This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/faa09546-b8b8-4bdf-afd6-9a929fb1e8ce.roa
File:                     faa09546-b8b8-4bdf-afd6-9a929fb1e8ce.roa (raw, json)
Hash identifier:          u+WhgNHCnECB1iq5kG7zqkrndD2w1mx9LgXqETI00gE=
Subject key identifier:   6E:91:86:F5:02:4E:9C:E1:F9:27:A7:A0:AA:AC:76:10:5A:86:AF:F7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3C44FDA57407E8BC4C683CCB38C7CE5141629412
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/faa09546-b8b8-4bdf-afd6-9a929fb1e8ce.roa
Signing time:             Tue 09 Dec 2025 00:01:16 +0000
ROA not before:           Tue 09 Dec 2025 00:01:16 +0000
ROA not after:            Mon 09 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.172.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:44:fd:a5:74:07:e8:bc:4c:68:3c:cb:38:c7:ce:51:41:62:94:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec  9 00:01:16 2025 GMT
            Not After : Mar  9 23:59:59 2026 GMT
        Subject: serialNumber=c0c175a914a8b492b7a58fbe53cbb72c224140f4c56403e8947c357be8e8e993, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:d1:01:ba:ba:28:bd:ec:eb:fd:5b:0f:c5:
                    23:5a:53:18:98:fa:0f:74:8f:3c:d0:be:e3:68:da:
                    86:6f:7f:9d:40:7e:92:15:ff:ca:1f:b0:6f:70:e1:
                    e3:98:ea:67:02:5b:06:74:84:7e:a6:7d:b9:04:30:
                    62:46:52:34:9d:1a:81:bf:5e:e3:9e:56:a2:90:e3:
                    63:ec:10:83:7a:ca:b7:2d:44:29:0c:a4:cd:c1:ed:
                    4b:34:29:f2:6a:36:37:b2:3f:fa:14:b0:cb:b8:de:
                    71:ca:4d:b9:08:ff:90:f0:01:cc:5e:12:ec:df:30:
                    f0:c4:b7:13:f4:2b:f4:46:e7:fe:c1:0b:4c:6b:83:
                    41:bd:86:d5:8a:a0:08:b3:71:e7:ec:f6:87:73:c4:
                    0f:b7:9b:fd:df:4a:03:7a:a4:4a:66:9f:12:fe:9f:
                    e6:87:a1:55:1d:9e:b3:42:e3:30:a2:1a:b3:d4:00:
                    f1:cc:16:c4:8c:c2:ea:2a:4d:da:a6:1e:fb:3d:4f:
                    69:c1:1d:51:d3:d4:fa:8c:4a:d0:f0:6d:e1:b6:e4:
                    74:46:a4:58:95:cd:88:15:21:59:24:1b:f1:8e:2e:
                    63:69:75:36:2f:fa:dc:4a:7a:44:c1:a7:0f:68:d0:
                    ae:1a:42:d9:6a:95:a7:b6:be:58:bf:70:08:d5:2a:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:86:F5:02:4E:9C:E1:F9:27:A7:A0:AA:AC:76:10:5A:86:AF:F7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/faa09546-b8b8-4bdf-afd6-9a929fb1e8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.172.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:77:29:35:f7:c4:bf:0d:ed:1a:7a:72:92:67:b1:47:57:5c:
         39:e2:6a:4b:89:53:76:00:64:a1:a9:64:71:a4:05:d8:0c:61:
         2c:96:53:70:f6:6c:f2:7f:08:6b:fa:28:85:68:75:cf:fe:d5:
         f4:bc:c6:d2:2c:56:66:11:4d:08:48:f3:cb:68:65:25:41:0e:
         2f:64:2c:fd:e2:d8:cd:81:65:10:10:eb:c1:62:d8:ba:02:48:
         6e:66:5d:cf:c2:e2:a5:20:33:56:7a:c9:4b:a1:14:7a:e0:ea:
         85:88:f5:fb:d6:8b:4c:4c:ca:8e:2b:01:b4:4d:d6:47:cd:b4:
         91:66:2e:89:dc:d9:7d:c0:d7:98:02:3b:82:71:40:aa:85:c6:
         bf:d1:8e:03:ef:d2:ac:5d:ed:1e:62:eb:eb:18:8e:28:ba:f4:
         14:a0:7f:fa:6d:5c:d9:20:a7:0c:84:35:a0:94:33:c9:3d:b0:
         5b:02:0e:68:13:d5:ad:07:81:c9:df:f2:e7:f5:2e:1f:e1:20:
         ba:f5:87:9f:d4:8f:5e:ff:b4:b6:49:63:2d:7f:2d:89:03:4e:
         fa:45:8e:31:81:04:31:82:59:ab:27:eb:1b:42:cc:56:9f:0c:
         58:19:c7:36:3a:c7:e3:e0:eb:55:3f:d5:14:2c:48:bf:8d:a0:
         52:03:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:23:31 2025 by rpki-client