This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e25c82c-c566-43b2-add2-4b2bab8925c8.roa
File:                     1e25c82c-c566-43b2-add2-4b2bab8925c8.roa (raw, json)
Hash identifier:          IxUw/s39ToDyMhtdjoBFhaEnEfKDpfQJA8bAKNm6EE8=
Subject key identifier:   6D:CA:A6:CE:B6:1F:34:2A:CC:88:96:93:28:30:BF:F3:4E:E6:7E:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       623AB60CC5E1923520728D4110CC4D0A08C869B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e25c82c-c566-43b2-add2-4b2bab8925c8.roa
Signing time:             Sat 22 Nov 2025 00:00:06 +0000
ROA not before:           Sat 22 Nov 2025 00:00:06 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        104.153.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3a:b6:0c:c5:e1:92:35:20:72:8d:41:10:cc:4d:0a:08:c8:69:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:06 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=c104d175db7555359df869f277a3b7a03b5292a9a1676ccf7cf8fda69aedf548, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:6c:98:e2:99:e3:40:ca:26:e3:e2:d6:1c:
                    bf:a2:ed:a7:12:01:81:95:f4:7e:cf:8c:93:21:46:
                    18:ae:ca:d6:17:12:b6:01:cd:b6:a8:3e:d8:71:d8:
                    c5:02:a7:58:5a:bd:ab:45:c0:a3:0b:80:c7:db:37:
                    8e:61:52:9d:2d:b5:f4:58:2e:02:ad:5a:1c:54:3b:
                    03:7d:87:f5:12:98:f5:cb:f1:10:ce:c4:7b:ca:db:
                    dd:63:07:91:db:90:30:d5:7a:16:b3:1d:7a:0a:08:
                    40:9b:b6:ea:a7:7e:40:ae:06:52:00:ae:2e:b8:f9:
                    5a:d5:09:97:d3:e1:37:57:66:fb:88:3b:a4:6f:e1:
                    a8:19:bc:f5:9a:73:e2:b9:8b:3b:f3:ad:4c:60:d2:
                    84:ed:90:68:6a:a5:31:89:08:c0:e1:6d:25:5e:de:
                    fb:f3:49:90:b5:97:c8:d5:51:11:2d:6d:fe:60:1f:
                    30:bd:da:45:55:dd:b5:69:1c:61:e0:a3:22:29:33:
                    a9:bd:02:a9:5f:ed:db:8f:9a:ba:f8:1a:ca:fb:15:
                    34:2e:d0:70:b0:ad:77:a2:82:56:26:b5:a4:3b:3c:
                    b7:93:f5:7d:12:bb:6f:27:db:35:74:86:fd:93:d4:
                    f2:4f:7c:41:a1:58:9a:1f:19:77:e1:eb:36:57:7d:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CA:A6:CE:B6:1F:34:2A:CC:88:96:93:28:30:BF:F3:4E:E6:7E:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e25c82c-c566-43b2-add2-4b2bab8925c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:24:e0:fb:17:0d:48:15:7e:6c:59:b2:e8:61:32:4a:39:
         0e:b5:cb:b2:bf:a3:ac:f9:b7:2a:06:ce:f0:0d:70:75:5c:c8:
         2d:2f:45:01:c9:70:2b:20:6a:ee:97:c6:30:2e:ef:68:b1:01:
         75:aa:a0:86:68:da:58:f3:99:c0:86:ea:fe:5c:8b:04:ba:fb:
         55:a2:0f:9b:a2:d9:0e:7a:47:f5:62:95:e1:40:a0:22:4d:1a:
         d2:74:71:92:25:12:a7:37:d8:2b:89:71:6d:f6:31:30:6e:28:
         e6:08:74:25:d1:5a:a2:09:e3:16:75:e0:cd:47:1e:41:97:66:
         90:79:0d:aa:eb:20:38:8e:21:77:22:3a:e9:9c:91:12:18:f3:
         c6:df:ec:2d:df:bb:51:66:2a:e3:7b:ad:3d:13:a5:9c:55:be:
         f0:10:2f:5a:c9:37:c3:8f:be:17:48:34:e5:d5:ba:03:c6:11:
         35:2c:36:74:87:7b:71:89:55:75:ca:27:71:ca:e4:64:dd:e6:
         09:e3:7b:8a:72:66:12:7d:77:70:0d:75:cb:d3:08:71:d2:69:
         55:fc:25:c8:fd:8c:3b:7f:9f:d2:f5:42:99:b8:87:d4:32:4b:
         3b:61:65:52:bf:9e:2b:09:c3:6f:9d:44:27:6e:88:2f:c7:f9:
         aa:61:e0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:56:15 2025 by rpki-client