This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fff073c1-dd72-463a-834b-e4a2b2a9a884.roa
File:                     fff073c1-dd72-463a-834b-e4a2b2a9a884.roa (raw, json)
Hash identifier:          hFBpwqjlPZKEE2+QQ3kyPooeCiwFbL36AXsBqmfhD6k=
Subject key identifier:   D8:58:A4:D9:73:B3:39:38:57:A2:69:22:9D:AA:D7:9F:85:29:78:B7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5A0B4A41F5AE07C178484985854657432FB9E953
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fff073c1-dd72-463a-834b-e4a2b2a9a884.roa
Signing time:             Wed 10 Dec 2025 04:00:31 +0000
ROA not before:           Wed 10 Dec 2025 04:00:31 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.167.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0b:4a:41:f5:ae:07:c1:78:48:49:85:85:46:57:43:2f:b9:e9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 04:00:31 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=b2f9dca2e473bb5859cdeabe62f5e1d43b80fc64ed577784b12df5ce1cc37c0f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:6a:bb:59:f9:46:73:f5:18:0d:19:3e:81:
                    83:da:84:04:7e:e9:41:0f:38:28:ee:d5:7b:9c:a3:
                    8c:bb:8e:e2:8b:eb:76:05:2a:c8:ed:64:72:e8:38:
                    12:b7:27:77:a4:51:d8:e9:1f:d1:df:97:4c:22:e4:
                    f8:a6:87:ac:29:c6:37:8a:d8:13:4b:bb:47:cd:c7:
                    1d:46:2d:34:62:90:98:b5:28:ae:94:86:3c:c3:c2:
                    53:9f:7f:df:7e:2f:cf:c5:71:c0:00:42:2e:df:4a:
                    b9:03:e9:53:3d:86:8e:81:b8:6c:0d:62:ee:4a:27:
                    43:95:b4:cd:b4:71:53:9a:c9:ac:4b:f2:df:b3:43:
                    88:4e:8e:28:bf:28:40:a7:3a:1d:95:70:b3:ed:dc:
                    ac:d9:79:00:33:d7:7f:33:af:3d:91:db:4b:ef:bd:
                    ab:13:d5:87:f2:8f:33:97:f8:ec:29:f1:75:b5:10:
                    45:93:b1:cb:d6:e4:a9:80:e4:91:0d:db:0b:9d:7e:
                    37:72:16:19:3a:14:e9:f2:5c:4a:e8:03:41:db:b6:
                    ee:10:87:40:ab:0a:8e:ec:7e:0e:60:16:f3:c6:f3:
                    2a:6d:20:d9:dd:79:a1:13:64:24:95:b9:eb:20:0f:
                    c2:3f:71:f2:6e:d5:af:89:de:29:18:23:a6:8d:38:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:58:A4:D9:73:B3:39:38:57:A2:69:22:9D:AA:D7:9F:85:29:78:B7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fff073c1-dd72-463a-834b-e4a2b2a9a884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:b1:5c:1a:e7:6a:56:18:5b:46:d9:cc:a6:d5:c0:d6:19:
         96:14:a9:20:4a:a5:33:3b:a1:4a:fa:82:ba:90:7f:c3:a2:b0:
         b2:5e:21:14:7f:ec:3c:65:13:74:83:95:4f:1c:99:76:d7:6e:
         d6:45:78:a0:06:1d:a5:30:a3:15:58:eb:c6:14:90:e1:d7:7a:
         f0:f6:3c:ef:18:07:20:01:ad:2e:d3:74:f2:74:8f:b2:29:c0:
         e4:32:f6:68:46:14:3f:e1:44:e1:5e:99:e7:5a:85:0a:0d:35:
         32:31:dd:9a:45:c3:87:95:b8:22:70:6f:a5:1c:cc:fc:38:fe:
         a9:04:66:7b:5a:c3:0a:62:d1:37:7e:b4:2b:28:5a:34:2f:af:
         66:24:06:67:e0:13:49:17:fe:3f:95:b0:24:a8:9a:ec:3b:68:
         de:a2:eb:30:90:5e:44:e8:9a:6f:ae:5a:c5:f2:62:df:18:dd:
         a7:19:8e:bb:1b:2c:1c:12:e3:c2:39:4e:83:62:bd:48:77:6d:
         3f:34:aa:70:53:c8:94:ab:82:12:e8:94:fb:78:3b:c0:a8:a6:
         8b:ec:7c:b6:3d:a7:8b:38:e0:f2:6d:1d:db:99:17:f8:00:16:
         ac:b5:be:ae:4d:65:82:9c:08:b9:86:4d:9f:d4:72:c9:cd:6a:
         58:18:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:50:30 2025 by rpki-client