This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44893a20-cc5e-4d43-a59f-e7dd9c9fee02.roa
File:                     44893a20-cc5e-4d43-a59f-e7dd9c9fee02.roa (raw, json)
Hash identifier:          jbs1yCEiqOQAOxN4jS13ozI/TVWpnqK1Vj2/lpPi5xs=
Subject key identifier:   8D:CA:3F:3E:A9:3E:15:50:A0:89:AE:72:ED:6D:CD:AE:CB:39:FA:AA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       01B4AD558CDB3CF372ED5A841B5D652C079F4C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44893a20-cc5e-4d43-a59f-e7dd9c9fee02.roa
Signing time:             Wed 10 Dec 2025 03:50:51 +0000
ROA not before:           Wed 10 Dec 2025 03:50:51 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        141.186.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b4:ad:55:8c:db:3c:f3:72:ed:5a:84:1b:5d:65:2c:07:9f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 03:50:51 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=e19ac6019eacd7a7d74c24c7cea738ac07acb8b90959313227fc6376a3f704fa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1e:fd:c0:62:ac:d5:6f:84:13:cf:ae:cb:fe:
                    cd:3e:5b:82:68:73:8e:64:dc:3a:92:e6:e0:68:e9:
                    24:22:d3:66:3f:d2:96:c2:51:21:75:cf:09:fa:74:
                    4d:ab:28:06:96:1f:ca:43:39:60:27:9e:e9:a8:54:
                    43:44:4f:3e:35:fc:2d:20:e3:e9:bf:76:24:6b:89:
                    d5:b5:3a:76:99:77:27:e6:94:05:c8:45:1c:3d:1d:
                    2c:3c:4e:f5:c3:81:0f:8f:c4:14:bb:5e:2e:87:a6:
                    b5:eb:da:69:12:7c:29:18:92:03:13:5d:05:50:c0:
                    7f:a9:b3:48:0f:55:52:cd:d2:ce:8e:f3:5f:e9:ae:
                    89:ba:46:a0:cd:a5:02:a1:c3:37:d1:f1:84:8c:98:
                    bb:df:0c:76:15:e9:3c:e6:a0:fc:00:b6:07:78:a1:
                    4d:23:4f:d5:0d:5d:5c:5f:af:92:63:d5:88:e3:e4:
                    87:c3:0c:ac:7c:7e:3a:bd:f3:64:1f:36:f0:bf:b7:
                    f4:0a:e8:0b:b3:fb:42:d9:8c:80:2c:73:43:19:34:
                    d8:d4:1b:c4:fc:a5:47:3d:79:27:f7:91:23:f1:19:
                    d1:e8:19:0e:c3:b9:cb:fc:b5:82:cb:29:a3:c5:11:
                    19:86:e1:80:6e:79:d0:76:41:53:a3:d0:f4:5b:30:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CA:3F:3E:A9:3E:15:50:A0:89:AE:72:ED:6D:CD:AE:CB:39:FA:AA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44893a20-cc5e-4d43-a59f-e7dd9c9fee02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.186.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:89:d4:65:7c:a2:b8:4f:1b:6b:8e:53:c9:a6:6c:b9:22:
         32:e5:9e:5b:1d:50:63:18:ad:86:11:ea:fe:26:5e:f8:a8:4d:
         99:fb:ad:da:74:f1:b5:50:1e:c8:fb:e5:47:62:3c:73:e0:d1:
         1f:f2:e7:f9:6d:0e:1a:cd:69:05:29:a1:2b:16:02:8a:53:21:
         c0:87:45:17:9d:bc:ff:e4:f8:15:51:30:51:e5:60:f4:7c:e9:
         9c:66:27:ec:f1:dd:6d:c5:1b:60:03:32:e4:46:ab:61:25:78:
         ef:05:31:89:4b:e5:bc:15:39:51:c4:34:5b:f1:b5:4d:0d:03:
         88:ca:70:7d:78:fb:94:87:f5:53:3b:c7:53:4b:e3:bc:99:e1:
         f0:ef:2c:0e:be:ca:e5:a2:87:8f:23:20:07:7e:37:41:e6:94:
         ee:58:c9:de:e8:78:3a:15:df:c2:d0:5a:78:d6:6e:b0:74:4c:
         51:39:0b:ed:8a:e4:a6:f6:31:94:98:40:bf:ea:f5:74:14:3c:
         00:71:5b:d8:69:ca:5e:a6:61:f1:db:db:d0:49:4c:a4:08:d5:
         3e:8d:18:30:39:d2:88:95:19:c6:07:ab:4a:10:8f:f5:c2:38:
         be:5a:35:79:d1:ac:fb:c0:c2:1a:ed:e4:77:17:e4:5c:47:fa:
         00:ea:17:f5
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgITAbStVYzbPPNy7VqEG11lLAefTDANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx
ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEyMTAwMzUwNTFaFw0yNjAzMTAyMzU5NTla
MHoxSTBHBgNVBAUTQGUxOWFjNjAxOWVhY2Q3YTdkNzRjMjRjN2NlYTczOGFjMDdh
Y2I4YjkwOTU5MzEzMjI3ZmM2Mzc2YTNmNzA0ZmExLTArBgNVBAMTJDVmMjc2MDQ1
LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOse/cBirNVvhBPPrsv+zT5bgmhzjmTcOpLm4GjpJCLTZj/S
lsJRIXXPCfp0TasoBpYfykM5YCee6ahUQ0RPPjX8LSDj6b92JGuJ1bU6dpl3J+aU
BchFHD0dLDxO9cOBD4/EFLteLoemtevaaRJ8KRiSAxNdBVDAf6mzSA9VUs3Szo7z
X+muibpGoM2lAqHDN9HxhIyYu98MdhXpPOag/AC2B3ihTSNP1Q1dXF+vkmPViOPk
h8MMrHx+Or3zZB828L+39AroC7P7QtmMgCxzQxk02NQbxPylRz15J/eRI/EZ0egZ
DsO5y/y1gsspo8URGYbhgG550HZBU6PQ9Fsw/KkCAwEAAaOCArAwggKsMB0GA1Ud
DgQWBBSNyj8+qT4VUKCJrnLtbc2uyzn6qjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t
GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz
MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4
ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw
OTA0ZTQyZDIvNDQ4OTNhMjAtY2M1ZS00ZDQzLWE1OWYtZTdkZDljOWZlZTAyLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt
NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAI26MA0GCSqGSIb3DQEBCwUAA4IBAQBbUYnUZXyiuE8ba45TyaZsuSIy5Z5b
HVBjGK2GEer+Jl74qE2Z+63adPG1UB7I++VHYjxz4NEf8uf5bQ4azWkFKaErFgKK
UyHAh0UXnbz/5PgVUTBR5WD0fOmcZifs8d1txRtgAzLkRqthJXjvBTGJS+W8FTlR
xDRb8bVNDQOIynB9ePuUh/VTO8dTS+O8meHw7ywOvsrlooePIyAHfjdB5pTuWMne
6Hg6Fd/C0Fp41m6wdExROQvtiuSm9jGUmEC/6vV0FDwAcVvYacpepmHx29vQSUyk
CNU+jRgwOdKIlRnGB6tKEI/1wji+WjV50az7wMIa7eR3F+RcR/oA6hf1
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:34:55 2025 by rpki-client