This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d412030-de9a-422e-8f8d-4527e5149a45.roa
File:                     2d412030-de9a-422e-8f8d-4527e5149a45.roa (raw, json)
Hash identifier:          MLgQ9VNGBme6XnPk1LBcVq7wzewSAWA+5s2QAWu5DkA=
Subject key identifier:   C6:33:4B:C3:CA:A0:6D:EC:67:CD:B8:81:05:56:AC:24:4B:42:75:9C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       45A0F1A34D539AAFDAD7FC615C34F40666544CC4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d412030-de9a-422e-8f8d-4527e5149a45.roa
Signing time:             Fri 12 Dec 2025 00:00:08 +0000
ROA not before:           Fri 12 Dec 2025 00:00:08 +0000
ROA not after:            Thu 12 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.68.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a0:f1:a3:4d:53:9a:af:da:d7:fc:61:5c:34:f4:06:66:54:4c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 12 00:00:08 2025 GMT
            Not After : Mar 12 23:59:59 2026 GMT
        Subject: serialNumber=dd91cfb729552d2bb29914dbb0f7bdd08a22df1aef7683d2c5c587a04cb41afd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:42:ce:6d:ba:55:10:32:2b:58:39:2d:a3:
                    e8:13:d6:68:05:6b:56:f9:65:8c:02:83:e0:9a:02:
                    dc:0a:de:20:bd:c9:e1:5b:03:49:cb:5a:09:dc:35:
                    15:35:59:a4:d4:4d:9d:07:cd:da:c4:11:94:6e:70:
                    47:eb:8b:46:bb:55:97:69:23:1f:76:90:af:0e:94:
                    54:37:ee:6c:13:bf:76:ad:df:6e:f1:3d:7f:2a:5d:
                    db:86:37:c4:ef:49:10:84:df:5f:40:0e:ae:8c:01:
                    23:df:d7:0d:69:b0:31:b8:26:7d:60:0a:0f:34:80:
                    46:49:03:7d:43:a3:24:34:a6:1c:30:c2:b7:79:57:
                    24:23:cd:4a:37:d2:4a:4e:41:ad:eb:ed:b6:5d:2f:
                    24:12:e4:d3:6c:05:ab:25:03:f1:02:f3:58:b5:3b:
                    22:02:ee:72:f5:b8:38:5b:d6:46:3c:f6:2d:30:60:
                    98:09:0a:f0:3e:b8:e5:1f:f0:d0:24:12:bc:e5:ed:
                    fe:c7:e1:22:3d:45:15:e8:c0:2c:16:a5:2c:10:52:
                    bd:f7:c2:64:5c:09:49:d2:cc:17:8f:01:3f:47:fa:
                    5e:a0:26:38:29:0f:ec:af:62:9a:35:89:2b:15:16:
                    f3:80:c3:59:cb:e7:4a:f8:ab:c8:fa:25:30:d3:d9:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:33:4B:C3:CA:A0:6D:EC:67:CD:B8:81:05:56:AC:24:4B:42:75:9C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d412030-de9a-422e-8f8d-4527e5149a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.68.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:aa:36:f9:39:e6:6e:b0:b3:ee:07:89:a2:62:4b:1d:15:36:
         51:14:a6:10:50:ea:82:d9:60:ce:cf:04:a5:58:be:11:86:26:
         d5:1a:5a:23:dd:5b:31:b3:39:2e:75:e1:82:07:71:7d:01:4e:
         ca:a3:cc:29:ad:8d:63:67:34:c2:f2:be:87:f4:0f:de:83:b0:
         fc:39:f0:3d:52:86:ab:8a:a6:f5:19:55:2b:76:67:dd:5c:91:
         ee:ea:9d:bb:18:cd:2c:ba:c6:dc:a0:2f:1d:90:31:47:53:60:
         04:b8:72:85:05:40:06:4f:df:27:38:ee:43:03:d4:78:2f:7e:
         59:19:95:51:2d:a9:1f:dc:68:7f:79:07:ec:d6:0c:aa:74:67:
         85:21:7e:39:ee:59:67:32:44:f6:2f:71:39:94:68:02:79:59:
         28:aa:9f:ab:42:ff:97:c6:d9:d5:85:a6:50:c3:12:66:76:19:
         54:6f:0e:22:5d:ac:88:7f:bf:55:3c:59:b7:df:92:a3:b7:ba:
         4e:a3:79:ff:b2:d9:75:61:72:52:7e:3e:50:e8:1e:52:af:8d:
         a5:bd:e0:84:36:57:e0:58:92:7e:77:fe:cf:11:15:b5:50:24:
         25:58:47:9d:28:13:69:a2:7c:32:a0:a8:42:ab:f7:5b:d0:49:
         2e:81:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:49:41 2025 by rpki-client