This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fe5827b-da57-4138-9e04-1b091d2c3884.roa
File:                     9fe5827b-da57-4138-9e04-1b091d2c3884.roa (raw, json)
Hash identifier:          pHdhBV+qMRYn3hTMsY0Bc/vgA+9PzRpJsHQ66CXCJG8=
Subject key identifier:   B3:45:C2:C7:BD:2C:1A:99:4A:54:FC:C4:0F:6E:D7:09:5C:07:E2:5A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       47467E51DEC0B55C319CD775C4B1C9271E1EE471
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fe5827b-da57-4138-9e04-1b091d2c3884.roa
Signing time:             Wed 10 Dec 2025 04:00:36 +0000
ROA not before:           Wed 10 Dec 2025 04:00:36 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.68.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:46:7e:51:de:c0:b5:5c:31:9c:d7:75:c4:b1:c9:27:1e:1e:e4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 04:00:36 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=141b2b53561c2c66781dd452f28cac3207aaa8cdb1d77abb99f1aac31870c030, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:79:0a:8e:36:d2:4f:8a:e5:94:24:d2:56:
                    b9:98:47:29:30:fe:ca:c0:45:09:bb:6a:ab:21:70:
                    ea:a1:d6:53:ab:41:34:0a:d0:93:2e:84:7f:3c:41:
                    4f:3b:1b:45:d9:fc:10:69:c6:fe:b6:c6:c5:b0:b3:
                    eb:14:0f:46:d9:9f:39:14:d3:fc:8c:2e:35:91:f0:
                    89:ef:f9:58:69:f5:8f:75:4a:5f:f6:91:f6:0c:2e:
                    c9:8e:e6:86:a2:61:90:2c:51:15:60:4c:d5:65:7f:
                    5f:39:d1:29:3f:94:51:a2:e2:f6:5a:66:b2:22:c2:
                    bc:e1:dd:71:f7:6a:88:13:68:15:50:7d:61:9e:3d:
                    6c:dd:1a:54:a2:40:95:15:d2:56:4f:b7:64:f8:cd:
                    c2:01:25:2a:6e:e6:da:61:29:a6:26:b6:71:2e:0e:
                    20:82:71:40:af:b5:08:cf:00:0c:aa:0b:ee:3c:dc:
                    42:ce:93:2e:92:ed:75:3c:6a:16:28:82:44:6d:a1:
                    e1:f4:f7:ff:2d:cf:96:40:d0:04:1c:5b:1e:05:c0:
                    1d:7b:5e:3d:15:4e:0a:d9:3e:4a:3c:6c:b4:d2:ce:
                    6a:e0:42:3c:05:f2:98:d2:9e:c8:97:55:d5:4c:78:
                    6d:2c:d7:62:73:a7:50:3e:25:6a:68:f9:ce:8c:17:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:45:C2:C7:BD:2C:1A:99:4A:54:FC:C4:0F:6E:D7:09:5C:07:E2:5A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fe5827b-da57-4138-9e04-1b091d2c3884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.68.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         86:4d:f0:6f:31:dd:b2:a1:49:fd:49:74:f9:63:b9:61:eb:3f:
         61:a0:6c:eb:53:ab:59:dc:9d:d5:13:b1:e8:b4:66:35:a2:97:
         ac:07:2d:cc:64:2f:2a:7a:69:96:e4:ab:a2:aa:63:7d:6b:90:
         2f:16:12:f0:83:0a:1b:ee:9f:71:32:4e:37:6c:1c:3c:4a:2e:
         f1:dc:a9:58:8a:a7:c2:cc:59:e4:76:db:70:ff:38:46:a8:7c:
         50:42:af:21:35:d9:1c:e5:67:a6:b7:e2:6b:b7:32:9f:52:28:
         11:f8:f7:d5:f3:6e:de:bc:a2:04:bb:c6:d8:35:15:98:fa:dc:
         21:11:ac:04:99:14:2f:6c:c6:59:07:ff:1d:08:cb:82:2a:6e:
         91:fe:e7:c5:e3:73:00:ca:86:59:86:83:0e:13:18:93:da:9a:
         79:4f:78:f4:91:55:5c:e2:4b:a6:2e:31:41:40:dc:15:3f:ed:
         7f:bd:73:f5:11:ba:d4:f4:d1:b1:78:ca:7d:eb:ca:62:a0:be:
         77:43:1a:d1:e0:f1:15:35:0c:77:87:93:ef:71:2a:87:01:ee:
         2a:d2:57:32:5f:5e:0e:d1:0f:c0:7c:04:cb:85:53:64:06:a0:
         8d:8b:06:fe:0d:8b:a1:f8:7d:7f:0f:b5:c4:49:e6:e3:02:95:
         f2:dd:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:14:04 2025 by rpki-client