This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/783224d3-26bc-4332-8b0b-f264d1d51c4d.roa
File:                     783224d3-26bc-4332-8b0b-f264d1d51c4d.roa (raw, json)
Hash identifier:          vWI5SolVaVb9aeAB2KIdlaLlDTlo+zdhZP4zhRic4ic=
Subject key identifier:   89:97:6E:52:22:19:A5:55:01:CA:5B:B9:4A:87:FA:0D:38:46:0A:D1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       73DD13CEB90710BE21C0534A36FB4C68B0CCD586
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/783224d3-26bc-4332-8b0b-f264d1d51c4d.roa
Signing time:             Wed 10 Dec 2025 01:50:07 +0000
ROA not before:           Wed 10 Dec 2025 01:50:07 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.221.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:dd:13:ce:b9:07:10:be:21:c0:53:4a:36:fb:4c:68:b0:cc:d5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 01:50:07 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=ebc02c08d5f87d834b49357eff7e3b3b8d366c424147aeec58bd0fe32c6a00fb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:75:3c:a4:d7:b4:88:89:9a:11:1c:53:32:
                    70:b1:22:df:3a:3e:3f:18:ae:df:2d:dd:5a:00:6f:
                    5f:50:2d:9d:72:20:1c:27:e5:c6:fd:87:8c:6c:3c:
                    74:f4:9c:65:2b:8e:c0:8a:0b:46:26:aa:78:ce:ce:
                    e4:48:36:d5:b9:af:96:0b:14:9e:ea:70:04:3a:fb:
                    32:e7:60:9d:56:f1:23:84:d7:98:26:b0:f9:b6:fb:
                    ff:27:db:54:16:8f:01:bd:12:d8:4d:53:fa:56:52:
                    6d:09:a9:77:e1:05:9a:da:56:27:8f:3c:a8:5d:9a:
                    d3:59:8f:37:4a:92:3a:d1:6a:b6:8b:1a:e1:b6:bd:
                    dc:85:a7:cf:12:20:7f:7b:86:c1:92:0c:f6:98:24:
                    01:18:2e:30:e2:cb:39:27:17:0d:ee:b5:0e:0b:93:
                    59:9e:03:a2:d2:12:a6:de:15:83:14:03:25:3f:4d:
                    06:67:4b:f1:0e:e5:4f:1c:67:38:85:5b:c5:63:89:
                    b5:33:23:2f:24:eb:9a:07:9e:3b:f9:1e:75:d7:56:
                    28:37:e7:5e:39:33:a7:6b:aa:29:28:09:92:46:db:
                    1a:6e:98:d8:26:56:44:17:70:ef:14:df:8d:9b:8e:
                    45:54:d9:35:6e:e5:ee:b3:5a:8d:ad:84:59:51:44:
                    3e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:6E:52:22:19:A5:55:01:CA:5B:B9:4A:87:FA:0D:38:46:0A:D1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/783224d3-26bc-4332-8b0b-f264d1d51c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.221.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:20:53:6f:df:13:3b:7e:24:0e:d3:f4:af:91:e0:1b:44:e4:
         ba:10:20:39:4e:bc:05:92:4b:32:45:99:3f:90:0c:cb:26:d3:
         ab:9c:14:3e:9a:ca:ff:09:84:78:f5:e4:c0:4c:8f:a3:00:24:
         dc:ca:21:e0:9a:67:a3:a5:b4:5f:d5:c1:91:f9:65:5b:7e:c3:
         72:9d:e8:77:f0:00:9d:c2:61:18:8f:0a:d7:82:cc:96:bd:36:
         34:28:0d:f2:06:ba:10:28:ea:52:36:fd:f1:fc:ee:54:3d:d7:
         f6:a9:41:67:20:17:de:87:f4:10:27:dc:7e:a0:80:fa:17:12:
         8f:a4:68:c8:b3:ac:1d:21:dd:e4:c9:39:14:fa:3f:d1:7a:99:
         f8:ab:48:9f:1a:0e:af:38:54:57:fa:b1:49:92:c1:08:bb:19:
         17:fc:81:81:69:87:5a:c1:36:c0:51:cc:7b:b9:20:05:db:da:
         ba:e1:fd:14:c4:5c:3d:45:b4:f5:07:6c:94:db:45:6b:aa:bc:
         9e:d6:0c:82:e0:c8:25:eb:1d:9c:86:10:8b:70:2d:a8:af:d5:
         1b:ab:80:76:3c:b6:1c:4e:c2:fb:a2:11:b5:a9:bd:61:67:7b:
         85:ce:a1:89:b9:9a:db:ea:12:f1:7a:ab:87:32:4c:cc:3b:55:
         6f:88:34:02
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUc90TzrkHEL4hwFNKNvtMaLDM1YYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjEwMDE1MDA3WhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYmMwMmMwOGQ1Zjg3ZDgzNGI0OTM1N2VmZjdlM2IzYjhk
MzY2YzQyNDE0N2FlZWM1OGJkMGZlMzJjNmEwMGZiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCXSHU8pNe0iImaERxTMnCxIt86Pj8Yrt8t3VoAb19QLZ1y
IBwn5cb9h4xsPHT0nGUrjsCKC0YmqnjOzuRINtW5r5YLFJ7qcAQ6+zLnYJ1W8SOE
15gmsPm2+/8n21QWjwG9EthNU/pWUm0JqXfhBZraViePPKhdmtNZjzdKkjrRaraL
GuG2vdyFp88SIH97hsGSDPaYJAEYLjDiyzknFw3utQ4Lk1meA6LSEqbeFYMUAyU/
TQZnS/EO5U8cZziFW8VjibUzIy8k65oHnjv5HnXXVig35145M6drqikoCZJG2xpu
mNgmVkQXcO8U342bjkVU2TVu5e6zWo2thFlRRD71AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiZduUiIZpVUBylu5Sof6DThGCtEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc4MzIyNGQzLTI2YmMtNDMzMi04YjBiLWYyNjRkMWQ1MWM0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY23cAwDQYJKoZIhvcNAQELBQADggEBAIggU2/fEzt+JA7T9K+R4BtE5LoQ
IDlOvAWSSzJFmT+QDMsm06ucFD6ayv8JhHj15MBMj6MAJNzKIeCaZ6OltF/VwZH5
ZVt+w3Kd6HfwAJ3CYRiPCteCzJa9NjQoDfIGuhAo6lI2/fH87lQ91/apQWcgF96H
9BAn3H6ggPoXEo+kaMizrB0h3eTJORT6P9F6mfirSJ8aDq84VFf6sUmSwQi7GRf8
gYFph1rBNsBRzHu5IAXb2rrh/RTEXD1FtPUHbJTbRWuqvJ7WDILgyCXrHZyGEItw
Laiv1RurgHY8thxOwvuiEbWpvWFne4XOoYm5mtvqEvF6q4cyTMw7VW+INAI=
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:38:58 2025 by rpki-client