac:cf:4b:ae:c0:8d:55:90:2f:a9:
                    e0:89:0b:3b:59:a0:c1:04:ee:5e:71:f8:b5:65:f2:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E8:4B:C3:F0:9B:C7:72:48:DE:36:66:52:D1:0D:FC:E1:B8:99:64
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12d6bef6-0b8c-41e5-a39d-7547f03a9b56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:7a:b3:fd:1b:94:14:c4:57:b0:29:9c:7c:58:58:79:7d:39:
         77:5f:8f:e7:8a:7a:8e:68:d1:c3:87:7b:ec:9c:b5:ec:40:ea:
         0e:a5:26:ff:5b:08:2f:bc:39:2e:8f:0a:3e:66:a0:2f:96:e7:
         f3:2f:54:e3:a1:00:96:a1:45:82:2b:3c:da:e1:a6:ce:86:75:
         cb:9c:a4:96:ed:3d:0d:3e:0b:bb:51:1a:77:b8:d4:26:59:8e:
         89:d2:17:cc:a3:15:58:ad:7d:97:01:f6:7a:cc:8f:a4:8c:3d:
         34:8c:28:2d:e2:1a:fc:0f:2d:55:80:3f:24:1c:2c:16:89:b8:
         f4:5f:0b:ff:d7:63:de:10:f7:4b:ed:eb:ae:72:58:27:4a:6c:
         18:26:56:cd:ec:7e:65:fc:92:be:27:65:d2:d9:2b:f5:6f:65:
         2d:da:e2:25:54:32:56:26:b6:61:08:6f:8f:07:74:f5:63:d5:
         dc:ca:9c:56:a0:fb:b5:68:ef:91:18:9b:14:ba:eb:bb:9d:2c:
         58:5f:16:c7:7a:17:b3:1c:ee:08:2c:17:ac:1b:f6:43:c6:f2:
         99:73:ab:c4:ea:a3:34:d1:5d:e3:10:3d:f7:f3:e6:29:68:f0:
         50:59:79:04:af:51:95:ca:26:f4:b7:d2:ba:61:89:ac:0f:22:
         23:54:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 19:54:16 2025 by rpki-client