This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb061e88-f6bf-4da4-ba02-b6dd437c158d.roa
File:                     bb061e88-f6bf-4da4-ba02-b6dd437c158d.roa (raw, json)
Hash identifier:          a/oMywB+xFj0LDN6gU2/VMg7kc0zGfkQYuHPQW1S2vM=
Subject key identifier:   ED:AC:DA:89:ED:BA:68:40:5C:4B:84:23:56:A7:91:BC:79:7C:0E:19
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       038FF7377A5FF9B6151E418BD84DA0DD4290A82F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb061e88-f6bf-4da4-ba02-b6dd437c158d.roa
Signing time:             Wed 10 Dec 2025 02:20:43 +0000
ROA not before:           Wed 10 Dec 2025 02:20:43 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.191.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8f:f7:37:7a:5f:f9:b6:15:1e:41:8b:d8:4d:a0:dd:42:90:a8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 02:20:43 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=eb8f697ff55f5329c65f23c27bbd89fae35f74ecd43b52d97b5efd2480318156, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:4c:c7:02:59:be:e0:58:f6:49:6d:dc:ff:
                    21:44:d2:0c:0c:9e:5a:bf:98:34:e6:28:66:20:27:
                    f7:bd:e7:e4:00:1a:a2:92:ff:5c:18:05:34:14:fa:
                    33:2c:0e:25:17:c8:ac:40:c7:c4:c7:ff:fc:28:f2:
                    2d:59:65:68:4d:aa:ca:5c:3c:b0:49:cc:1a:a1:6b:
                    c5:03:17:76:c8:d2:8a:52:70:e8:c7:3e:02:19:91:
                    32:a6:dd:cd:ab:07:5a:19:78:f6:20:89:27:d2:ae:
                    35:f5:1a:6b:87:65:b6:59:2f:8f:1e:0a:49:61:0a:
                    06:61:6b:2b:68:22:c7:f4:90:cd:aa:b4:90:14:d7:
                    fd:cb:5b:f0:a2:2a:ab:a5:d1:f7:90:b4:5f:cd:4d:
                    de:b0:4a:da:33:8c:88:a3:fe:1c:75:86:c6:5a:4e:
                    e5:2c:bc:a1:2c:78:8c:66:a8:3f:5e:c2:4d:7c:d9:
                    c9:be:52:41:8f:6d:f4:78:56:bf:50:db:24:58:d5:
                    c7:ba:9c:f0:24:97:a3:24:aa:64:a4:df:3b:97:c7:
                    73:d4:45:19:f9:6b:e0:20:cc:ba:04:ed:49:d5:d4:
                    e4:ec:99:05:79:85:28:57:7f:96:ab:05:e7:08:1c:
                    5d:0f:32:78:9c:dd:58:cf:ec:d5:81:0e:1b:08:f9:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AC:DA:89:ED:BA:68:40:5C:4B:84:23:56:A7:91:BC:79:7C:0E:19
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb061e88-f6bf-4da4-ba02-b6dd437c158d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:66:71:dd:86:f5:a5:d0:c4:bc:bc:8d:bd:6b:7d:af:cc:86:
         08:b6:99:50:5c:24:1e:38:e2:b1:05:d4:82:9c:1d:51:bc:fa:
         bb:d8:6f:e9:4d:3a:46:c9:76:1d:a0:59:5e:18:e4:0b:94:62:
         ff:11:81:06:9d:58:03:46:dd:7c:a5:f8:af:a4:dc:2b:94:46:
         95:47:e8:ee:b7:3a:68:10:1f:31:01:b2:5c:10:27:a6:6e:a3:
         60:f7:b6:8a:8d:6e:d8:f4:9c:d8:24:dc:54:c7:6f:8d:3d:16:
         9d:36:6a:ad:e2:06:f2:f1:40:ff:19:f5:33:68:b4:a4:02:59:
         47:b4:19:fb:52:db:e0:66:0a:1e:fc:f4:cc:4b:2f:70:e0:97:
         8a:da:fd:30:3f:6b:9f:df:51:97:81:0a:de:02:dd:11:10:55:
         e0:cd:11:e9:e0:47:c4:d0:df:83:d7:f6:e1:c0:df:dd:42:c5:
         02:34:74:66:aa:38:80:15:de:76:ce:1f:be:82:2b:4d:74:80:
         57:21:31:22:8c:bb:b4:00:0d:83:93:2c:b4:0d:a2:7f:f5:ad:
         76:81:f3:72:48:fe:30:84:a8:53:53:94:a0:c1:11:38:27:1d:
         d6:1b:d5:3e:d5:35:d4:51:74:9b:7b:42:22:25:19:7e:97:90:
         a7:68:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:14:16 2025 by rpki-client