This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24a00a0f-2e6e-4bf0-9ea3-983eb53556b2.roa
File:                     24a00a0f-2e6e-4bf0-9ea3-983eb53556b2.roa (raw, json)
Hash identifier:          Eag3pnLgi0zB/Aic/6FOL7N5WSI5Q8CKcViXdfVZl+I=
Subject key identifier:   F1:74:8B:78:10:D2:BC:DA:D1:74:0D:3F:0C:34:C3:00:53:7E:55:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       065248AB48381FF5BADF6782EBEA10861E796C5E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24a00a0f-2e6e-4bf0-9ea3-983eb53556b2.roa
Signing time:             Sat 22 Nov 2025 00:21:13 +0000
ROA not before:           Sat 22 Nov 2025 00:21:13 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:52:48:ab:48:38:1f:f5:ba:df:67:82:eb:ea:10:86:1e:79:6c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:21:13 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=4e8e6d07b11f65a334099f27d979b239a12e499fa632983648b8fa009b824b08, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:8c:53:54:26:86:8d:29:c6:27:11:45:3f:
                    d6:2f:e0:8f:2f:7d:f3:06:9d:d6:d0:f5:a5:f1:82:
                    88:dc:a8:cb:48:66:99:c2:d5:ec:55:56:40:49:2b:
                    e5:25:f6:ca:08:54:20:de:e1:aa:f4:97:52:ba:56:
                    ba:f8:89:92:0b:a5:b4:e5:45:ed:f4:84:f1:7e:e5:
                    0e:83:f3:23:0a:10:1c:3c:ed:fc:4c:e2:12:4c:3e:
                    59:28:b6:35:3c:0e:50:d4:17:3b:52:9d:cb:74:32:
                    e7:96:d0:d0:29:d8:72:4f:29:8e:ab:d6:1a:e4:05:
                    b0:8f:43:50:3d:cf:89:92:80:6b:2b:ea:41:0a:81:
                    89:85:47:33:7f:fd:ac:7d:34:63:90:bc:df:a7:2a:
                    ef:e3:98:1d:42:9a:92:2b:34:60:1f:b1:98:34:72:
                    18:1d:14:a9:d8:12:23:7f:00:e6:7c:c7:a2:cf:a5:
                    d2:c2:84:1d:11:4f:a5:c4:f1:dc:a3:4f:21:ad:24:
                    1a:f5:19:6d:36:f0:a5:dd:dc:d9:3e:2e:78:0a:bb:
                    c0:f9:af:3b:e8:5b:e7:fd:d8:06:c4:c1:16:0b:96:
                    ec:3f:96:43:09:b4:c6:04:02:b7:1d:5d:76:7b:7c:
                    16:92:00:a6:e4:a8:4e:c1:b3:b9:b9:77:d1:6a:82:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:74:8B:78:10:D2:BC:DA:D1:74:0D:3F:0C:34:C3:00:53:7E:55:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24a00a0f-2e6e-4bf0-9ea3-983eb53556b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:28:15:4e:36:ae:e9:17:86:a3:64:13:a6:64:8c:5b:f5:d4:
         0a:63:56:1e:e0:bd:54:59:49:fe:c2:cc:a4:92:59:18:a4:32:
         66:71:5c:fe:64:e2:bc:f7:21:7b:98:3f:89:71:93:d2:1b:45:
         d0:cd:a2:87:92:3a:b7:bc:11:fd:55:02:e3:77:89:35:81:2d:
         9f:b3:26:a9:96:d5:1f:f1:13:91:c7:88:f5:ae:6b:f8:df:20:
         28:cb:ce:7d:3d:bb:06:ae:6c:40:5b:a1:c9:d5:58:a0:35:0c:
         d1:0b:a3:cd:38:17:f2:60:05:90:77:76:cf:e2:12:01:da:bd:
         20:e3:19:e0:76:56:ba:76:11:cf:25:fc:8c:20:1c:9e:8f:35:
         5e:9e:e6:15:76:ea:61:d2:7a:56:0e:b2:6c:a3:60:70:33:af:
         b2:a4:40:87:63:6a:81:af:cf:84:ae:e4:6b:81:5e:a2:ce:bd:
         11:10:97:ae:b2:3e:11:e8:72:af:64:29:88:8f:79:d1:56:f9:
         d5:e6:6c:10:9a:e3:2f:19:bd:57:93:2f:9c:3c:fd:60:36:18:
         7a:e7:64:61:bd:ee:17:7f:69:26:86:67:4f:23:9c:97:c2:b4:
         b9:94:5a:b9:c8:2d:ee:d0:d6:69:47:4f:5d:a7:98:f3:13:b3:
         a9:9e:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:25:23 2025 by rpki-client