This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ab011af-fada-4c8e-b056-1a9dfdb769da.roa
File:                     3ab011af-fada-4c8e-b056-1a9dfdb769da.roa (raw, json)
Hash identifier:          em7EWDplgdtgDYeVUsuA+PCXzNeVHIMIipNjxem2Zk0=
Subject key identifier:   D3:3E:D3:62:13:49:A3:83:86:13:51:D4:E4:9B:B6:0C:17:81:4B:6E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       55CD8C3D3783F3D493AFCF4640EF41DA76191FC6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ab011af-fada-4c8e-b056-1a9dfdb769da.roa
Signing time:             Wed 10 Dec 2025 01:00:41 +0000
ROA not before:           Wed 10 Dec 2025 01:00:41 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.119.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:cd:8c:3d:37:83:f3:d4:93:af:cf:46:40:ef:41:da:76:19:1f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 01:00:41 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=29872d7e6f0217fbcb0366979cd34d1abab52128f1db1ee6f0ee1cc04768a755, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b5:c0:fc:61:1f:70:41:d3:8b:20:8d:36:01:
                    e7:69:7a:4c:31:15:2b:a0:b5:51:eb:e2:de:e1:1b:
                    7a:c7:76:23:ba:70:56:b0:2d:ba:26:69:3c:0d:de:
                    33:7a:10:c7:a2:35:24:69:d9:d2:99:e7:75:d3:1a:
                    88:60:ff:d1:f8:5a:d2:bd:c2:8b:42:56:e3:27:22:
                    e5:f7:05:81:23:e7:ed:2e:2b:9c:1c:8f:6a:7f:2f:
                    c4:d6:24:8c:fa:68:18:93:8e:09:3b:4a:0b:a6:1b:
                    9c:0c:23:2d:e1:39:3d:5c:b5:4a:89:86:aa:da:35:
                    e5:a3:79:3b:9e:1f:da:2d:63:f7:b6:bc:95:1f:6e:
                    e6:fe:ef:4c:64:27:bf:c2:ad:f5:0a:d8:d2:20:e8:
                    36:42:f8:ba:33:f6:fd:b0:63:24:6f:ed:49:79:95:
                    92:cc:d3:7a:e9:d6:e5:1d:1c:55:5c:5f:6e:74:df:
                    e9:09:47:c2:70:da:2b:29:7b:f5:8d:79:eb:3b:3d:
                    1d:99:ab:7a:c4:cc:94:07:04:cb:fb:45:06:7c:f4:
                    30:3c:42:6f:aa:59:d8:5c:ae:55:30:3b:b8:00:a2:
                    e6:ec:7a:1e:49:93:b1:38:01:67:83:e7:1c:8d:42:
                    2e:fd:e0:71:5c:0b:cb:8d:6f:55:77:78:86:a6:41:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3E:D3:62:13:49:A3:83:86:13:51:D4:E4:9B:B6:0C:17:81:4B:6E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ab011af-fada-4c8e-b056-1a9dfdb769da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:d9:f0:fa:31:8b:f9:20:3a:01:b0:fc:7e:0d:50:b3:1f:6a:
         84:0a:1e:c2:63:ef:f1:21:54:27:da:29:45:ba:81:ea:2a:0e:
         e2:12:3b:64:82:a8:7f:78:12:ec:b5:8e:de:fe:c1:34:b3:e1:
         f0:21:28:cd:dd:db:c7:cb:b1:48:54:00:01:1e:86:b8:eb:db:
         37:4f:58:32:74:9a:fd:30:c7:55:3a:c9:f1:a6:2e:f5:7b:11:
         3d:86:b7:61:53:f6:19:5f:b4:70:38:01:74:df:ff:ec:5b:d1:
         2d:26:20:66:fc:c6:57:5b:8f:08:4f:a6:41:09:ca:ad:20:73:
         a9:74:b7:88:f1:47:1e:41:3b:24:c0:41:c6:f1:e8:67:0c:20:
         23:90:f3:aa:05:85:29:2b:75:e3:22:bd:1f:98:cb:6d:f3:ed:
         02:91:5a:61:91:5b:e8:f6:0f:a6:8f:5e:cf:92:3c:f4:a8:48:
         0b:6a:60:06:07:aa:5d:ad:e3:05:88:92:74:7b:9b:0b:38:c7:
         26:f4:c0:bc:8b:a9:9d:d4:7c:bf:7a:c2:f2:d6:c3:8e:06:a0:
         ec:e6:df:8c:bf:09:77:48:04:af:97:f3:64:40:ea:44:8d:6a:
         ec:d5:70:18:69:b5:7b:8e:5f:2a:3e:ea:5f:0d:cd:a3:c9:cc:
         a7:be:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:12:43 2025 by rpki-client