This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3c320a-4015-4d09-85af-05cf9a03532c.roa
File:                     1c3c320a-4015-4d09-85af-05cf9a03532c.roa (raw, json)
Hash identifier:          Iu5iFxaOQns9pySrHBDr7YeSWPCYlEHxujaiXBWXShk=
Subject key identifier:   A6:76:96:64:B7:4F:14:E9:08:36:34:B8:CA:89:CA:2F:D2:92:4A:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       538F7A702A48206FCDF34899700FCFC792FD31F3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3c320a-4015-4d09-85af-05cf9a03532c.roa
Signing time:             Tue 25 Nov 2025 00:31:42 +0000
ROA not before:           Tue 25 Nov 2025 00:31:42 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8f:7a:70:2a:48:20:6f:cd:f3:48:99:70:0f:cf:c7:92:fd:31:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:31:42 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=e8e0a28b4258392728337d59b64b7e3b6f43dae1d559b9728ba804675e4bd2cb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:28:41:b3:b8:db:ad:ee:2a:9e:78:f3:e2:
                    9b:e6:59:2f:92:af:ab:09:09:c8:a2:7a:1f:f7:c1:
                    50:71:22:a8:64:b4:9c:9a:93:b6:87:02:88:17:09:
                    5f:12:7b:7c:fc:b3:30:bf:19:5b:68:75:ea:54:09:
                    08:b1:3c:af:67:55:57:64:81:0a:0d:22:8f:e2:6d:
                    33:1a:3c:7c:b8:dd:64:2e:f5:68:6e:49:d6:45:08:
                    45:fb:82:06:0f:52:a4:f4:fd:b8:4b:bf:f6:74:ad:
                    a2:6a:2a:8d:85:75:6a:da:9e:f1:25:fd:24:51:47:
                    f4:83:35:b3:ae:e5:f5:2b:fb:9f:6d:cb:3b:04:a1:
                    20:41:58:2e:79:bb:b6:d3:ae:85:44:7d:e1:a3:7d:
                    c1:0e:0a:b6:2c:de:0e:9f:d9:6f:09:73:cf:c7:f7:
                    87:ac:00:aa:d6:2d:4f:f7:4d:98:27:fa:6c:45:c6:
                    9e:7d:17:29:9a:f2:94:0c:0e:95:d0:d4:db:32:a4:
                    cb:6f:4e:74:8f:f9:6b:b0:b5:66:d3:55:64:52:e2:
                    ea:c8:af:19:7e:52:44:3f:32:79:dd:82:3e:57:e6:
                    c6:89:b2:53:5e:6d:46:58:c7:e0:d7:ad:62:47:d9:
                    d6:6a:2a:37:ef:a5:1f:35:65:75:3c:bf:c7:19:57:
                    3b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:76:96:64:B7:4F:14:E9:08:36:34:B8:CA:89:CA:2F:D2:92:4A:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3c320a-4015-4d09-85af-05cf9a03532c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:b5:af:81:31:ae:ad:ea:94:f5:40:49:37:73:5b:54:59:33:
         3f:e2:29:4b:db:9d:a3:b0:60:73:cd:31:03:83:36:6d:6b:9c:
         ab:c8:26:5d:97:23:ac:f3:d6:5c:13:56:89:f7:e0:8a:51:c9:
         a8:21:99:99:42:46:2b:23:b1:02:eb:b3:13:13:92:be:2a:6a:
         5b:6a:26:07:7f:82:27:5b:c9:db:14:74:93:72:da:1f:fb:22:
         95:2c:fc:96:81:4e:0b:e8:50:40:6e:fe:e0:40:89:43:88:2e:
         8a:f3:90:cf:b0:90:c8:da:d0:ae:46:ef:4e:7c:69:18:94:ea:
         d5:62:7c:b7:59:8f:ac:11:57:ea:f7:f0:1b:c9:09:64:5f:03:
         6d:e7:9a:ad:39:1e:11:f2:ce:03:67:a5:dd:8f:40:26:1c:05:
         0e:a2:00:09:8e:13:84:a3:13:da:92:75:e7:0c:4d:61:ab:cf:
         22:11:50:02:9d:39:4b:b5:8f:c5:fe:89:06:9e:d7:28:eb:5d:
         a4:b7:50:f6:82:eb:34:f4:1f:0e:65:74:5d:f1:43:72:95:c9:
         49:b8:24:2e:e6:6a:3e:06:52:50:09:0a:4d:49:79:ac:b6:a6:
         72:2e:c1:56:27:44:cc:19:11:c6:02:8e:0b:71:09:70:0d:6c:
         64:72:0c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:55:39 2025 by rpki-client