This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa
File:                     02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa (raw, json)
Hash identifier:          NUn7HLMglWJRovd2XSw9xscGWLbAYbOCuhOoLhndrs4=
Subject key identifier:   0F:68:76:66:0F:14:40:C8:7F:99:66:B5:B2:BB:8A:60:76:23:60:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C76299B2AA0A43FDBFC2FEB653E244D3C294C4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa
Signing time:             Thu 04 Dec 2025 00:50:10 +0000
ROA not before:           Thu 04 Dec 2025 00:50:10 +0000
ROA not after:            Wed 04 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:76:29:9b:2a:a0:a4:3f:db:fc:2f:eb:65:3e:24:4d:3c:29:4c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  4 00:50:10 2025 GMT
            Not After : Mar  4 23:59:59 2026 GMT
        Subject: serialNumber=eccd34850ab598da7f500ec0249ea86af43bcfbb3c2f1111b6625b6584bc169e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a5:e6:dd:d3:7a:20:54:7f:0a:03:77:32:6d:
                    9f:aa:ad:b3:e8:1b:42:fd:7d:f5:60:cd:a9:6b:0a:
                    c1:b6:50:67:66:13:17:cc:32:dd:5c:19:9f:af:56:
                    f2:db:83:54:55:51:d7:a8:2e:18:ba:62:bd:d8:98:
                    d1:71:a3:7a:67:82:e0:f8:39:ea:46:79:dd:23:b2:
                    75:c1:78:aa:0e:b8:c1:1e:9c:f6:66:7b:e6:9d:62:
                    26:fe:5d:73:c0:31:0a:b9:07:0a:fc:26:ec:01:d4:
                    0c:4b:98:c5:30:df:2e:c7:e0:3e:a2:cc:92:4b:45:
                    96:ca:23:3f:d4:c0:be:c4:35:c5:68:67:f6:60:a4:
                    00:b2:64:b0:7a:1e:e1:43:81:5e:9b:bd:cf:6c:77:
                    65:99:c1:a8:d2:18:e5:a8:46:d0:ed:bd:68:7d:27:
                    68:28:93:40:a6:c4:2c:df:4d:70:85:d8:78:85:a6:
                    fc:9f:2d:f2:42:a3:f3:d5:25:54:de:91:1f:46:35:
                    07:6b:5d:d9:75:bb:85:0a:d2:28:4b:bd:4b:25:5f:
                    f9:ac:bc:27:fe:8f:ae:8b:ce:13:ee:24:40:9b:38:
                    1c:36:81:39:ef:eb:be:18:57:e1:48:e4:02:ac:1a:
                    c2:92:08:f8:fe:40:7c:88:ff:26:d5:f0:76:2c:f5:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:68:76:66:0F:14:40:C8:7F:99:66:B5:B2:BB:8A:60:76:23:60:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:ec:c4:39:68:dc:b7:be:78:6d:31:f8:77:34:6c:89:9d:
         9c:c9:16:cd:0d:7b:2c:b2:f9:f3:9f:8e:79:b2:8b:7b:94:da:
         0f:b9:7d:dd:7b:65:eb:88:e3:22:13:58:d6:ff:c1:21:36:72:
         e6:b9:c5:24:2e:80:e5:19:02:1d:c9:6c:f5:e6:0a:79:52:fc:
         76:2c:ec:7c:ed:2c:59:0d:f2:4c:8a:a7:3a:23:45:1c:28:a4:
         d5:62:66:ac:3e:9d:6c:b9:e9:f5:7a:08:33:27:0c:99:8d:da:
         f7:2b:06:aa:11:15:9c:34:2f:25:5c:7c:83:52:99:30:c0:75:
         b5:96:b2:2e:3d:52:d8:ca:3e:56:38:5a:3c:d3:e7:bd:8e:32:
         65:c4:78:1c:93:10:b2:57:89:db:9e:8e:fa:5b:df:bf:f3:aa:
         84:3b:c5:c6:1b:19:72:65:9c:6c:22:25:ce:24:10:19:1d:e9:
         03:68:89:d3:46:14:d4:53:d1:d5:89:e1:c0:ce:ec:e7:25:28:
         93:6d:6e:68:e7:dc:ec:6e:94:08:a7:ec:09:ce:8b:28:9a:08:
         a3:eb:ac:07:23:b6:c4:52:05:fa:97:37:6b:1f:a7:19:38:07:
         b0:a6:62:c0:c9:41:28:e3:4f:b7:45:42:04:71:fd:c9:13:17:
         da:fc:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:04 2025 by rpki-client