This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2980344d-b84e-4e27-a24b-61e150aadaa3.roa
File:                     2980344d-b84e-4e27-a24b-61e150aadaa3.roa (raw, json)
Hash identifier:          Tq/j7elRrgqMwBqxk1QtLb02gsiEdg2DauqPHZ86KGQ=
Subject key identifier:   58:2A:21:4A:44:5A:B7:29:E1:5F:F7:48:B8:18:A5:25:78:BA:EA:62
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2F7D7A8B478359D70FA3D1881DABD8722D1BCC3D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2980344d-b84e-4e27-a24b-61e150aadaa3.roa
Signing time:             Wed 10 Dec 2025 02:41:13 +0000
ROA not before:           Wed 10 Dec 2025 02:41:13 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     6167
IP address blocks:        161.188.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7d:7a:8b:47:83:59:d7:0f:a3:d1:88:1d:ab:d8:72:2d:1b:cc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 02:41:13 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=5c32161685f9c8d17cfe92b54d4cf1bd33027a05297dd8f284e8c4c1c5d98649, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:d5:e6:c4:7c:9a:ad:fe:3c:3d:2b:c6:2b:
                    d3:08:7a:70:5a:5e:5f:78:59:22:ae:57:1a:62:a6:
                    48:1f:d0:06:a3:7d:27:9a:90:fb:90:d4:69:a5:d5:
                    de:dc:fe:65:23:dd:8e:f8:05:20:3f:df:ca:84:9e:
                    34:e8:81:38:d4:fd:c9:22:7b:47:06:a2:66:04:84:
                    0f:6a:60:71:c6:aa:7c:45:ee:26:11:0e:d3:e8:b2:
                    07:f3:4a:ea:0b:81:a3:17:a1:de:51:fb:d7:df:07:
                    14:40:a3:91:ef:43:67:9f:70:89:9e:5f:63:99:5c:
                    a3:9c:26:15:93:96:95:e0:d6:f9:3a:68:13:49:db:
                    bf:7b:94:31:51:a9:08:4a:05:71:c6:f3:3c:40:03:
                    49:ea:61:b3:38:dc:59:ef:d1:91:39:5c:f3:72:86:
                    be:2a:1c:3b:be:d6:de:74:09:99:4e:43:0a:55:1e:
                    e3:64:cd:94:ff:f7:d8:51:b4:d5:72:f5:80:58:f4:
                    be:fc:3b:12:f8:ba:a9:79:cb:8e:93:75:75:62:7b:
                    ff:da:91:69:14:99:66:19:f8:6e:4a:a6:65:56:ea:
                    b3:46:1e:c5:05:fd:b9:21:08:b0:fe:0a:b8:ab:d5:
                    0b:82:d7:34:de:52:04:09:9c:97:08:b0:bd:9f:29:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2A:21:4A:44:5A:B7:29:E1:5F:F7:48:B8:18:A5:25:78:BA:EA:62
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2980344d-b84e-4e27-a24b-61e150aadaa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:e7:f5:b4:49:d2:32:7d:ef:3a:e8:98:69:82:82:d3:ad:c9:
         f8:86:a3:b7:60:54:a7:c1:f5:e8:6d:4e:f7:84:28:15:ca:ed:
         20:cf:3a:50:78:8d:5e:3d:f7:7a:1e:4a:39:c5:ef:3f:00:cf:
         00:75:47:dc:be:a3:24:86:23:a5:66:0c:79:f0:4b:bf:b5:e6:
         f9:99:21:a3:e9:d1:c8:56:ad:00:ae:c7:58:b6:e4:28:cc:1b:
         fc:2e:11:fa:0a:09:9b:a8:9e:f6:4d:6b:c2:d7:e4:28:3b:90:
         3e:60:4f:7b:63:3a:75:0d:64:00:a2:c2:76:d6:86:bd:af:40:
         e9:98:ed:55:64:94:60:d0:5f:32:40:1d:01:ee:c9:53:09:32:
         62:eb:7c:ed:79:11:8d:dd:03:b7:0f:af:6d:f5:e2:c9:7f:88:
         8f:28:6f:2e:6c:8a:5e:bb:81:52:06:ec:66:13:62:f3:1c:9a:
         89:38:d2:29:49:1c:d6:29:8c:3b:11:72:80:30:50:7a:5d:0f:
         c0:d7:ab:4a:d7:d3:3f:db:bc:4c:dc:1f:b5:3b:02:d4:08:80:
         8c:46:e7:8c:1b:79:96:c3:32:56:2e:92:d3:c7:66:4f:8b:7c:
         e4:75:8c:a3:23:ac:d4:3b:e0:c2:eb:6b:e9:ea:2a:40:c0:db:
         ec:bb:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:48:14 2025 by rpki-client