This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074a6652-0769-407c-8a7b-8b362f4c155f.roa
File:                     074a6652-0769-407c-8a7b-8b362f4c155f.roa (raw, json)
Hash identifier:          +ZqOK8neWitr5ZJTKARbTP7lLPUkFFt8jUOLgx2olgw=
Subject key identifier:   86:47:F0:20:18:AA:E8:DC:E0:44:21:4F:11:20:9F:4E:49:57:60:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15B287FB6C77E6C168E2831D65E4537839054674
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074a6652-0769-407c-8a7b-8b362f4c155f.roa
Signing time:             Sat 22 Nov 2025 00:10:41 +0000
ROA not before:           Sat 22 Nov 2025 00:10:41 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        174.141.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b2:87:fb:6c:77:e6:c1:68:e2:83:1d:65:e4:53:78:39:05:46:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:10:41 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=d14f85e8057b4e83a55b35c34d68336492164873d310099970a447674e68ec05, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:9e:c4:a9:b2:79:8b:47:c7:ff:9e:f3:98:
                    1c:55:ef:98:91:57:74:83:23:ed:8f:91:a4:a0:96:
                    9d:54:93:bf:4b:7a:e9:f8:5c:51:e8:91:08:82:6a:
                    b1:78:7a:40:f1:69:28:9a:ac:ee:0e:05:b7:a8:c5:
                    6d:7f:0f:1c:21:0e:90:9b:61:fc:26:e0:ee:a7:1e:
                    df:9a:a2:6b:25:06:d3:84:b3:ec:0b:e3:c2:25:0d:
                    22:b4:65:6a:ba:9e:1c:f1:fb:b1:52:39:61:0e:43:
                    9a:b1:bc:6a:67:f4:4d:9a:f3:5f:08:82:ba:66:5c:
                    e6:5a:e9:dd:d5:4a:ca:7c:6a:72:92:e5:06:38:42:
                    77:6c:6c:4e:b0:b0:70:7f:3c:89:70:b8:4e:a2:71:
                    6e:39:fe:32:7f:df:84:ce:b1:57:83:ec:b1:c0:6a:
                    ad:7d:74:94:ed:bb:f5:22:f7:35:0e:98:58:3b:f7:
                    5f:36:68:5e:f3:d5:f6:97:80:91:0b:9a:08:8d:65:
                    07:01:9f:8d:bb:98:09:03:f2:f9:eb:79:e9:62:1e:
                    77:ab:6a:34:19:2a:06:da:17:4b:8a:5a:39:d6:c8:
                    e0:fe:ea:94:2b:b1:c2:63:9d:e3:cf:79:0a:30:9a:
                    60:f4:b5:48:b7:a5:66:d7:64:b2:5e:6b:77:90:64:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:F0:20:18:AA:E8:DC:E0:44:21:4F:11:20:9F:4E:49:57:60:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074a6652-0769-407c-8a7b-8b362f4c155f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.141.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         01:84:d7:fd:f3:e1:41:99:98:cf:56:ed:31:8b:db:71:b0:57:
         17:af:dc:49:51:56:0d:fd:67:68:ab:56:d4:2d:0b:cf:02:03:
         76:79:72:4d:b5:d7:b9:21:7a:82:78:07:cf:e3:12:03:53:11:
         64:a1:7e:e2:c4:57:c5:f2:e1:1a:92:0d:67:67:0d:73:fa:86:
         e3:e8:db:7c:5c:f3:01:01:97:9c:6d:63:7a:24:25:ba:3e:3b:
         5d:c6:40:52:71:c2:f8:cf:f7:3f:b8:c9:30:6f:92:d9:72:0e:
         24:35:7b:d9:f4:4f:f2:86:4b:9c:fe:95:74:ef:32:76:c8:a1:
         12:e1:ef:12:a6:99:10:b4:c3:2f:e6:27:02:ab:a9:9c:82:91:
         d4:cc:dc:80:23:30:42:80:97:8c:f5:c7:3a:91:d2:ff:ce:13:
         c2:36:2f:6a:97:4c:6c:29:6d:37:fa:dd:8c:de:ae:6a:4b:85:
         c7:27:72:51:77:ac:11:49:5a:20:43:84:92:74:38:a9:3f:7b:
         04:f4:c1:5b:c9:84:d9:4f:4f:5c:ec:4b:64:eb:56:63:0f:7c:
         4d:9f:00:2d:9c:f6:dc:f2:61:2a:c9:56:58:25:3a:a2:aa:97:
         88:46:9c:b3:fc:43:bc:f2:f5:e6:78:42:7e:d7:a8:5d:0e:a3:
         c3:8e:f2:dc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFbKH+2x35sFo4oMdZeRTeDkFRnQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDAxMDQxWhcNMjYwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMTRmODVlODA1N2I0ZTgzYTU1YjM1YzM0ZDY4MzM2NDky
MTY0ODczZDMxMDA5OTk3MGE0NDc2NzRlNjhlYzA1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDESZ7EqbJ5i0fH/57zmBxV75iRV3SDI+2PkaSglp1Uk79L
eun4XFHokQiCarF4ekDxaSiarO4OBbeoxW1/DxwhDpCbYfwm4O6nHt+aomslBtOE
s+wL48IlDSK0ZWq6nhzx+7FSOWEOQ5qxvGpn9E2a818IgrpmXOZa6d3VSsp8anKS
5QY4QndsbE6wsHB/PIlwuE6icW45/jJ/34TOsVeD7LHAaq19dJTtu/Ui9zUOmFg7
9182aF7z1faXgJELmgiNZQcBn427mAkD8vnreeliHnerajQZKgbaF0uKWjnWyOD+
6pQrscJjnePPeQowmmD0tUi3pWbXZLJea3eQZPurAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhkfwIBiq6NzgRCFPESCfTklXYOgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA3NGE2NjUyLTA3NjktNDA3Yy04YTdiLThiMzYyZjRjMTU1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAeujQAwDQYJKoZIhvcNAQELBQADggEBAAGE1/3z4UGZmM9W7TGL23GwVxev
3ElRVg39Z2irVtQtC88CA3Z5ck2117kheoJ4B8/jEgNTEWShfuLEV8Xy4RqSDWdn
DXP6huPo23xc8wEBl5xtY3okJbo+O13GQFJxwvjP9z+4yTBvktlyDiQ1e9n0T/KG
S5z+lXTvMnbIoRLh7xKmmRC0wy/mJwKrqZyCkdTM3IAjMEKAl4z1xzqR0v/OE8I2
L2qXTGwpbTf63YzermpLhccnclF3rBFJWiBDhJJ0OKk/ewT0wVvJhNlPT1zsS2Tr
VmMPfE2fAC2c9tzyYSrJVlglOqKql4hGnLP8Q7zy9eZ4Qn7XqF0Oo8OO8tw=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:06 2025 by rpki-client