This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4949eeb8-7d20-46c5-8118-d8506fef2259.roa
File:                     4949eeb8-7d20-46c5-8118-d8506fef2259.roa (raw, json)
Hash identifier:          SnQWKbvTfTh6rYlX3yASQoCFh2SSdIBLT5N/3iWL/oc=
Subject key identifier:   B4:AB:D2:44:B7:00:5D:61:90:50:5C:31:88:60:D2:56:0E:56:3C:FE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3A4A5F2629AEE0997C7512044C7BEC96FADA94AF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4949eeb8-7d20-46c5-8118-d8506fef2259.roa
Signing time:             Wed 10 Dec 2025 02:50:08 +0000
ROA not before:           Wed 10 Dec 2025 02:50:08 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.239.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4a:5f:26:29:ae:e0:99:7c:75:12:04:4c:7b:ec:96:fa:da:94:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 02:50:08 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=c008d64e62ff1b598e280276deb03005b1f6a019d27065dcc195b5269dbd3d1f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:b3:6a:c9:34:27:b0:a0:ab:dc:86:47:1a:
                    60:dc:e9:b8:4e:82:e3:51:42:61:4d:c3:99:7a:c3:
                    e8:7a:d6:fd:5b:a2:94:4c:e9:b0:c6:db:7f:89:fa:
                    d8:bd:12:ec:60:f2:b4:93:95:26:a6:98:f6:60:0a:
                    f9:45:8d:4a:66:2d:0f:f4:7f:09:74:04:e8:a2:5e:
                    ea:e7:d8:16:cf:1f:2a:00:66:c7:a5:e6:07:90:fa:
                    9f:98:84:7b:3a:87:e5:f6:05:bc:43:3d:ce:8c:c9:
                    7e:8c:94:fc:3d:9a:cc:27:a1:d4:be:36:3c:a9:b3:
                    e3:b7:b8:62:ad:a5:bb:92:6d:87:d3:d4:e6:c9:07:
                    8f:73:18:1b:f3:ac:fb:a6:ab:e4:f7:ca:ad:fb:2d:
                    22:31:be:65:5c:2d:b6:26:66:3f:e0:b3:6a:ea:d9:
                    9c:85:e2:d0:8f:3a:e0:0c:00:2b:0c:f0:3b:b0:8b:
                    0b:76:28:fa:2a:8f:02:9a:4a:0f:28:94:86:98:19:
                    98:3d:6c:71:3c:e9:c4:ec:d0:bd:7e:e1:e2:09:d8:
                    ff:39:76:7a:47:27:ac:ff:f4:d3:64:63:77:ad:1b:
                    de:23:88:d9:31:69:c2:64:27:b5:fe:66:36:7b:b0:
                    6a:88:76:b4:df:f4:0b:a7:88:91:d8:ac:f2:af:2f:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AB:D2:44:B7:00:5D:61:90:50:5C:31:88:60:D2:56:0E:56:3C:FE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4949eeb8-7d20-46c5-8118-d8506fef2259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.239.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:ab:b2:8b:95:c7:03:6e:14:6f:c1:91:b5:a6:cf:36:28:54:
         a4:f1:9d:9f:d1:cf:e7:c1:40:db:74:41:09:0e:34:f4:20:a6:
         89:52:1c:bb:13:ff:39:ec:8e:17:98:24:b7:c3:56:72:43:3c:
         8e:93:d5:41:61:54:e5:7a:d1:14:c3:60:78:18:17:b8:2d:a0:
         cc:84:76:f7:5d:fd:9a:e7:13:6d:51:a4:42:a7:b6:cf:66:19:
         65:cc:33:c7:99:70:a6:0d:42:82:07:7e:d5:56:7a:34:69:6a:
         51:03:e2:92:7f:c3:bd:aa:b4:33:b3:f7:74:95:51:cf:4b:77:
         72:ae:1a:53:26:fd:9c:26:ae:66:2d:a0:b3:ff:cd:e6:07:2e:
         fa:bb:56:7f:5b:6d:f1:bd:3b:6b:93:4c:8c:fc:29:b0:7c:79:
         eb:17:20:cf:8b:c8:4b:b6:40:7a:81:de:b3:25:40:f1:4a:96:
         3d:91:d6:69:b4:88:86:17:0e:d8:5f:c9:29:00:64:83:f7:5a:
         8d:21:5a:85:b6:e3:5f:03:f0:c3:2c:08:00:c0:39:ad:92:fd:
         d7:78:77:ef:97:62:90:b3:06:c5:91:1c:20:e7:3c:6b:e5:41:
         4e:0a:86:88:e8:11:ad:4a:fc:7e:e2:47:37:a4:e4:f2:35:fd:
         ce:3b:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:50:24 2025 by rpki-client