This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32a948a3-8f4b-4791-a31f-d241d99a3a5c.roa
File:                     32a948a3-8f4b-4791-a31f-d241d99a3a5c.roa (raw, json)
Hash identifier:          XvOxoDIvGEqyYaXFQzxKp+1cA8ZZ/iIp7aA7eSUQils=
Subject key identifier:   7B:44:B4:AE:2C:8A:20:B0:83:EB:D7:75:FB:D8:3C:86:1A:D1:A3:44
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0FBEE2D38E58A2A5EAFAE14B967F5BE08FA97890
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32a948a3-8f4b-4791-a31f-d241d99a3a5c.roa
Signing time:             Wed 10 Dec 2025 04:11:24 +0000
ROA not before:           Wed 10 Dec 2025 04:11:24 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.240.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:be:e2:d3:8e:58:a2:a5:ea:fa:e1:4b:96:7f:5b:e0:8f:a9:78:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 04:11:24 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=3cd0ce0bb2a26f37ba05b4f1bbfdb05de260de3f0f59e1f87162df5ec6336d4b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:37:7d:e7:ca:1a:a2:b6:e7:de:eb:df:ff:
                    1b:a7:68:74:74:a3:1c:86:dd:69:a5:00:f0:18:c6:
                    96:6a:69:c5:67:bf:73:41:52:cd:3a:db:28:fe:86:
                    fb:42:8b:74:7d:a1:fc:77:f2:2b:1d:93:09:37:3b:
                    7b:bc:ca:dd:52:ff:a1:32:8d:a3:dd:15:10:3f:80:
                    d3:db:09:13:83:5c:03:dd:d1:bc:67:d6:6c:d2:53:
                    e0:c9:06:fd:7a:03:a1:67:f3:c6:a5:b3:ce:97:c8:
                    73:7c:1a:98:32:d8:49:2a:94:f8:04:d2:7c:50:9c:
                    8a:71:87:44:d9:56:0a:14:fd:63:e3:12:b3:94:d4:
                    80:ac:7c:43:bc:c8:3b:a0:b0:c9:b9:aa:e2:a6:a3:
                    cf:80:20:9c:8f:ba:d9:fc:91:39:ac:dd:78:17:a1:
                    23:d0:dc:ce:e2:b5:7a:79:3b:cf:6b:6b:e3:00:5d:
                    10:9c:fe:cd:18:9b:d5:0b:7b:52:6a:e5:a8:c3:bd:
                    59:7a:8e:94:b9:db:62:c0:4d:f9:e9:1a:3b:f1:e3:
                    b8:22:f8:7a:a5:16:8c:cd:1e:95:fe:bc:a5:58:ba:
                    24:49:3d:8e:7c:c8:c4:37:04:d6:28:03:b6:eb:32:
                    47:fa:c9:be:dd:d0:a9:1b:84:e1:9b:43:2f:aa:a5:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:B4:AE:2C:8A:20:B0:83:EB:D7:75:FB:D8:3C:86:1A:D1:A3:44
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32a948a3-8f4b-4791-a31f-d241d99a3a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:7b:44:b0:c9:0e:41:a6:1f:7e:f1:f1:b8:d9:0d:d5:5c:7c:
         35:2e:38:53:f1:45:ca:b1:bd:cf:90:86:00:79:c2:a1:39:b8:
         8a:af:80:33:f8:b4:d4:26:bc:c2:14:be:1b:5e:fc:1d:9d:14:
         84:17:68:78:1e:85:37:96:1a:98:73:9b:04:d4:da:51:58:e7:
         79:c5:df:51:59:48:7f:62:bc:ee:84:c4:48:21:b0:79:08:ea:
         cc:0b:35:74:3a:88:0a:05:67:ee:87:e7:18:94:91:00:1b:89:
         e8:8d:69:55:3f:43:95:e4:b0:94:ce:06:5a:6d:c4:74:85:ae:
         79:19:43:40:bb:3b:11:e9:af:1b:a8:6b:c9:09:95:70:50:f6:
         ce:0f:26:38:0d:48:12:ff:c7:3e:c4:0f:f5:ec:f3:7c:b7:1a:
         24:f7:fe:dd:45:2e:c8:1a:72:89:6c:fd:87:cd:71:4b:b5:47:
         70:94:e6:2a:e1:00:a3:49:bc:a8:77:12:b0:72:21:13:2c:97:
         43:60:fb:33:2b:d3:e9:d0:9b:d8:04:6e:cf:9f:5d:34:91:87:
         c6:3d:fd:47:a7:8f:04:b1:1a:bc:17:02:79:cb:53:ad:9b:e2:
         3c:d6:8b:63:c5:75:66:da:d6:f1:a4:f9:b8:24:fd:c3:0c:f1:
         15:1d:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:55:24 2025 by rpki-client