This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa
File:                     203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa (raw, json)
Hash identifier:          wI9ffrBTedudBgR+ODHFidinMnGj/0ejZ/XIZ/HnMdc=
Subject key identifier:   62:61:31:02:7C:A5:CB:C9:4D:6A:13:3D:82:F8:92:FB:58:59:DB:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       117990658E1BBA349783865758582104005D2CB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa
Signing time:             Sat 22 Nov 2025 01:00:43 +0000
ROA not before:           Sat 22 Nov 2025 01:00:43 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:79:90:65:8e:1b:ba:34:97:83:86:57:58:58:21:04:00:5d:2c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 01:00:43 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=bc3345cc966c01e3a3eeb7585a1d46e1f0b1970718edafd80ce2a4d0355645b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:cc:c1:74:39:6f:4b:0a:e5:50:81:0c:34:
                    b2:5c:40:cd:0e:1d:70:52:6d:4d:ed:bc:c6:9f:d4:
                    c0:41:ab:54:a4:bd:19:b6:d4:05:82:b1:b5:e2:6e:
                    5c:f9:69:a2:1e:f7:40:4d:c3:86:1a:e7:ac:be:af:
                    61:4b:d4:d1:0e:31:a9:4d:8c:88:e5:8e:89:da:8b:
                    82:bd:50:54:21:00:cc:7d:51:a1:f3:18:86:a4:f0:
                    29:ba:d0:ec:f1:54:7a:03:e4:99:13:1b:d6:94:fc:
                    00:7e:00:4e:09:b5:00:a0:b3:c5:b9:73:ac:33:e0:
                    3e:a5:fa:3f:bc:12:bb:af:f2:b3:0e:bb:aa:93:fa:
                    45:91:a6:a9:0a:d0:d2:92:cf:bf:af:b2:15:31:94:
                    c7:cf:db:76:57:76:41:3d:c7:90:dc:7d:28:b7:ae:
                    88:a0:13:ae:6d:62:cc:b1:6a:14:d4:03:18:58:13:
                    d9:60:9e:eb:ca:c2:24:f6:26:e6:40:5f:32:e4:49:
                    92:78:8a:69:b0:8d:59:93:1e:b1:e8:d8:fe:f1:a3:
                    e5:59:ff:03:5f:b7:14:6b:6a:b3:c2:c0:2f:64:4d:
                    dc:ef:4d:91:cb:6a:81:c2:84:75:db:dd:6e:f9:86:
                    3b:e2:7f:95:38:be:6f:8e:ef:8b:54:6f:20:35:ed:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:61:31:02:7C:A5:CB:C9:4D:6A:13:3D:82:F8:92:FB:58:59:DB:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:8e:4b:74:86:04:54:7b:9a:dd:eb:79:a6:a0:27:68:5e:46:
         fc:e6:11:66:bc:61:c2:40:57:8d:fc:2a:53:64:48:53:0a:3f:
         9f:6c:51:18:df:50:60:d8:fe:f5:2c:a4:a7:5d:91:47:af:37:
         5e:d0:72:cb:30:3b:59:c3:95:b3:ac:04:12:0e:54:b6:a1:61:
         c8:7d:e7:17:0e:10:46:7b:a8:02:6f:5a:ec:85:cb:84:35:fd:
         95:7c:93:4b:53:aa:6e:9a:bd:5b:4b:23:85:79:69:59:eb:aa:
         46:4e:18:92:24:44:30:8a:56:ad:9c:36:8c:7d:c1:79:80:1a:
         92:0a:33:b2:46:4e:8b:f1:4c:c0:a8:c8:7a:34:6e:58:a8:94:
         bd:63:23:0b:fe:71:ff:86:5a:e0:a5:75:fd:3b:96:a2:bb:ed:
         2c:88:c1:82:c5:f9:88:3b:a5:bb:82:ff:11:61:d5:c6:92:82:
         a1:81:03:61:55:52:51:fe:58:d7:92:f4:35:84:ed:1e:33:ac:
         83:29:92:d3:ab:a8:9f:ac:28:f0:25:10:a3:a1:7b:0a:49:0c:
         69:13:54:bc:8b:52:81:97:67:40:09:bd:7f:85:48:81:41:9e:
         14:f3:ef:d2:de:46:4e:e4:b3:70:3e:d7:a7:a3:69:94:0c:1d:
         e0:75:c1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:02:01 2025 by rpki-client