This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa
File:                     12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa (raw, json)
Hash identifier:          1WWDiQyUskZNW1tgJEwkibq/UWnyKBfpRpS69kejvo4=
Subject key identifier:   97:79:95:73:CA:59:9D:31:63:9E:77:99:E7:FD:2F:21:2F:12:FC:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2BC62ADE89DED9D232C78738B2F1AAD07C0E85BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa
Signing time:             Sun 30 Nov 2025 00:30:11 +0000
ROA not before:           Sun 30 Nov 2025 00:30:11 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.198.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c6:2a:de:89:de:d9:d2:32:c7:87:38:b2:f1:aa:d0:7c:0e:85:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:30:11 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=7eccecfe6259a40ee8a0dc49690f353bf06a4ceba151fa94cb4969b8babeb152, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:73:97:3e:dd:41:52:dc:cb:7e:c5:f7:33:
                    36:d0:dc:3e:b4:7c:c2:56:16:5d:27:bb:55:58:4b:
                    14:fe:06:5c:81:64:1f:0f:35:a1:b4:34:e0:e6:ff:
                    c5:3c:1b:c6:3a:4a:f6:cc:d5:5e:8b:42:05:1f:c6:
                    5e:36:21:17:e7:7b:f4:9f:ea:78:82:3d:a6:09:21:
                    90:63:3e:cd:e8:6c:89:b2:01:1a:76:a7:3d:86:44:
                    56:91:ae:e9:0f:c9:e1:de:ec:40:0b:c8:49:e8:47:
                    35:39:95:00:34:6f:89:91:11:9a:d3:4b:b1:bd:8a:
                    36:ed:28:64:c7:e0:0b:20:ab:75:c7:7c:14:62:25:
                    0f:5a:a5:bb:4a:dd:26:38:1d:dc:c6:b3:2b:47:2f:
                    e6:1f:94:0b:33:45:02:16:cd:67:3c:46:6e:df:46:
                    5b:78:54:74:ee:ab:bb:da:ef:29:be:c2:f1:9a:a4:
                    ee:ca:c5:71:bc:4b:d0:76:c2:51:6a:f7:02:ad:34:
                    4e:7b:58:ee:86:06:79:fe:a0:2f:77:1d:2c:0a:5c:
                    10:c9:24:10:ad:b7:52:fd:1d:d9:ed:1b:7b:97:7f:
                    01:dd:35:e9:c9:fc:80:12:1a:af:2a:a6:03:45:39:
                    08:d2:eb:ad:28:de:30:87:87:8d:04:96:4c:da:96:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:79:95:73:CA:59:9D:31:63:9E:77:99:E7:FD:2F:21:2F:12:FC:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:23:86:9d:56:2d:e8:27:96:32:ac:12:c1:80:41:72:39:4d:
         52:2c:cf:42:31:75:db:04:25:43:bc:17:5e:17:93:c7:22:51:
         3f:3d:27:61:ac:00:aa:bf:33:fb:86:66:4e:c1:30:61:ec:9c:
         1c:7e:71:f1:be:33:36:ca:fb:31:d8:17:c2:f1:e7:8c:c3:d4:
         bb:d8:a4:33:52:07:54:10:1d:24:7f:51:37:5c:4d:9d:a6:8b:
         ad:1f:e3:64:29:fd:50:7c:43:c8:d9:a1:58:09:a1:e3:d0:22:
         bc:4f:ac:cd:be:3c:00:80:2a:35:1e:2e:4a:03:22:73:68:ed:
         73:6b:f1:d8:73:ec:d7:eb:2c:4b:40:88:db:1b:c0:29:e9:c6:
         52:ae:0c:69:f7:48:29:c4:7c:42:79:f1:01:d4:13:53:2e:46:
         46:13:5b:df:81:12:0f:92:3f:16:4a:7a:8b:67:9e:91:09:7e:
         74:d2:43:1a:4d:aa:d9:7e:fa:1b:50:7f:80:f0:b1:26:87:af:
         3e:0d:30:7b:0d:8d:e3:f5:7e:de:01:d4:0c:ba:a8:ee:03:75:
         d0:d8:3d:6a:6a:0c:85:bc:a7:cf:d1:73:a9:05:ef:15:30:f6:
         1d:3d:7b:7c:53:8d:7c:a6:f2:e2:f3:d1:50:c9:56:af:f0:11:
         d6:75:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:52:56 2025 by rpki-client