This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646b024-2904-4cee-8238-f55a3b1b4705.roa
File:                     0646b024-2904-4cee-8238-f55a3b1b4705.roa (raw, json)
Hash identifier:          g1ItEQyFOBclliHUEtN98npKBH8GUkGS7r9zfD/3Cz4=
Subject key identifier:   CC:CE:9E:50:1E:51:5E:B3:D2:B2:50:5F:66:B6:2A:77:26:97:F4:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       317F4A46DFA3906711ADCE01DD896DC5DF44DAF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646b024-2904-4cee-8238-f55a3b1b4705.roa
Signing time:             Wed 03 Dec 2025 01:41:13 +0000
ROA not before:           Wed 03 Dec 2025 01:41:13 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7f:4a:46:df:a3:90:67:11:ad:ce:01:dd:89:6d:c5:df:44:da:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:41:13 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=e49792790eca70e55d9919536141e7e9635c47c6db606c2e3bf927a89615974d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:e5:d0:18:2c:82:7f:de:31:45:0a:90:35:
                    cd:41:71:44:65:1b:32:af:06:cf:7e:af:eb:c4:37:
                    df:bb:46:99:cc:10:f2:d7:90:3b:96:1a:7a:22:54:
                    b5:2e:ef:21:ef:f6:91:29:bf:01:ba:b1:1d:79:57:
                    da:eb:40:3d:8b:54:52:f4:69:31:ad:85:ad:c0:4b:
                    cd:e2:50:44:c2:22:01:92:79:b6:5e:0e:da:ca:3c:
                    61:cc:5b:f0:7d:54:a6:87:d5:af:9a:36:7f:d7:00:
                    d3:53:be:6e:1e:75:22:3e:3f:3e:57:71:fc:f4:b7:
                    47:3b:71:cc:35:06:2f:ff:14:ee:74:b8:58:71:6a:
                    da:22:e7:8b:1c:ce:e8:fe:bd:fa:e4:49:ee:69:2d:
                    d0:ed:c4:39:ad:de:5a:d3:01:aa:d0:c5:8a:45:6a:
                    a9:e8:77:4c:56:7f:83:78:93:1b:42:b7:47:45:8b:
                    1e:35:56:47:ea:d7:5b:75:4f:45:ee:29:85:3b:58:
                    8d:94:c4:52:17:2c:96:ed:b2:31:d7:29:2a:2d:a4:
                    50:03:76:39:1a:87:2a:72:0a:2e:d3:cb:a9:32:1d:
                    5c:23:41:52:eb:16:7c:2e:47:59:ac:57:a2:f1:14:
                    12:35:77:85:c7:49:f4:00:bb:0c:a2:28:38:2f:46:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CE:9E:50:1E:51:5E:B3:D2:B2:50:5F:66:B6:2A:77:26:97:F4:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646b024-2904-4cee-8238-f55a3b1b4705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:e8:ac:42:0d:a0:23:e8:1c:e6:31:83:23:28:73:53:73:9e:
         52:a7:11:df:70:b4:9a:e7:08:b4:4e:37:9f:18:2c:42:86:83:
         5b:ff:c0:21:1b:11:f1:31:c7:38:40:9e:2b:17:2c:ea:be:38:
         29:a5:27:9a:6b:60:b6:7d:56:21:60:e0:1a:5a:68:05:89:fd:
         06:0d:a4:76:e4:66:8a:45:cd:ed:7b:9f:0f:4b:95:3a:f3:e4:
         48:9e:9b:89:be:69:f4:ac:cb:dc:e0:62:69:31:e7:06:7f:a1:
         13:67:32:19:86:74:14:d1:9e:ff:2d:2a:55:0b:28:e2:a0:22:
         9d:86:48:fa:88:97:3f:20:3a:fa:11:03:f1:22:3d:2c:2f:79:
         96:56:16:65:35:81:69:d4:b1:05:d6:48:f3:39:07:82:57:f1:
         81:18:2c:5f:49:df:07:dd:a0:6c:78:2b:75:04:a1:07:1d:b5:
         d5:e2:5e:71:70:33:3a:70:e0:bc:d4:6d:32:5c:58:f0:bd:c0:
         7a:e5:1f:e8:02:bc:a2:ac:d1:0b:67:45:38:c9:58:1a:55:eb:
         c7:19:9d:3b:f1:b8:25:db:a1:9b:ad:b1:ba:1a:b6:6a:02:4b:
         b4:22:2c:90:fb:60:90:f2:82:3b:58:2c:5a:cd:5b:90:e3:30:
         eb:f1:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:15:45 2025 by rpki-client