This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11ca9a77-c0fe-4cd8-ba9d-dc218add136a.roa
File:                     11ca9a77-c0fe-4cd8-ba9d-dc218add136a.roa (raw, json)
Hash identifier:          iAiZ0KW/tdiLLKe9C26BRQmcW2ggi2obDEaKGclt0E8=
Subject key identifier:   DD:72:A3:F7:7F:56:69:8F:0C:EA:93:63:6E:C8:FF:E6:6A:32:BB:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       131D2238C809483D31CE9D575DCEE8B2B96CC414
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11ca9a77-c0fe-4cd8-ba9d-dc218add136a.roa
Signing time:             Sun 30 Nov 2025 00:20:29 +0000
ROA not before:           Sun 30 Nov 2025 00:20:29 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        203.110.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1d:22:38:c8:09:48:3d:31:ce:9d:57:5d:ce:e8:b2:b9:6c:c4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:20:29 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=744c5e98e290db05b06eeee014252065836cdf82ab18903447962dd112ae442d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:b5:ff:43:58:10:82:c5:76:10:f8:ee:8f:
                    f7:07:0e:d3:4e:da:42:60:58:34:99:6a:d3:12:f9:
                    ec:ce:1e:f3:73:33:f9:26:14:fb:26:e7:e1:b9:30:
                    b0:e4:a3:ce:e5:e2:95:5c:ad:f6:41:4b:6c:ca:2e:
                    23:bf:2e:81:f6:8f:bb:7c:a5:02:11:17:81:3f:28:
                    09:0b:41:a9:d5:92:f5:40:9b:cc:9f:d4:8f:14:bc:
                    61:14:75:dc:25:aa:9f:3e:7b:64:55:f4:72:5e:02:
                    9c:98:de:b0:d1:aa:8f:75:a4:4b:e2:cb:0a:62:d7:
                    5f:0a:4b:98:92:38:05:3a:1b:c8:05:65:41:c4:50:
                    d6:0f:c5:e1:d9:b9:48:71:05:50:67:86:87:66:62:
                    b6:cf:a8:50:c4:4b:e8:38:25:4b:28:ed:f5:e0:d4:
                    58:b0:b8:ff:c7:cc:16:11:df:b3:00:eb:46:2f:5c:
                    31:8d:06:eb:19:a7:e7:71:6e:67:33:2b:df:53:c4:
                    fe:f5:9b:40:38:c9:34:df:e0:62:c5:2f:1a:ba:72:
                    d2:fe:24:a6:c8:9a:43:47:68:5e:06:09:b1:61:73:
                    9e:1a:dc:b4:b4:88:d2:94:04:4f:0c:50:9c:c4:2f:
                    7e:1d:c0:79:0b:6c:cd:a0:39:a7:35:f8:db:46:f0:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:72:A3:F7:7F:56:69:8F:0C:EA:93:63:6E:C8:FF:E6:6A:32:BB:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11ca9a77-c0fe-4cd8-ba9d-dc218add136a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:41:df:e0:39:5b:ba:a1:f0:a3:a1:a3:f9:7d:83:fa:55:03:
         b5:46:be:ed:19:dc:60:93:5f:1d:2d:1c:5f:5c:d2:35:a9:03:
         d5:2a:5f:70:63:87:67:97:94:e4:7e:62:c0:59:c4:ff:14:aa:
         c5:07:d7:4f:72:bb:8a:0c:8b:5e:f8:ec:fc:42:5c:f2:84:79:
         e4:85:d3:96:14:77:c5:7d:a6:fc:7e:bb:d2:a5:27:de:04:8d:
         7f:d3:15:c5:2b:55:54:4e:f4:1f:0c:97:85:30:48:18:dd:12:
         f5:6f:3c:30:31:78:0d:c0:b3:8c:ee:56:69:58:c5:a1:ec:31:
         36:c3:56:ce:8a:0f:af:dc:cd:6e:bb:b0:01:0d:64:4a:f5:7e:
         9d:9d:87:3c:eb:bd:ef:55:d7:17:74:de:83:b1:bb:42:07:61:
         31:6b:fa:10:39:1a:06:e7:80:3d:ef:1f:7a:c2:94:f4:db:ef:
         22:c3:4c:7b:c3:be:03:66:0b:24:65:56:4e:13:71:54:72:05:
         66:b6:9b:f5:18:e0:66:1a:b4:09:c8:e2:d3:95:54:1f:d2:88:
         92:11:1a:9d:ca:ef:9c:f4:d9:83:05:95:b6:0b:3f:28:d9:52:
         d6:a1:20:e5:48:97:ca:f7:b4:ff:d5:e0:18:a5:69:97:ea:35:
         54:c7:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:32:15 2025 by rpki-client