This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ece00f8-daa0-4812-a2a7-efe0e2b3227c.roa
File:                     2ece00f8-daa0-4812-a2a7-efe0e2b3227c.roa (raw, json)
Hash identifier:          Z8D36bsDhdN6WSlAOqeuDIKc+tR2OHb+c+MXomjt1UA=
Subject key identifier:   B1:BD:E5:CA:4C:0F:25:D6:B2:56:5B:AD:76:AC:2E:15:1B:E2:D8:74
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       154150FA6E4BD0528FACE2026897FC45ACF6B8A3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ece00f8-daa0-4812-a2a7-efe0e2b3227c.roa
Signing time:             Wed 10 Dec 2025 01:41:41 +0000
ROA not before:           Wed 10 Dec 2025 01:41:41 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.239.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:41:50:fa:6e:4b:d0:52:8f:ac:e2:02:68:97:fc:45:ac:f6:b8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 01:41:41 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=c746af390a66a02a8fda468ee30a2e88da9826553246e16d0c05563f8498075d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:78:66:ad:19:1a:09:ad:52:7d:10:2f:0f:65:
                    51:59:51:e9:c4:b7:b3:d9:0e:ef:91:57:8d:5f:8e:
                    1e:f1:c5:27:d2:f6:87:fe:1a:72:25:bf:67:0d:35:
                    03:0a:31:da:fd:99:2c:ff:91:23:f8:02:75:0e:ba:
                    ad:c1:bf:09:d7:bb:d9:a1:ad:c6:b7:9b:90:a6:ac:
                    9a:4a:b1:0a:42:a8:62:22:0b:83:21:2c:32:cb:b1:
                    a2:48:90:2a:a8:bc:64:b0:bc:17:83:c4:ce:db:35:
                    56:4a:60:f9:fd:69:48:d7:58:3b:3c:eb:64:68:bc:
                    cc:cf:31:1d:4c:db:a1:7a:e6:25:9f:c6:45:34:b7:
                    4d:d8:a9:45:de:e7:42:77:87:82:99:0f:cb:a3:1a:
                    05:8f:b3:11:f9:11:6a:00:e8:ce:e8:fe:6e:c2:7e:
                    20:4c:24:77:14:92:79:bf:6d:d0:ec:80:5e:84:c1:
                    e7:48:a8:89:c8:0a:e9:8c:fb:13:d9:ef:a7:78:e6:
                    14:78:d5:da:ba:97:69:59:11:9e:31:65:8e:61:1b:
                    cb:65:e0:71:57:ff:df:85:3c:0f:3e:91:92:f9:5a:
                    c3:47:a9:28:e5:18:07:cd:0c:7c:98:7e:72:e1:89:
                    24:6c:c8:30:b0:99:01:2a:00:67:34:e9:26:3e:9f:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BD:E5:CA:4C:0F:25:D6:B2:56:5B:AD:76:AC:2E:15:1B:E2:D8:74
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ece00f8-daa0-4812-a2a7-efe0e2b3227c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.239.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:97:3a:a3:6d:1e:67:a0:f8:4f:a8:12:24:ad:f9:73:3b:c0:
         78:f2:89:04:45:c9:cd:b2:cc:1b:19:46:4b:bc:85:57:18:4a:
         90:10:b8:bd:58:5f:c6:78:26:7e:bb:13:44:f3:62:5a:25:88:
         91:4c:f1:5e:1c:20:56:bc:c5:69:e4:89:2e:5b:81:89:b6:de:
         b4:c0:d1:cb:79:01:56:bd:bf:67:51:f0:23:9b:b3:fb:d6:60:
         00:94:0d:35:78:7d:73:39:c2:9f:7f:e0:84:d5:ec:27:b8:0f:
         ff:09:56:ac:ab:61:41:5c:4f:00:20:f7:b3:3c:74:76:51:86:
         3f:02:3e:f3:71:02:80:4d:71:60:b1:bb:e2:b0:04:2b:69:8b:
         f8:77:85:88:9f:e1:7a:42:50:9f:c1:ba:8b:b1:4b:94:35:a6:
         ac:2f:bf:e3:5c:16:5c:d7:7e:5c:63:1b:d5:3a:83:d1:0a:48:
         64:3c:76:85:63:16:19:96:d3:14:e6:eb:1f:0c:19:28:1b:74:
         b7:5d:59:f4:29:55:42:23:7d:b6:fc:0e:5e:70:7c:d7:bd:91:
         a5:aa:33:c8:94:c3:60:b4:69:3d:96:0b:67:a2:13:78:75:cc:
         77:ea:cb:cb:5f:ae:96:51:28:1f:19:41:0e:6b:dd:e0:20:73:
         3b:08:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:55:11 2025 by rpki-client