This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11aab549-ced0-4ada-9748-9d58cb0c1eb7.roa
File:                     11aab549-ced0-4ada-9748-9d58cb0c1eb7.roa (raw, json)
Hash identifier:          +eLZHL5vJV6LiN0mKmh8HFI/LGnht6QQJi86KxTZ3Gc=
Subject key identifier:   96:19:A9:F0:98:26:7D:0C:05:E2:F7:D8:24:EC:F5:1F:FF:CB:1D:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54F4E142A88D68C65AD0FD93BAE05F2CBF1FBB5E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11aab549-ced0-4ada-9748-9d58cb0c1eb7.roa
Signing time:             Tue 25 Nov 2025 01:21:17 +0000
ROA not before:           Tue 25 Nov 2025 01:21:17 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.146.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f4:e1:42:a8:8d:68:c6:5a:d0:fd:93:ba:e0:5f:2c:bf:1f:bb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 01:21:17 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=f352bbf2071574db1f11a046f8764eae02351271e3bfc8f367534ce0ed6cf2df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:9d:02:f3:d5:79:6e:0e:6d:a5:0c:ea:59:
                    a8:8c:50:b0:67:23:33:a8:31:99:34:d8:54:e9:c1:
                    27:f1:8b:3b:75:ec:fc:75:ea:c9:52:3b:e0:c4:2f:
                    96:d5:f7:f6:c0:4d:60:74:bd:05:5e:8b:58:9c:10:
                    80:c8:72:b7:8c:8a:45:c1:9b:72:df:fe:1f:e1:c4:
                    41:c0:d3:73:17:f5:02:4e:db:dd:35:25:e9:46:1e:
                    1e:7d:6e:b0:f3:7f:ea:2c:4f:c5:b1:5a:79:91:36:
                    18:a3:09:e4:7b:b8:2a:b5:ed:7d:71:e3:c1:42:df:
                    93:17:0f:c6:b0:f3:3e:73:eb:22:0d:0d:29:4e:24:
                    28:a7:e9:09:38:9e:6e:90:d5:6a:31:df:f2:c3:f0:
                    28:b9:29:77:45:1f:0a:e6:57:a8:4a:76:67:69:47:
                    90:d4:0c:7b:d9:15:56:21:0a:ef:8f:f5:4d:e2:d5:
                    f8:11:ab:69:3e:01:5f:87:a5:ef:48:f5:de:07:52:
                    ec:0f:41:ec:e9:bc:7f:ee:c8:65:46:2e:e5:d1:22:
                    a5:f0:86:5e:bc:8c:46:96:39:ab:df:4a:02:f1:60:
                    cb:4e:b8:fa:d0:17:27:64:ca:e4:b3:8a:32:d4:42:
                    60:4d:aa:82:1f:d7:53:a2:56:1f:64:87:d6:ee:92:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:A9:F0:98:26:7D:0C:05:E2:F7:D8:24:EC:F5:1F:FF:CB:1D:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11aab549-ced0-4ada-9748-9d58cb0c1eb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:7c:6e:b5:1c:63:7f:43:0f:da:58:f8:69:ab:f9:3f:cb:b8:
         b3:0f:a1:41:be:66:1c:46:4c:92:89:4c:84:1e:c7:e2:ab:d5:
         31:3e:bb:14:3c:14:da:40:38:7a:17:bd:6f:08:dc:55:cc:71:
         03:41:4b:cf:36:a9:c2:12:cd:5c:d6:3c:dd:b7:34:ee:fc:3c:
         c9:6f:00:56:04:7f:ee:fd:0f:17:56:fd:cf:94:22:14:12:24:
         44:69:c0:ee:25:1c:41:e5:b3:d1:ea:14:ae:b9:cb:b4:05:59:
         c2:93:63:ef:71:3b:ba:08:29:9a:15:11:5e:0b:35:d2:18:28:
         8d:14:6e:72:7a:36:98:df:6a:e6:c9:8e:ad:d3:86:fb:f6:b2:
         fd:ec:af:06:e5:06:0c:d1:fe:34:d1:6b:fb:c6:9d:c3:6a:8d:
         ab:97:e0:82:54:e9:cd:2c:23:09:b4:70:23:fc:11:36:71:49:
         bb:72:3d:0c:82:32:0f:d5:3d:26:1e:ed:8a:29:55:0b:ec:d2:
         8d:9f:7d:66:30:40:89:95:9e:54:ef:4a:9c:f8:7c:42:09:6a:
         03:5a:78:74:05:7b:3f:9b:66:4b:5e:de:95:97:75:c5:08:03:
         4e:75:15:e9:2b:62:52:58:b5:12:04:58:43:8d:69:2b:9d:ce:
         ae:d0:7d:0a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUVPThQqiNaMZa0P2TuuBfLL8fu14wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDEyMTE3WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmMzUyYmJmMjA3MTU3NGRiMWYxMWEwNDZmODc2NGVhZTAy
MzUxMjcxZTNiZmM4ZjM2NzUzNGNlMGVkNmNmMmRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8F50C89V5bg5tpQzqWaiMULBnIzOoMZk02FTpwSfxizt1
7Px16slSO+DEL5bV9/bATWB0vQVei1icEIDIcreMikXBm3Lf/h/hxEHA03MX9QJO
2901JelGHh59brDzf+osT8WxWnmRNhijCeR7uCq17X1x48FC35MXD8aw8z5z6yIN
DSlOJCin6Qk4nm6Q1Wox3/LD8Ci5KXdFHwrmV6hKdmdpR5DUDHvZFVYhCu+P9U3i
1fgRq2k+AV+Hpe9I9d4HUuwPQezpvH/uyGVGLuXRIqXwhl68jEaWOavfSgLxYMtO
uPrQFydkyuSzijLUQmBNqoIf11OiVh9kh9bukngxAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUlhmp8JgmfQwF4vfYJOz1H//LHd0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzExYWFiNTQ5LWNlZDAtNGFkYS05NzQ4LTlkNThjYjBjMWViNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwANkjANBgkqhkiG9w0BAQsFAAOCAQEAqnxutRxjf0MP2lj4aav5P8u4sw+h
Qb5mHEZMkolMhB7H4qvVMT67FDwU2kA4ehe9bwjcVcxxA0FLzzapwhLNXNY83bc0
7vw8yW8AVgR/7v0PF1b9z5QiFBIkRGnA7iUcQeWz0eoUrrnLtAVZwpNj73E7uggp
mhURXgs10hgojRRucno2mN9q5smOrdOG+/ay/eyvBuUGDNH+NNFr+8adw2qNq5fg
glTpzSwjCbRwI/wRNnFJu3I9DIIyD9U9Jh7tiilVC+zSjZ99ZjBAiZWeVO9KnPh8
QglqA1p4dAV7P5tmS17elZd1xQgDTnUV6StiUli1EgRYQ41pK53OrtB9Cg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:53:48 2025 by rpki-client