This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb12eb37-7bbc-470a-bcc2-558de83b8b51.roa
File:                     eb12eb37-7bbc-470a-bcc2-558de83b8b51.roa (raw, json)
Hash identifier:          Mpr/izmVlavK8upF0ICsL/Mp/nIxaTtM0tlKRfKfpKI=
Subject key identifier:   67:21:E4:AC:7B:39:94:6D:CF:A3:27:E8:07:69:2A:3D:4C:8F:E4:4E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0F663FDCEABC523B2BB4948F7C6CEB4BC8B94989
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb12eb37-7bbc-470a-bcc2-558de83b8b51.roa
Signing time:             Wed 10 Dec 2025 03:40:37 +0000
ROA not before:           Wed 10 Dec 2025 03:40:37 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.66.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:66:3f:dc:ea:bc:52:3b:2b:b4:94:8f:7c:6c:eb:4b:c8:b9:49:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 03:40:37 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=913ad44e5111fa84259e7aa097eb5e035c371b0aebe7e0ee4013191ec7b52e72, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:e4:9b:8f:67:a4:ed:91:c8:1c:fb:a2:03:
                    7c:e0:7d:3f:c5:50:5e:fe:cc:66:29:a5:0d:47:dd:
                    59:a1:4f:fd:a6:0e:f4:19:ff:b6:89:84:05:3a:43:
                    cd:04:24:a9:32:37:b3:48:9a:b7:ad:92:eb:a4:58:
                    6a:3d:76:eb:c3:9e:53:fc:e2:37:c6:61:bf:6e:12:
                    03:37:77:01:d0:da:37:1f:d7:d2:4d:3d:e5:08:40:
                    d4:a6:97:b8:3e:a3:09:33:c4:89:93:1b:27:fd:d1:
                    e7:b0:25:be:2b:87:13:c9:7c:fe:46:95:89:7c:2a:
                    2b:2d:db:bb:40:28:89:f1:aa:5f:b4:e3:b8:b9:c2:
                    89:5e:66:3c:69:29:bd:c0:86:f2:9c:8e:0c:38:c1:
                    aa:e7:41:94:01:49:87:4d:91:51:92:1c:51:16:71:
                    20:c2:15:91:06:f6:66:b5:ab:4b:cd:4f:3b:20:f5:
                    49:c8:51:5c:c0:8c:d0:d7:7a:09:cf:d9:3f:ed:27:
                    17:5a:4b:59:18:28:58:b2:96:29:9f:66:de:e2:be:
                    77:b3:f6:a3:a5:f0:8c:20:2f:22:8d:8d:2d:a3:77:
                    33:5b:2f:13:5c:ad:f6:ec:af:bf:aa:da:6a:2b:b5:
                    74:e6:54:e6:2d:70:4d:c4:c9:59:ac:d0:66:56:44:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:21:E4:AC:7B:39:94:6D:CF:A3:27:E8:07:69:2A:3D:4C:8F:E4:4E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb12eb37-7bbc-470a-bcc2-558de83b8b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.66.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b1:61:2b:f5:f9:02:33:12:99:93:57:c6:4d:13:7f:75:5b:73:
         e7:5e:72:fa:66:46:36:b7:f2:4f:9e:a9:89:5a:d7:3a:90:3f:
         54:82:3a:fd:d8:8c:0a:98:0e:db:63:54:be:15:33:16:bd:60:
         cf:af:18:13:f2:22:3d:b1:63:ab:56:ab:37:71:0c:24:e2:54:
         79:79:1a:08:d5:2d:26:63:c7:8a:4d:0c:0e:91:1b:5f:92:cb:
         3e:cd:c1:45:0d:56:fd:8c:d6:57:2f:2e:2b:06:2f:7c:58:dd:
         30:7e:4e:b8:01:30:b1:65:18:21:bc:a8:71:01:2a:05:77:0d:
         85:e4:70:40:0d:92:ef:88:8c:0f:3b:5f:3f:be:45:20:00:48:
         fe:13:fa:a8:d8:3e:9d:95:9f:7a:3d:45:78:a2:34:20:31:ef:
         b2:17:e7:1a:00:0e:96:3b:1c:44:4f:31:cf:29:c5:95:f0:16:
         89:83:b3:7a:1e:93:38:22:c0:0f:0d:75:d8:63:01:4b:1c:68:
         fb:19:a2:f6:2e:51:9f:30:f1:58:18:f8:dc:d4:51:9a:e1:aa:
         ab:52:dd:2c:f4:02:ce:d6:7d:ca:87:13:dd:d7:df:40:45:e5:
         0a:ac:43:3f:65:6c:6a:3d:35:fb:b9:63:12:d3:97:04:ee:33:
         7b:e5:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:57:22 2025 by rpki-client