This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0289d084-7f33-4bbc-baa0-e777f631c75e.roa
File:                     0289d084-7f33-4bbc-baa0-e777f631c75e.roa (raw, json)
Hash identifier:          QGQyPd/VB9OvaFEaJB5n2txAotnAacTyHIGCOfDzQ/Q=
Subject key identifier:   13:98:33:68:49:B8:16:F1:4F:F7:88:C4:DB:B7:60:1A:76:EA:50:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75EAF3119DA388D447CE10F06A7494E90183C0C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0289d084-7f33-4bbc-baa0-e777f631c75e.roa
Signing time:             Thu 27 Nov 2025 00:11:42 +0000
ROA not before:           Thu 27 Nov 2025 00:11:42 +0000
ROA not after:            Wed 25 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.9.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ea:f3:11:9d:a3:88:d4:47:ce:10:f0:6a:74:94:e9:01:83:c0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 27 00:11:42 2025 GMT
            Not After : Feb 25 23:59:59 2026 GMT
        Subject: serialNumber=2aa20c8d09c1e4871f27a4e52e34589ea619a33aef44e68fca97137f0e061b4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:f9:92:7e:ff:2c:32:bb:fa:7a:48:8a:c8:
                    ae:9e:d0:cd:76:92:1f:5d:4b:b2:4a:d3:bc:29:59:
                    a5:2b:42:10:81:6b:72:61:7a:a5:4f:d9:d3:1d:0b:
                    61:1e:c1:12:15:6c:ed:dc:fb:65:77:90:01:14:37:
                    79:dc:c7:4a:9d:58:71:ae:69:48:f9:5f:0d:7e:7b:
                    14:c7:ed:8b:18:92:6c:24:2e:1a:b8:19:00:a6:ea:
                    8c:72:33:c8:87:b3:cc:07:6d:f1:11:b2:30:69:02:
                    51:f9:57:40:0c:c4:fb:50:05:bf:ba:c6:a2:0f:59:
                    57:2d:d8:2c:69:e1:a5:74:43:a7:b9:fc:2f:67:98:
                    2b:b5:fe:15:e6:90:a6:b2:83:88:33:54:2e:93:00:
                    03:bf:10:bb:38:a0:cc:83:e1:24:19:ef:bd:d8:ce:
                    0d:51:70:9b:c1:d6:a1:e7:3e:a8:46:14:e3:38:c5:
                    27:92:cb:52:f3:17:39:d2:6b:4a:d2:a8:23:35:d5:
                    6c:19:aa:d6:c8:f7:6b:f8:ad:c0:85:5b:4b:72:ad:
                    26:25:3b:db:eb:07:3f:4e:12:bb:15:ac:c6:b3:86:
                    e8:1c:b3:8e:0d:cb:71:42:dd:fb:06:f7:f1:9a:d0:
                    56:42:31:80:59:99:72:88:03:6f:b3:33:f6:07:7a:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:98:33:68:49:B8:16:F1:4F:F7:88:C4:DB:B7:60:1A:76:EA:50:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0289d084-7f33-4bbc-baa0-e777f631c75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.9.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:b2:2d:59:72:0b:6e:b3:2a:f9:97:bf:32:73:bd:a3:c6:79:
         2a:37:23:5b:62:fe:72:50:f3:a8:5b:7c:78:71:e8:5d:e2:55:
         61:a1:9d:22:a7:5e:95:8c:bd:90:a1:d4:dd:ec:2e:03:ce:7a:
         ec:f0:68:ac:b0:c2:ac:24:31:1e:5f:34:c6:1f:e7:ca:85:65:
         17:f9:57:06:56:31:aa:16:d7:a1:bf:ee:ac:f7:2f:e4:59:41:
         25:5a:ca:85:9a:58:24:c2:93:64:d1:0f:52:79:c2:53:45:db:
         e1:42:49:96:3d:42:98:06:b1:b4:81:6c:1c:1e:8e:87:82:1c:
         4f:d4:20:41:26:75:35:23:51:f4:f4:17:a4:22:9d:5d:8f:ab:
         0f:08:94:45:9d:57:cf:76:e7:eb:c8:ee:a5:7e:62:46:4a:d1:
         ff:85:e6:6c:e6:3d:ac:87:9a:74:3c:3c:4f:19:9b:a0:b3:d8:
         7e:52:e3:39:fb:4b:33:90:a2:aa:a4:9d:6d:a5:9c:87:72:16:
         30:91:d8:8a:c8:65:4d:2f:58:ce:13:35:73:91:cc:78:2a:ed:
         99:17:70:0a:ea:7b:23:48:de:61:e5:73:71:60:b8:f5:d5:14:
         a6:73:5c:f7:f8:a4:db:f4:9f:f8:6c:84:80:16:7e:5d:1a:1e:
         9c:4e:06:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:48:21 2025 by rpki-client