This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c5d6cc1-b4cf-437c-af5e-1ba6fdd7c622.roa
File:                     1c5d6cc1-b4cf-437c-af5e-1ba6fdd7c622.roa (raw, json)
Hash identifier:          Kv3p+J/lBkDOvqjDq5fMr/cBhlxlf+6QHVn+GkTwpV8=
Subject key identifier:   CD:68:0A:5D:60:B1:00:B1:90:FD:18:F8:F1:9E:BD:DF:A4:A7:AF:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F88637413E3AF81869EBC5E49EF6596E6F34617
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c5d6cc1-b4cf-437c-af5e-1ba6fdd7c622.roa
Signing time:             Sat 06 Dec 2025 02:31:35 +0000
ROA not before:           Sat 06 Dec 2025 02:31:35 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.28.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:63:74:13:e3:af:81:86:9e:bc:5e:49:ef:65:96:e6:f3:46:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 02:31:35 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=c54b3184e00e5bb48d0fbf3ea366d85da356d420bad819d8a6b84adfc37ca4a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:19:5c:6c:97:0d:9a:f8:c9:4c:1a:fc:a4:
                    a5:50:0b:e7:e4:a4:30:8b:42:a1:11:71:7f:e1:01:
                    5b:a9:62:ce:61:00:98:e3:92:fe:38:08:8b:0c:0c:
                    24:56:50:8d:d2:ed:15:7b:5b:2d:88:fa:71:00:26:
                    80:eb:a3:57:89:13:04:c4:06:79:54:ff:0d:36:45:
                    52:44:ee:50:73:5c:8a:99:c7:1c:99:0d:f9:34:7d:
                    2a:18:1f:34:be:fd:d4:aa:9b:bb:66:69:33:d6:ab:
                    2f:60:6d:3d:48:8a:f9:25:86:14:0b:8f:8c:e7:13:
                    d4:3d:c4:ba:db:e0:0e:55:ab:14:31:74:91:58:a4:
                    e4:48:5b:4e:82:d3:a5:89:13:87:cb:77:80:c3:93:
                    55:2f:31:a7:42:4d:0b:33:8f:50:3d:48:7b:dc:63:
                    2f:31:fa:3a:5a:65:f2:d6:79:fc:d6:54:00:b4:5f:
                    7d:4c:38:14:7f:1d:e8:e4:89:35:24:75:9a:37:50:
                    3d:40:17:83:7f:df:0c:e5:21:e5:51:8c:8b:42:24:
                    40:d1:e9:68:ca:d5:45:75:57:a4:e4:c5:fe:cc:5c:
                    d3:91:b6:83:71:cd:81:99:16:7e:9c:fa:c9:93:22:
                    bb:69:21:a3:98:66:97:fd:dd:41:41:4b:be:6e:24:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:68:0A:5D:60:B1:00:B1:90:FD:18:F8:F1:9E:BD:DF:A4:A7:AF:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c5d6cc1-b4cf-437c-af5e-1ba6fdd7c622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.28.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:94:16:92:42:d0:57:56:7a:e2:cf:51:c3:41:ce:da:ee:
         88:a0:17:4e:49:14:c4:64:ae:ea:69:fa:c6:77:46:1e:9f:c1:
         46:d2:5c:3a:a0:ce:8e:be:14:19:a3:6f:65:53:cb:a2:bd:82:
         19:28:76:28:0c:ab:60:9b:c9:d5:8b:29:63:db:e0:88:b7:4b:
         69:c8:08:8e:75:2a:9b:85:1d:cc:23:c5:f9:84:f5:96:e3:fc:
         f8:3f:ac:92:b0:df:7e:2d:a9:7d:5d:bd:88:bb:49:4c:6a:7f:
         6e:3e:c3:88:72:4e:b0:d2:fd:6c:6d:7e:a5:c3:a0:94:5a:24:
         85:c0:9d:ad:c0:bf:92:58:a1:fe:0c:c7:52:db:54:9c:7c:a0:
         83:46:7e:57:73:1d:4e:03:6c:c9:8c:f9:8c:48:ff:f7:e0:ff:
         7d:e4:bb:79:7f:f8:08:99:17:51:5a:c0:f7:3f:7c:ed:4a:10:
         b3:df:82:0a:7c:de:ec:30:a8:aa:4e:65:36:f0:fc:16:26:77:
         85:af:a5:b7:18:4c:1d:de:2f:dd:19:46:72:7f:79:6a:76:8f:
         31:d9:eb:4c:ca:b0:14:25:5d:55:43:98:db:ca:95:af:2e:89:
         7c:1d:85:bf:1f:10:b0:8e:9e:ae:a5:7d:2c:c2:0b:01:7b:16:
         c8:71:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:59:41 2025 by rpki-client