This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0beb7c91-35ba-498d-ba16-724f6910eda0.roa
File:                     0beb7c91-35ba-498d-ba16-724f6910eda0.roa (raw, json)
Hash identifier:          pq1xsI99X9ZWuDNrraspL8W0jX1GhZ+KdodNSCq8Adw=
Subject key identifier:   12:74:88:C6:03:F8:15:20:17:3C:7A:8E:92:44:0B:16:76:8A:B4:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E80429D37D174C3C63B1E0D476986AB3589A3FE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0beb7c91-35ba-498d-ba16-724f6910eda0.roa
Signing time:             Wed 03 Dec 2025 01:21:39 +0000
ROA not before:           Wed 03 Dec 2025 01:21:39 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:80:42:9d:37:d1:74:c3:c6:3b:1e:0d:47:69:86:ab:35:89:a3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:21:39 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=acff6320dbb9428d3379f0d37d35ac5bbb6a8519965644445a555b54d9b7f50e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:cc:ff:6d:03:19:8f:da:d2:ed:1d:50:69:
                    9b:a4:80:01:48:dd:15:09:ca:c7:c4:7d:7d:1f:a7:
                    59:1e:fc:88:56:b6:b4:fa:13:28:45:fd:ea:24:25:
                    6a:ae:9e:ec:2e:5a:a0:aa:1d:ce:88:b8:4a:30:09:
                    7a:3a:db:3f:00:6a:c0:a2:fd:d4:8c:2d:b4:37:19:
                    f3:b8:36:23:6d:e4:31:ff:b4:3d:41:e2:53:94:08:
                    8d:1a:31:fb:5e:aa:87:c6:c5:96:0e:60:56:1b:1d:
                    3d:2e:6e:8b:d0:1a:ac:a4:e7:c1:f4:5b:cd:df:83:
                    19:e3:f1:70:5e:05:5a:13:eb:c0:d2:ba:3a:ee:42:
                    4c:10:1f:83:ff:59:a0:8d:bb:6e:af:a0:fb:b6:db:
                    21:18:0f:fe:31:60:ba:58:db:42:31:72:1b:53:67:
                    a4:b5:34:1a:ea:2d:84:fc:0e:6a:a3:b4:72:2d:4b:
                    0f:a5:a9:a2:f9:1c:98:f2:66:1b:97:5f:af:d1:38:
                    b4:4f:91:e7:79:13:fa:42:ba:63:39:75:1f:0e:ec:
                    8f:ea:98:b3:b1:36:44:18:e9:53:49:e5:81:15:7c:
                    7f:e4:e5:92:e3:22:e5:c9:d0:e5:cd:4c:c0:99:94:
                    7f:ea:df:c9:8f:46:85:b5:ab:80:ca:27:37:ed:44:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:74:88:C6:03:F8:15:20:17:3C:7A:8E:92:44:0B:16:76:8A:B4:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0beb7c91-35ba-498d-ba16-724f6910eda0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:01:61:cc:75:85:4a:b2:72:18:40:49:79:11:96:b7:af:
         c1:db:d7:e4:bb:f2:8c:8f:2f:22:ef:08:a1:c6:91:ee:1f:1c:
         d5:68:cd:04:5e:41:17:3f:cf:66:d2:13:31:a1:e7:3a:52:c7:
         b5:f0:b9:63:05:2b:e6:ee:88:2c:54:80:48:92:11:f4:c8:2b:
         c4:05:26:87:7c:db:a0:b7:2d:6d:39:64:66:c0:cf:cc:58:60:
         e4:b8:0f:63:59:cd:25:05:78:64:68:b6:61:09:33:01:8c:6f:
         15:52:ef:dd:1b:e2:46:48:95:fa:7b:82:c4:67:f3:76:3e:7b:
         f3:57:8c:55:c5:14:0c:b5:31:75:2c:98:37:5f:c1:c6:f3:ac:
         f3:c5:2e:ff:3e:b6:e9:bc:db:39:44:86:4a:00:da:87:b3:68:
         63:3e:a0:ca:b9:ac:00:4c:81:f3:e5:50:9a:7b:7f:16:35:af:
         b3:9a:c6:f2:f6:d2:7f:73:2c:c3:0c:76:02:95:87:1e:86:9a:
         73:69:a1:f9:09:15:a9:6a:4f:9b:da:b7:12:17:94:9d:d7:72:
         0e:0a:4e:34:4e:19:01:0c:7e:4a:ab:54:d2:ff:aa:99:94:14:
         70:8b:4f:2d:b8:b8:64:6a:83:e0:59:c1:7f:18:e5:b9:0d:b3:
         6a:64:c1:0d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUboBCnTfRdMPGOx4NR2mGqzWJo/4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDEyMTM5WhcNMjYwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhY2ZmNjMyMGRiYjk0MjhkMzM3OWYwZDM3ZDM1YWM1YmJi
NmE4NTE5OTY1NjQ0NDQ1YTU1NWI1NGQ5YjdmNTBlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgj8z/bQMZj9rS7R1QaZukgAFI3RUJysfEfX0fp1ke/IhW
trT6EyhF/eokJWqunuwuWqCqHc6IuEowCXo62z8AasCi/dSMLbQ3GfO4NiNt5DH/
tD1B4lOUCI0aMfteqofGxZYOYFYbHT0ubovQGqyk58H0W83fgxnj8XBeBVoT68DS
ujruQkwQH4P/WaCNu26voPu22yEYD/4xYLpY20IxchtTZ6S1NBrqLYT8DmqjtHIt
Sw+lqaL5HJjyZhuXX6/ROLRPked5E/pCumM5dR8O7I/qmLOxNkQY6VNJ5YEVfH/k
5ZLjIuXJ0OXNTMCZlH/q38mPRoW1q4DKJzftROlhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUEnSIxgP4FSAXPHqOkkQLFnaKtPIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBiZWI3YzkxLTM1YmEtNDk4ZC1iYTE2LTcyNGY2OTEwZWRhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsEEwDQYJKoZIhvcNAQELBQADggEBAHuVAWHMdYVKsnIYQEl5EZa3r8Hb
1+S78oyPLyLvCKHGke4fHNVozQReQRc/z2bSEzGh5zpSx7XwuWMFK+buiCxUgEiS
EfTIK8QFJod826C3LW05ZGbAz8xYYOS4D2NZzSUFeGRotmEJMwGMbxVS790b4kZI
lfp7gsRn83Y+e/NXjFXFFAy1MXUsmDdfwcbzrPPFLv8+tum82zlEhkoA2oezaGM+
oMq5rABMgfPlUJp7fxY1r7OaxvL20n9zLMMMdgKVhx6GmnNpofkJFalqT5vatxIX
lJ3Xcg4KTjROGQEMfkqrVNL/qpmUFHCLTy24uGRqg+BZwX8Y5bkNs2pkwQ0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:11:28 2025 by rpki-client