This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119594d3-1a17-4118-856d-889f2bef824e.roa
File:                     119594d3-1a17-4118-856d-889f2bef824e.roa (raw, json)
Hash identifier:          y9dU8k/BVwQBcgTUSgp0IPrvegciQK04Y3yzlXxRVOQ=
Subject key identifier:   84:3A:D8:50:4A:EC:2B:B6:3E:8A:A3:D4:E7:D0:E7:3E:C1:41:A3:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B6A3F2CBF595F3F3D87648F8D389B5E267E8735
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119594d3-1a17-4118-856d-889f2bef824e.roa
Signing time:             Tue 25 Nov 2025 00:20:46 +0000
ROA not before:           Tue 25 Nov 2025 00:20:46 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        5.174.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:3f:2c:bf:59:5f:3f:3d:87:64:8f:8d:38:9b:5e:26:7e:87:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:20:46 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=b59352229ce598c32099391f3e2953c0fd6b0527168f7c8aed36f5d3f0343f58, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:44:8b:0e:1b:c7:a9:a6:05:cf:9d:9b:ad:
                    e5:90:38:e7:23:56:02:fe:dc:1e:ee:d2:35:e6:96:
                    1d:fe:9b:7b:0e:4e:38:5e:7f:fc:1c:f8:00:f9:07:
                    d6:18:3a:d9:c6:f0:32:08:24:2d:3f:d8:01:36:55:
                    d6:22:66:6a:ed:46:50:2e:5e:27:c0:0f:7d:c1:08:
                    b0:32:ed:3f:34:8f:60:b3:2d:fc:48:26:97:a4:81:
                    11:c6:7b:f5:46:81:68:a4:78:35:94:48:e9:50:6b:
                    88:9a:4c:86:82:c8:b3:5c:b6:ec:86:36:48:b0:4d:
                    6e:6b:5d:38:78:77:2b:6d:f7:e9:c5:45:ea:50:49:
                    86:0c:34:8c:87:67:a0:d3:5f:59:64:cd:cf:43:fc:
                    88:da:48:bf:dd:9d:fc:31:94:18:ed:10:7b:f1:18:
                    bc:1d:fc:7e:1f:40:fe:c2:97:ca:49:f6:41:43:1a:
                    e2:88:95:81:9f:29:7e:4d:99:2d:4b:bf:85:9d:6a:
                    f6:1c:e7:42:48:d9:22:46:75:b7:95:3f:1c:72:86:
                    d5:cc:41:a9:6f:15:1b:f2:bd:31:c0:73:ac:be:f2:
                    ff:76:37:c7:c6:1a:94:f0:64:ea:7b:f6:0f:0e:1e:
                    7e:2d:26:be:63:1b:07:d4:62:5e:69:1b:fb:bf:16:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3A:D8:50:4A:EC:2B:B6:3E:8A:A3:D4:E7:D0:E7:3E:C1:41:A3:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119594d3-1a17-4118-856d-889f2bef824e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.174.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:90:0a:72:df:a5:a7:9d:bb:0b:b5:eb:c2:7d:1b:e6:81:60:
         99:87:0c:31:3a:ba:65:62:c7:67:72:a8:46:bc:d0:bc:22:af:
         bd:8c:d6:e1:69:3e:1d:d2:c6:f6:60:7c:f6:1d:38:98:b7:6f:
         70:38:da:5c:57:75:26:bb:45:4d:2f:cb:99:53:f5:66:89:f6:
         5e:c3:9a:31:fd:81:94:5b:f1:60:91:97:f6:d3:f9:65:c4:ee:
         99:42:95:da:30:e5:0a:dc:ef:03:7b:a7:d1:77:56:a9:63:33:
         3d:5a:ba:fe:83:3e:51:91:be:25:1b:46:35:64:6f:a2:98:8f:
         48:7d:bf:8b:d7:b3:b8:ea:78:9c:c5:5e:f1:aa:03:57:b6:6f:
         c7:e9:c5:f1:6e:b8:ea:89:f2:1a:43:02:90:99:5a:f3:fa:94:
         a1:85:50:28:eb:4e:62:5d:fd:54:ba:f7:ad:66:8f:83:a2:8b:
         d4:6f:8c:97:ba:cc:13:d5:08:62:f6:79:64:98:f4:93:95:68:
         16:29:83:a1:8c:03:fe:87:66:a1:ca:98:a4:24:6e:a8:42:8d:
         12:03:29:fe:5f:7f:db:c0:af:23:16:25:a5:01:85:c6:99:87:
         86:dc:3b:cc:ce:70:74:a3:55:ff:65:3c:92:72:38:c7:8e:bb:
         ad:97:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:28:53 2025 by rpki-client