This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa
File:                     4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa (raw, json)
Hash identifier:          NyucbB9cnpzV/qcmj5VTkDKNAIBrixj2VajFjNms+cY=
Subject key identifier:   B2:3E:EA:0C:A0:E4:72:10:FD:64:47:90:EF:75:E9:A4:3C:E4:BC:EF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3B40A4C95BEFEE7AE9794727CA188C5E1F62EBE7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa
Signing time:             Wed 10 Dec 2025 01:30:50 +0000
ROA not before:           Wed 10 Dec 2025 01:30:50 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.153.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:40:a4:c9:5b:ef:ee:7a:e9:79:47:27:ca:18:8c:5e:1f:62:eb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 01:30:50 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=691624c8ad8692b28cd6ffcb8535aeb2a14b064a91d073aaf0769cfd3337fcfb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:5e:3c:45:7d:1f:41:5f:34:94:c1:c8:80:
                    24:a6:5b:11:61:72:78:2e:59:53:eb:81:6a:8e:0a:
                    28:70:eb:ec:45:18:44:e3:a5:9b:5a:68:c6:53:b5:
                    7a:f3:c4:0f:da:7f:53:ee:12:f7:49:f2:d5:c8:83:
                    07:f4:48:35:ae:40:2c:67:ac:4c:9f:87:7c:a2:e3:
                    57:73:05:54:70:9d:1d:1c:dc:1d:7b:b1:52:33:75:
                    d4:4f:43:31:81:a0:0d:f9:eb:c3:06:5c:dd:20:2c:
                    8b:2f:32:7c:3e:6c:18:23:fe:97:62:2a:7b:ee:88:
                    10:37:36:c3:13:9c:d8:5f:80:09:01:f9:94:ea:8e:
                    8f:be:70:61:88:ce:f2:3f:66:5d:85:74:73:04:f7:
                    80:50:a8:49:c1:aa:75:8b:f3:b5:4b:17:de:c6:aa:
                    e3:93:aa:e4:8a:33:10:fb:ff:d9:72:26:57:ef:9b:
                    f9:1e:69:2d:35:be:9b:50:1f:25:14:2b:75:d2:62:
                    62:94:e8:4d:ed:92:b1:92:01:a9:2b:02:6e:8b:4d:
                    cb:4e:1d:0c:c8:30:a8:65:02:94:79:67:a1:24:16:
                    d3:a9:81:dc:87:2d:56:36:2e:93:e6:d2:8d:6a:a0:
                    3d:12:d6:24:05:fc:c9:ab:39:4f:fd:77:0b:e6:fe:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3E:EA:0C:A0:E4:72:10:FD:64:47:90:EF:75:E9:A4:3C:E4:BC:EF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.153.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:5e:fd:30:22:cc:06:86:57:0d:63:c9:5c:3f:00:53:2b:22:
         fe:c4:71:5c:31:90:eb:a6:95:c0:ff:66:0b:58:71:ba:36:4a:
         70:54:76:8e:63:d5:66:9b:a8:27:ea:e8:94:ef:eb:ee:e1:d0:
         72:d9:9e:dc:d5:34:d1:c0:67:52:f9:bb:0f:7e:69:37:84:1e:
         ca:2d:83:7a:21:0d:db:16:d3:88:0b:1a:93:28:d4:41:96:b9:
         6e:26:0a:97:4f:a4:75:68:65:eb:aa:9c:be:18:b2:d9:c1:cc:
         56:3e:7b:40:8b:d9:b4:f9:ef:c7:02:89:a9:53:f5:95:2b:36:
         4e:f1:61:b5:f8:ec:fb:8f:ed:7e:5d:c6:5f:d1:8f:da:9e:a8:
         93:f2:88:a4:40:db:30:91:b3:ff:5c:3e:36:5c:12:72:d2:a9:
         6a:41:90:43:a2:52:ae:56:fc:f3:4e:a4:a8:60:58:2b:08:5c:
         f3:7e:e2:f5:14:60:c1:e3:fd:22:6e:7b:c5:2e:59:90:b2:16:
         ea:bb:ff:48:8f:bd:22:cf:16:4f:fd:dc:76:74:8d:3e:49:e6:
         ca:57:da:44:d9:65:a1:69:c3:58:82:d1:a3:dd:61:0b:9b:6b:
         2b:85:aa:2f:2c:f0:63:36:01:5c:2a:af:3f:e2:9e:06:1d:5b:
         e2:7b:eb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:39:20 2025 by rpki-client