This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11cb204d-a41c-4740-a6e5-68744447fd45.roa
File:                     11cb204d-a41c-4740-a6e5-68744447fd45.roa (raw, json)
Hash identifier:          aeIP0e0kc7GKz9DOUfECgXGAuF4MZJ+MS2PIZFDfzoU=
Subject key identifier:   60:5C:F7:78:DE:2B:23:EF:83:D9:3B:8C:E3:76:38:CA:D0:4B:B4:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       566163428FBDCCFB3E0EA9D751CCE39804D23986
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11cb204d-a41c-4740-a6e5-68744447fd45.roa
Signing time:             Tue 25 Nov 2025 00:10:09 +0000
ROA not before:           Tue 25 Nov 2025 00:10:09 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:61:63:42:8f:bd:cc:fb:3e:0e:a9:d7:51:cc:e3:98:04:d2:39:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:10:09 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=c4d3da2e6237734d0b8bf2213fe53e33ef4388bc36768fb1bf59db1e4c2c08cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ef:8f:db:c5:00:0a:52:aa:0e:d3:6a:04:da:
                    0c:de:a3:52:f2:3c:37:38:1e:e9:d7:2c:88:aa:f2:
                    25:e0:53:89:03:de:f5:a4:8b:3b:22:96:05:5e:c6:
                    a4:cb:42:61:22:d0:65:b9:b8:a0:87:0c:2b:58:f1:
                    44:e4:69:ca:74:44:38:f4:a8:d9:88:73:bb:a2:da:
                    a7:23:55:a3:3d:b0:07:aa:50:89:6e:a4:e7:67:a6:
                    a6:30:97:a3:c0:18:66:27:a5:4c:18:10:c2:e8:90:
                    aa:ca:be:1f:e7:77:67:c7:a0:f7:7d:dc:26:c5:57:
                    3f:8e:e6:3d:09:36:d1:df:7c:ca:6c:b6:5c:ee:89:
                    fa:f4:2d:a1:88:ee:2c:b3:c7:4e:57:ec:07:33:8f:
                    c7:1d:c8:1f:9d:90:6b:80:16:c9:ae:3b:5f:27:5f:
                    1c:48:6e:06:ff:11:1f:32:73:5b:9b:22:1a:8e:91:
                    a3:87:8f:41:95:15:81:bb:37:5f:18:5b:10:fc:03:
                    4e:fd:96:8a:21:f5:9d:46:54:b5:70:48:2a:8c:8c:
                    f9:f1:4a:92:31:e4:17:e3:8b:9a:5c:e4:50:74:9c:
                    33:08:59:22:e1:64:7d:49:e1:e4:43:e2:13:3d:ce:
                    62:2c:65:f5:12:d1:0f:88:45:d3:87:8b:4b:8f:00:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5C:F7:78:DE:2B:23:EF:83:D9:3B:8C:E3:76:38:CA:D0:4B:B4:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11cb204d-a41c-4740-a6e5-68744447fd45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ca:17:51:0c:ae:4a:1a:6f:d8:aa:f9:78:88:3c:b5:e1:9d:b8:
         1f:9e:10:33:bd:4a:78:e3:7e:43:40:44:8c:10:96:13:7e:08:
         58:a0:4d:6c:18:52:29:35:53:38:10:56:22:19:6d:da:95:86:
         72:78:74:8b:1e:da:bc:d8:b2:e5:8e:17:b2:53:5b:88:6b:51:
         7e:72:1d:52:80:e3:52:17:37:7a:3f:17:4a:c6:2b:e7:db:56:
         a4:14:eb:af:a8:14:d4:2c:d4:71:d5:cd:ef:8c:5e:e2:45:7a:
         c0:21:e3:35:90:c3:d6:c7:51:8d:0f:56:39:8e:16:e9:b6:80:
         8a:be:ba:db:5c:5d:de:86:0c:5a:da:51:35:f5:c5:2f:be:87:
         c4:62:e7:f9:10:05:f0:67:16:2b:71:13:f1:cb:57:ac:96:6a:
         39:2c:4b:94:04:6d:bf:1e:f6:29:ad:c0:aa:f1:8e:3b:8d:8d:
         6e:20:63:7e:5d:9a:9b:85:c0:05:d3:96:ae:f1:4e:e1:9b:ab:
         20:6f:97:68:8a:68:19:af:ab:6e:38:2f:f0:89:77:eb:66:98:
         d9:a7:f0:80:2d:3b:e0:ee:6b:a8:b9:3a:27:1f:0b:09:ad:9d:
         9f:54:01:c6:80:fc:0c:ee:0f:f6:b4:a2:f3:ab:32:a1:2e:12:
         f4:0a:1f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:19 2025 by rpki-client