This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3c3eae-4fcf-4e4c-b855-8c64d135fa53.roa
File:                     6c3c3eae-4fcf-4e4c-b855-8c64d135fa53.roa (raw, json)
Hash identifier:          X4ahknXdSfaowQKFMyw7sGt7cjUfmEveQ/2W+bKpngA=
Subject key identifier:   1C:4E:47:B4:2B:66:57:EE:71:9D:34:2F:EA:5B:9C:81:B1:8E:DA:00
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       704FB51BAD5DEE44B90ABAD6AA4AEFDDABDA0B43
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3c3eae-4fcf-4e4c-b855-8c64d135fa53.roa
Signing time:             Wed 10 Dec 2025 03:40:09 +0000
ROA not before:           Wed 10 Dec 2025 03:40:09 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.94.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4f:b5:1b:ad:5d:ee:44:b9:0a:ba:d6:aa:4a:ef:dd:ab:da:0b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 03:40:09 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=bc8d6179935508a787c95927b8d3daf817f11fe6f3ebec4f69565e1bfed1f456, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:21:e4:56:79:03:5f:fd:17:2e:16:a3:a4:
                    30:a0:b7:26:13:59:f7:00:84:03:8f:14:77:de:ae:
                    64:e8:8e:c5:57:98:a8:bf:ca:1a:e1:07:ee:b7:e1:
                    2f:ed:66:ab:73:fb:90:91:c9:39:6b:8d:dd:19:1c:
                    cb:39:70:f6:81:8b:fc:f4:c3:32:00:d8:0f:78:74:
                    0e:0d:ea:7c:32:87:07:57:07:72:50:b3:25:3f:b5:
                    a9:39:45:66:1a:55:71:73:8a:38:82:57:24:c1:03:
                    fe:15:05:4f:1c:9b:e6:57:36:b9:66:3b:d9:7b:0a:
                    81:c6:ab:71:f7:6e:36:f3:41:e9:56:a2:5a:6f:2d:
                    d0:f6:a9:6c:60:cd:54:d3:f6:81:8a:52:18:8e:81:
                    ae:6b:84:7c:09:a4:27:e8:df:c0:c4:3d:8a:a4:58:
                    93:0d:46:38:3d:97:35:e4:d5:2b:10:92:4f:8d:f9:
                    cc:a9:32:84:1e:58:d9:5f:af:12:6f:df:63:ba:dc:
                    2c:2a:1a:42:e9:ca:e2:74:b1:00:f9:fa:a2:e4:65:
                    51:93:5d:29:aa:1d:86:a8:dd:c4:25:c0:a6:5f:9d:
                    b9:d3:01:d8:7d:85:02:66:23:4b:01:3a:c1:6d:b1:
                    bc:47:08:8e:5f:29:8c:c8:b8:2a:2a:93:9e:d5:fd:
                    58:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4E:47:B4:2B:66:57:EE:71:9D:34:2F:EA:5B:9C:81:B1:8E:DA:00
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3c3eae-4fcf-4e4c-b855-8c64d135fa53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:b5:ca:14:31:0d:df:cf:cb:94:dc:a7:43:b1:af:a6:1c:92:
         38:fd:85:95:a1:d0:44:e4:0d:d6:ae:74:45:cb:6c:76:9e:d7:
         0a:46:9e:96:70:d2:c7:a2:72:98:5d:c2:76:49:90:72:7f:3b:
         7e:b0:89:40:56:17:4d:bc:37:fc:86:ac:6b:3d:4a:a8:14:a6:
         d1:e7:98:00:1e:ba:10:b4:99:d5:b8:b2:75:c8:53:eb:15:ee:
         f9:9a:35:8a:53:97:83:b0:a0:62:cb:1a:a3:81:e2:93:4b:d3:
         ca:eb:3a:36:2f:3e:a5:74:ea:6b:cb:ac:50:3e:19:dc:cf:d1:
         69:76:07:5d:89:cd:77:ee:35:62:8b:07:b7:53:46:09:5c:6b:
         48:53:ed:41:8c:1e:f9:ae:cd:03:13:6c:ac:c0:1e:fa:68:24:
         dd:41:35:08:62:68:11:bc:2e:d6:bf:b4:ee:17:66:63:8f:54:
         90:3e:12:4f:cf:f2:31:c6:88:ed:63:c1:2f:f0:bf:12:a1:5f:
         78:dd:38:06:4e:1a:8b:71:55:75:89:30:43:0c:6e:16:a0:7d:
         fb:51:bf:22:28:86:1a:00:5d:b0:ed:b6:cf:fa:04:a1:7b:e7:
         42:85:f3:cb:85:62:15:b5:05:61:73:b4:4a:4e:dc:a5:a0:28:
         91:97:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 09:43:54 2025 by rpki-client