This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b75d649-931d-49de-9c0e-83c696f88b78.roa
File:                     5b75d649-931d-49de-9c0e-83c696f88b78.roa (raw, json)
Hash identifier:          qdnCIp7bhPIkDsrRgenQhRjyPZJoICK0uttuBmRWeY8=
Subject key identifier:   0D:50:91:AB:8E:E7:B8:03:A6:79:B3:C4:DB:80:6D:3E:40:D3:2D:68
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       08A9EE390B6C4EEB5AC889467446DBEECF75F37D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b75d649-931d-49de-9c0e-83c696f88b78.roa
Signing time:             Mon 08 Dec 2025 01:20:09 +0000
ROA not before:           Mon 08 Dec 2025 01:20:09 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.2.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a9:ee:39:0b:6c:4e:eb:5a:c8:89:46:74:46:db:ee:cf:75:f3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  8 01:20:09 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=b4416faf79da1fe4658f8d22fd397aa1111730cde6b7f00aedd3dd648b8b618d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5d:1e:1c:e3:68:f4:a4:c7:9e:33:0a:26:a6:
                    1c:b9:24:fe:f3:cf:66:f7:86:89:4a:03:06:e8:8f:
                    9f:00:9b:d1:30:3e:c6:b4:7f:71:1d:d5:f7:81:19:
                    d1:d9:b7:35:39:54:66:4b:1d:43:d0:d9:79:c2:2a:
                    82:bd:14:ef:ba:14:40:63:b0:86:ae:56:17:5a:68:
                    7e:f5:8a:80:d1:ba:11:79:c6:41:cf:ab:90:e6:74:
                    f9:fd:80:62:f5:7b:da:28:7f:ec:b3:72:25:88:d7:
                    73:0b:4f:6a:cd:bb:7a:67:cd:ca:88:c1:19:12:46:
                    4d:a0:6c:44:d1:07:9b:db:2a:c2:3e:b6:69:8e:ac:
                    aa:dc:83:63:7c:b5:56:1c:23:75:b7:84:78:d2:0d:
                    cb:34:d5:0f:32:0f:a4:8a:d5:0d:f2:ef:2a:74:2e:
                    36:b6:ff:d6:69:4a:ff:ef:2a:ec:e3:90:f3:49:a8:
                    03:da:2f:9e:03:40:45:a9:42:95:a8:68:64:37:40:
                    b2:15:7c:0d:73:40:93:cd:c7:56:28:06:95:d9:7c:
                    8e:41:08:a3:9a:a7:9e:b7:ec:31:16:d0:9d:8f:d0:
                    e2:fe:c4:51:c1:fd:4c:a2:ef:01:3d:24:2a:f1:b2:
                    d0:b0:f3:2b:4c:37:a7:10:bc:7f:a3:f5:ed:3e:9c:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:50:91:AB:8E:E7:B8:03:A6:79:B3:C4:DB:80:6D:3E:40:D3:2D:68
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b75d649-931d-49de-9c0e-83c696f88b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.2.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:a6:8d:55:f8:d6:67:b0:07:17:86:18:51:b8:9a:1d:25:
         e8:89:4d:d4:fb:51:3b:bb:3e:30:b1:f0:45:fb:d1:99:d1:01:
         42:bc:80:bf:87:33:83:bb:25:71:21:14:3e:51:55:82:a7:ed:
         5b:3f:21:6c:3b:22:3f:23:a6:5e:6b:6e:cd:46:92:05:8e:63:
         81:98:87:bb:a2:55:7a:60:c4:99:12:43:e4:ad:23:79:9f:ca:
         22:db:d7:51:37:ea:26:41:54:f3:4c:74:6d:e0:d7:b8:e4:4a:
         71:34:98:e3:9d:5d:7d:26:a6:3e:64:4e:91:f8:ee:09:a5:10:
         60:ad:8c:e5:c4:81:33:8e:8d:0c:06:75:19:af:77:31:02:e8:
         65:5d:6e:53:21:0b:f1:39:b3:d8:22:02:a5:dc:9b:67:fa:8b:
         99:72:dc:f8:3f:59:7e:ff:23:bb:9d:64:fc:82:dd:bf:d2:bc:
         92:a1:d6:4e:c7:04:b4:24:4e:d0:fe:4f:bf:33:5b:29:94:17:
         31:6e:2a:5a:80:35:2a:4a:66:68:74:de:6a:8e:46:ba:12:c0:
         23:f2:65:7d:c6:30:f6:5b:21:11:15:75:bb:c1:d6:7a:f3:d7:
         b7:0e:4d:79:76:68:b9:2e:95:42:f8:0c:f9:d9:e7:3d:cb:48:
         95:03:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:48:34 2025 by rpki-client