This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e41b0a0-d786-46e1-a9af-4ddcc1c967ef.roa
File:                     1e41b0a0-d786-46e1-a9af-4ddcc1c967ef.roa (raw, json)
Hash identifier:          Y9ZkAuDx4bxgPjJfjF/a4VwzqvgfFc+NakXhFRAE0uM=
Subject key identifier:   30:1C:0D:04:9C:79:0B:B4:1C:7D:BC:07:E1:FA:38:99:3B:8B:FC:BC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       37A747294C041E3115D534F855CB68A5ED272CC6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e41b0a0-d786-46e1-a9af-4ddcc1c967ef.roa
Signing time:             Wed 10 Dec 2025 00:50:07 +0000
ROA not before:           Wed 10 Dec 2025 00:50:07 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a7:47:29:4c:04:1e:31:15:d5:34:f8:55:cb:68:a5:ed:27:2c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 00:50:07 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=38edb7ddaf5c8d3a153073535837c457af07eb89b89a61f1580fdc5bf163a142, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:be:37:cf:c3:95:0c:c0:53:61:0a:2f:39:
                    2f:d8:c5:6e:f5:b5:55:e7:17:df:35:42:60:27:ec:
                    4c:a7:79:c3:78:9e:f2:ce:90:ac:e2:ab:5e:c2:20:
                    9d:9b:63:06:0e:19:7a:14:1f:11:7e:e5:44:fe:91:
                    6d:9c:71:f5:be:00:0a:17:99:27:2f:25:da:81:05:
                    7c:83:f3:7a:72:8b:44:b2:74:ee:54:e3:e3:80:67:
                    8f:72:3a:31:49:18:36:9b:6d:e6:a3:d8:6f:8b:3b:
                    46:4e:82:3b:0a:47:0f:2b:7b:dd:b2:1f:31:07:1c:
                    bb:e1:67:64:2e:99:2e:1b:03:0d:ee:33:77:83:60:
                    33:8a:45:fc:ca:2c:75:1a:d2:4a:e5:43:c8:57:55:
                    c3:af:33:7c:a7:e3:fd:42:6f:b7:9f:c9:fe:c6:01:
                    02:8a:dd:e2:ee:10:2e:52:c5:77:bb:5c:19:d7:c9:
                    08:be:29:aa:37:be:8b:cc:46:59:d8:46:0b:50:52:
                    3c:3d:81:68:60:e9:53:bd:ea:94:a6:9d:99:27:36:
                    de:86:d9:bb:3f:dc:7e:79:13:ac:e0:6b:1f:ef:e6:
                    74:0c:2b:19:a6:f6:76:26:ab:ca:3d:5e:86:9b:a4:
                    92:90:2e:ef:e9:60:03:c7:4c:13:4e:e0:af:42:bb:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1C:0D:04:9C:79:0B:B4:1C:7D:BC:07:E1:FA:38:99:3B:8B:FC:BC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e41b0a0-d786-46e1-a9af-4ddcc1c967ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:fa:18:ec:bd:d7:30:7b:47:7a:50:5d:63:1e:78:4e:99:11:
         51:04:45:69:59:70:be:d5:8d:3e:19:c3:6e:2c:b7:fa:35:83:
         b0:0a:34:68:95:00:27:91:44:91:96:2e:88:2e:84:f7:e0:00:
         50:29:2c:3d:92:64:ae:cd:e2:bd:71:76:3b:fe:90:4f:ff:1b:
         a1:c2:79:38:05:04:a1:9c:16:86:ea:8d:3a:f0:4f:98:e5:b3:
         3c:92:66:4c:c1:87:60:b9:cb:97:10:d8:91:29:c5:c4:fb:db:
         03:35:f2:f4:09:92:71:2a:42:29:0a:56:af:c1:f2:a6:22:ed:
         61:83:0b:5f:9f:39:cb:e8:14:3a:ef:86:48:3d:72:ab:0b:9b:
         85:9c:5e:b0:11:7b:67:b0:54:48:1b:5f:66:bb:0a:8d:c0:f1:
         d0:ca:69:b1:bf:7e:bb:59:f1:0a:bf:af:ed:9c:ea:e9:ac:3b:
         5e:a5:af:39:3b:69:6f:55:9c:b7:91:7a:6a:6f:63:f2:e0:bd:
         6d:90:6c:5e:9f:92:40:f9:7f:1c:b9:47:a4:70:ed:65:95:ef:
         ca:a1:7a:85:11:15:33:62:51:8c:36:dd:a9:c6:f6:39:77:f9:
         3a:0b:64:69:29:c8:b2:25:13:1b:0d:aa:cb:bf:55:5a:38:c2:
         06:c0:27:46
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUN6dHKUwEHjEV1TT4Vctope0nLMYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjEwMDA1MDA3WhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzOGVkYjdkZGFmNWM4ZDNhMTUzMDczNTM1ODM3YzQ1N2Fm
MDdlYjg5Yjg5YTYxZjE1ODBmZGM1YmYxNjNhMTQyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4ir43z8OVDMBTYQovOS/YxW71tVXnF981QmAn7EynecN4
nvLOkKziq17CIJ2bYwYOGXoUHxF+5UT+kW2ccfW+AAoXmScvJdqBBXyD83pyi0Sy
dO5U4+OAZ49yOjFJGDabbeaj2G+LO0ZOgjsKRw8re92yHzEHHLvhZ2QumS4bAw3u
M3eDYDOKRfzKLHUa0krlQ8hXVcOvM3yn4/1Cb7efyf7GAQKK3eLuEC5SxXe7XBnX
yQi+Kao3vovMRlnYRgtQUjw9gWhg6VO96pSmnZknNt6G2bs/3H55E6zgax/v5nQM
Kxmm9nYmq8o9XoabpJKQLu/pYAPHTBNO4K9CuzFJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMBwNBJx5C7QcfbwH4fo4mTuL/LwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzFlNDFiMGEwLWQ3ODYtNDZlMS1hOWFmLTRkZGNjMWM5NjdlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMDr0gwDQYJKoZIhvcNAQELBQADggEBAJv6GOy91zB7R3pQXWMeeE6ZEVEE
RWlZcL7VjT4Zw24st/o1g7AKNGiVACeRRJGWLoguhPfgAFApLD2SZK7N4r1xdjv+
kE//G6HCeTgFBKGcFobqjTrwT5jlszySZkzBh2C5y5cQ2JEpxcT72wM18vQJknEq
QikKVq/B8qYi7WGDC1+fOcvoFDrvhkg9cqsLm4WcXrARe2ewVEgbX2a7Co3A8dDK
abG/frtZ8Qq/r+2c6umsO16lrzk7aW9VnLeRempvY/LgvW2QbF6fkkD5fxy5R6Rw
7WWV78qheoURFTNiUYw23anG9jl3+ToLZGkpyLIlExsNqsu/VVo4wgbAJ0Y=
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:23:19 2025 by rpki-client