This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c71cb8b4-5fe8-4328-9046-45aa29b5f35a.roa
File:                     c71cb8b4-5fe8-4328-9046-45aa29b5f35a.roa (raw, json)
Hash identifier:          pV4s99fE2xPXhD/J0TAH6udF3iyEOXpJSjMpkecBaB8=
Subject key identifier:   76:F6:6B:0C:78:D0:F2:DE:77:1F:FF:BC:FF:CC:83:BC:97:9D:C4:21
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       52C240504127AA74ABE012F711C6D2861D155A54
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c71cb8b4-5fe8-4328-9046-45aa29b5f35a.roa
Signing time:             Wed 10 Dec 2025 04:11:28 +0000
ROA not before:           Wed 10 Dec 2025 04:11:28 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.170.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c2:40:50:41:27:aa:74:ab:e0:12:f7:11:c6:d2:86:1d:15:5a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 04:11:28 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=e7fbf857a145eff1b606b36ed899a229ed4506ac062f32da5a4bacecabad8ee7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:69:f8:e3:21:1e:d3:7e:ab:7f:e6:19:22:
                    be:4a:c6:9a:6d:02:e2:31:c1:83:5e:eb:e5:f0:2d:
                    83:bd:ca:ff:89:63:be:0c:62:89:eb:c4:d0:0b:38:
                    ad:43:db:b4:bc:e4:9d:2a:69:f7:70:cb:7c:05:b4:
                    a1:5d:5d:31:0e:b8:0e:42:c4:96:60:4e:23:69:84:
                    65:97:c5:2c:18:9e:2c:c6:0d:91:e0:3b:7e:50:32:
                    f9:2b:c4:42:f9:00:2d:63:26:8f:0c:4a:21:a0:f9:
                    fa:94:cd:b9:3f:c5:56:2c:1b:6d:d7:8e:93:54:4f:
                    40:93:76:59:83:69:8a:b2:89:b9:a4:02:9d:21:6f:
                    71:5a:44:2e:df:70:2b:22:e8:cd:20:e1:e4:56:be:
                    b2:ec:c2:a5:18:7e:51:3d:6c:53:5d:73:3d:c2:bc:
                    23:73:59:cf:c9:38:f7:ae:dc:63:58:24:07:9e:b9:
                    92:32:5a:8a:92:f5:9f:bb:06:43:3a:5e:30:28:7d:
                    85:70:4a:e7:de:d6:cf:79:3c:23:ae:86:24:be:c5:
                    7a:b1:4d:cf:42:b7:d0:d8:0e:f0:ca:78:3a:1e:90:
                    56:13:38:80:a6:09:14:5e:08:61:35:15:ef:bf:7d:
                    aa:ce:63:f4:a8:f2:22:19:51:27:fd:36:62:31:c3:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F6:6B:0C:78:D0:F2:DE:77:1F:FF:BC:FF:CC:83:BC:97:9D:C4:21
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c71cb8b4-5fe8-4328-9046-45aa29b5f35a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.170.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:5b:1c:ed:9c:0d:2e:f3:aa:33:3b:fc:e6:f8:af:aa:6f:9e:
         95:81:d6:99:4c:b6:b4:1e:c7:c5:75:69:31:35:ab:93:a2:c5:
         97:14:8d:6d:bf:57:22:fa:b5:ca:be:54:61:cf:c8:91:41:1d:
         bf:31:4d:7a:b4:b6:41:3a:6c:bc:54:41:21:5a:e4:dd:17:dd:
         a1:d5:88:71:28:52:73:86:25:50:cf:92:d8:cf:1d:8d:4f:ea:
         81:25:82:a9:fb:81:06:ea:cf:a5:61:e2:6b:17:2e:67:a7:c2:
         9d:c7:47:2d:1c:9b:b5:d5:09:d4:72:ae:9a:6e:c6:bf:c0:53:
         b9:70:19:43:05:7e:a8:c2:9d:0d:18:7c:b2:f9:ad:d5:f9:99:
         fb:b8:09:39:06:46:39:25:e2:e8:f4:03:6e:87:16:4f:77:8a:
         0f:bc:56:8b:4b:23:02:05:ad:7d:a2:83:f9:15:ad:7f:db:91:
         9d:6e:8f:15:c8:10:ef:d3:71:db:2e:a4:ea:34:d1:53:48:24:
         e3:8e:2d:2f:d3:9c:c9:bb:f7:3a:31:05:78:cd:5a:fd:30:d4:
         14:b3:e9:8c:15:9b:92:0c:16:0c:7e:15:c3:4f:22:ae:95:52:
         41:92:dd:8b:df:7f:cd:67:79:da:d0:a6:9c:c0:dc:b9:6d:14:
         9d:b7:db:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:37:56 2025 by rpki-client