This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ced30ed-3e79-4121-a7a2-24abb43a4fb4.roa
File:                     0ced30ed-3e79-4121-a7a2-24abb43a4fb4.roa (raw, json)
Hash identifier:          UtVtddNG8JXv4Ar1yQk3modRvnbR3KU7NkD8HFw0rNA=
Subject key identifier:   10:A4:66:35:73:20:72:BE:F4:C0:35:DB:AD:B5:8C:5A:4C:59:E3:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A0E1B31E86C7BF0508C65DD9240C59C8A3BDA6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ced30ed-3e79-4121-a7a2-24abb43a4fb4.roa
Signing time:             Wed 12 Nov 2025 00:10:42 +0000
ROA not before:           Wed 12 Nov 2025 00:10:42 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0e:1b:31:e8:6c:7b:f0:50:8c:65:dd:92:40:c5:9c:8a:3b:da:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:10:42 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=dd84691b6b013cd5810f802a651fb1f2e8204dd7eb2beb0d1c0bd24903523c92, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:06:6a:49:c2:e2:3f:26:a9:1c:38:76:11:
                    8e:46:0e:0f:87:c9:cc:1a:14:bf:ab:29:8f:29:4f:
                    6b:65:b0:c5:71:dd:55:53:f7:12:50:3c:0f:47:d0:
                    29:44:c7:c5:81:57:f4:af:01:83:af:b6:cd:ae:5c:
                    10:31:b7:1e:65:07:e9:11:93:13:67:fe:34:e8:58:
                    68:e7:f8:8d:fd:47:e2:4b:72:92:ba:21:95:30:9d:
                    43:e3:f9:f0:b9:5a:b0:91:e9:c2:b4:c1:28:bc:88:
                    a8:fa:29:fd:a5:02:f4:97:9c:cf:fd:ca:83:6b:87:
                    2e:01:ae:26:c3:5d:77:0d:86:b7:90:77:2c:d4:a7:
                    b9:c9:6b:a9:45:2e:36:b3:93:2a:45:a8:05:9a:76:
                    98:63:af:2d:1c:2a:02:89:5d:ac:06:cd:ff:62:51:
                    f7:40:29:c7:53:33:14:3f:83:75:ef:e3:f0:16:68:
                    23:1f:51:bc:ca:b1:0e:e5:ef:cf:5e:77:08:37:f7:
                    b6:70:29:09:8b:a6:b0:e8:81:01:96:04:3c:e3:8f:
                    82:2f:2e:ec:8a:36:72:d4:21:65:94:96:08:8e:43:
                    27:ab:8b:34:7f:5d:8c:26:f1:4f:cc:07:67:bf:3b:
                    bd:68:84:43:c7:77:b8:65:50:05:bd:70:fd:79:cc:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A4:66:35:73:20:72:BE:F4:C0:35:DB:AD:B5:8C:5A:4C:59:E3:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ced30ed-3e79-4121-a7a2-24abb43a4fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:58:6c:8a:a6:e9:05:eb:fb:58:3e:5c:57:8d:50:05:df:
         01:99:49:2c:dd:55:51:56:c6:41:f3:bf:cf:30:33:d0:62:e8:
         21:1b:3f:1e:76:3a:dc:b1:50:6a:34:99:cb:36:29:1c:a3:a7:
         de:ff:52:6d:43:97:1f:c5:94:f1:3f:26:0e:63:82:6d:84:f3:
         40:82:2f:54:3f:21:b4:38:35:af:fb:3e:0b:29:83:9f:87:d6:
         18:9e:30:df:b3:b9:52:4b:71:eb:a6:5a:7d:4e:d8:7a:1b:6b:
         98:01:6d:f7:44:79:6c:98:85:e2:45:5f:75:94:1f:c7:67:c2:
         1b:98:d8:87:b6:d9:b8:e9:9e:70:cb:4e:3e:09:77:e3:91:78:
         c3:6d:a0:68:51:10:c3:85:fa:b5:00:01:9e:8f:67:02:14:d8:
         17:f0:2d:a4:e8:5d:43:4d:57:bf:f8:35:45:07:61:d8:94:28:
         01:f3:d7:78:ff:4a:0d:82:ce:30:28:8f:bf:89:54:be:a2:8d:
         02:d5:ab:b2:28:8c:53:a7:d2:94:9d:4f:4d:88:e3:22:5d:a5:
         5e:20:9e:37:99:dd:d0:50:45:d1:09:93:4e:32:66:1d:07:9f:
         b9:84:bc:4a:a6:84:22:2a:32:93:6b:62:46:10:93:42:90:a5:
         a2:97:06:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:39:45 2025 by rpki-client