This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1c79ce6-6180-4275-84de-5d5acaa3a373.roa
File:                     b1c79ce6-6180-4275-84de-5d5acaa3a373.roa (raw, json)
Hash identifier:          Z+8Kpux4iLFDZLzrdtSb0kfhoNpWNi+sTm3zFpgbiW8=
Subject key identifier:   15:27:D1:85:AB:B7:A4:A9:EE:09:F3:26:FC:42:5C:3E:61:E9:FC:DE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3EE32C71DC459618A3634C01779E31E778416714
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1c79ce6-6180-4275-84de-5d5acaa3a373.roa
Signing time:             Wed 10 Dec 2025 02:40:13 +0000
ROA not before:           Wed 10 Dec 2025 02:40:13 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.196.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e3:2c:71:dc:45:96:18:a3:63:4c:01:77:9e:31:e7:78:41:67:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 02:40:13 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=b61c07d9a20410ad5bc3d8542673dd6c9f3b37e854c08609df8e2c4f4c90428b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:58:5c:e7:ce:31:a7:78:e0:e7:68:38:43:
                    dc:bc:17:39:17:56:85:ff:48:81:6d:61:cd:eb:37:
                    7d:e7:44:6f:68:2c:28:07:64:63:e5:fd:79:24:4d:
                    a1:eb:97:85:d0:c5:57:fa:9f:59:91:b3:8f:12:6a:
                    bf:34:cc:9a:6f:be:fa:d7:3b:de:43:61:be:b6:50:
                    37:3d:b2:d5:86:81:d8:c7:1c:e2:38:d1:1a:0e:60:
                    9b:3b:e2:a0:4b:96:6e:41:a3:c1:dd:0b:3b:bf:eb:
                    8e:92:9c:37:07:55:b4:9e:a4:90:74:e7:d5:a1:e3:
                    05:c3:fc:c5:39:1e:71:9f:8f:39:09:a2:8c:f6:db:
                    7d:3a:ca:bd:b7:d4:8e:cd:21:cb:51:e0:36:04:b2:
                    ef:c4:60:ea:65:ef:83:59:df:ff:d2:a9:8f:d1:96:
                    f0:85:ef:66:d3:62:75:57:b5:d4:b1:08:d0:2c:8d:
                    f4:80:a1:f3:0c:0f:f7:53:89:ba:3f:f0:1b:21:ed:
                    e1:6a:99:85:07:ae:3d:5f:18:ae:7a:1c:5a:80:bf:
                    94:15:20:d9:0e:3f:f9:b9:77:f4:91:37:0d:51:8a:
                    cc:01:a0:f4:53:0a:61:fd:7f:33:7a:23:07:28:8c:
                    60:59:f2:99:9e:f3:0f:5b:df:10:8e:72:17:70:cb:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:D1:85:AB:B7:A4:A9:EE:09:F3:26:FC:42:5C:3E:61:E9:FC:DE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1c79ce6-6180-4275-84de-5d5acaa3a373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.196.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         81:59:13:26:c8:69:8e:05:49:bb:92:75:28:c5:52:b9:13:78:
         bc:8b:42:fd:77:d7:ca:8d:cd:c2:4a:41:41:0f:1f:97:bb:0d:
         9d:06:7e:8e:d0:be:2c:a4:d7:1f:3b:fc:f8:36:ce:96:69:b7:
         c6:54:5e:78:8e:84:33:40:4c:91:0f:a8:8f:ce:99:0b:f6:81:
         c7:bd:61:89:e5:18:bb:d4:52:bc:e0:8d:83:11:35:c1:49:e0:
         63:a8:60:7a:c5:f6:19:64:f0:0e:ba:8d:bd:0e:ad:42:52:04:
         d6:25:f2:b9:59:88:fd:76:68:a1:7c:5d:48:32:5d:34:40:21:
         3f:4b:dc:83:a9:4e:d1:82:63:c3:12:ff:34:67:73:1c:02:e3:
         f2:ee:6c:54:64:8e:30:4e:db:b7:c7:88:ad:d7:36:ed:77:4d:
         23:b4:b3:3d:15:8c:c5:04:c7:c0:42:08:fd:20:0a:41:c8:ed:
         96:8e:c8:00:8c:a7:ff:ea:d3:1d:30:5a:5c:e9:59:f4:0f:9f:
         19:7b:8b:8b:4d:1f:90:25:e3:3b:ed:a6:07:02:3b:2a:56:c3:
         33:0d:03:d5:d5:e6:a0:b2:7f:94:38:8f:d2:73:98:1d:39:69:
         e2:3e:b6:33:5c:2f:59:14:73:17:aa:da:fb:12:b4:33:78:61:
         63:d2:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:13:31 2025 by rpki-client