This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa
File:                     11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa (raw, json)
Hash identifier:          txCjkZn3nWHY1y7RSY0+BiicGvIXnJnc2d4CdVH0Lu0=
Subject key identifier:   28:8D:30:61:86:C9:0A:51:CE:1D:F4:5B:79:2F:B3:6D:A9:28:8F:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21D6831C3F5D6EDCF6B01F94E4868D66A5A930F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa
Signing time:             Wed 03 Dec 2025 01:30:46 +0000
ROA not before:           Wed 03 Dec 2025 01:30:46 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d6:83:1c:3f:5d:6e:dc:f6:b0:1f:94:e4:86:8d:66:a5:a9:30:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:30:46 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=e106dda552941cc78d707bf5663045c9b65e20c1685c0f1773c3e081a8c8ed68, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:a4:5e:98:0b:b1:b7:90:08:5f:e4:d6:b5:
                    d3:73:05:99:56:55:38:a5:7d:31:fb:f8:09:ac:4e:
                    55:68:f0:9d:d0:3a:ca:17:33:81:d6:ce:81:83:3c:
                    12:bb:38:85:be:5c:0f:4e:b1:ee:ae:ec:f0:aa:92:
                    f3:61:2d:68:3c:ca:db:04:31:b2:fe:a1:8b:73:f2:
                    f4:ee:df:82:70:5d:aa:d5:8b:35:0d:16:3f:71:03:
                    9d:c3:fa:40:1d:5b:34:98:bb:46:55:c9:6a:f8:d2:
                    8c:77:82:be:f2:22:28:6a:e5:d8:46:dd:99:55:58:
                    96:7f:ec:48:7e:b3:28:f3:7e:8d:9f:14:8a:c0:19:
                    34:ce:7f:7a:44:af:40:06:ad:20:62:ac:1c:95:b4:
                    ad:ed:36:ec:cb:84:9f:01:42:af:59:4d:f1:aa:ea:
                    09:93:85:17:c6:84:0d:59:d7:5a:54:ee:ee:53:dd:
                    ff:8d:45:dc:b5:1a:ca:9a:39:55:69:a0:cf:9f:7f:
                    9f:73:29:3b:69:d9:4d:80:72:25:0a:20:2a:6e:ca:
                    0a:d2:47:07:01:f5:4c:b7:a0:5d:c6:8e:10:14:51:
                    60:be:e7:1e:12:c6:5b:51:d5:28:1c:62:93:4e:ff:
                    7b:9c:f1:73:60:15:93:b6:2f:38:a5:c4:e2:fc:a8:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8D:30:61:86:C9:0A:51:CE:1D:F4:5B:79:2F:B3:6D:A9:28:8F:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11dfeca9-5080-4a37-b459-e7a30f90d8fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:4a:e2:f6:a6:d1:d4:8f:bb:df:82:16:b2:99:41:a9:22:11:
         4c:64:23:6a:2d:31:db:87:47:e2:8d:d1:71:6b:75:dc:1d:d5:
         5a:15:46:78:23:ce:35:60:29:49:ad:8b:b8:6c:5a:65:92:d8:
         6d:3d:db:06:1a:ea:33:82:7f:f9:5f:ce:c9:30:1d:3a:44:48:
         39:f4:5b:22:8c:15:4d:79:fe:8f:43:97:3e:5d:52:8d:84:41:
         1d:8c:6d:22:42:a5:ae:b9:6d:0d:d7:a1:dd:16:38:c7:f6:1f:
         e0:cc:10:e7:c9:80:a4:f1:be:5b:b4:ef:4d:18:0e:55:4e:bb:
         fb:ba:0a:bc:df:a6:81:76:53:5b:e4:2f:26:4c:82:bf:77:33:
         04:44:b1:58:75:31:fe:5a:1d:99:1d:ea:96:5c:42:42:24:40:
         19:9c:93:64:6e:b6:91:2a:89:eb:ec:26:20:56:77:96:92:9f:
         f2:d3:da:64:44:a4:21:78:2d:f9:af:6c:72:96:17:f7:40:6f:
         e0:b0:95:97:69:e4:f8:06:3c:1e:29:36:1c:52:d3:e8:16:e9:
         04:79:23:ab:45:c4:25:3d:69:2a:23:21:59:e9:38:ef:03:64:
         9a:bf:21:10:67:f7:d6:6e:00:53:5f:43:eb:62:49:3d:49:5a:
         41:4c:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:19:10 2025 by rpki-client