This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26ebf15b-8b83-4ca7-9786-65e57e8877c3.roa
File:                     26ebf15b-8b83-4ca7-9786-65e57e8877c3.roa (raw, json)
Hash identifier:          aoTtY7ResA5DKNRZGquxqgc79qi82lGxp85Xj+ucMzM=
Subject key identifier:   81:12:2D:30:CB:00:4D:C8:20:C3:B0:75:56:04:19:BD:54:99:03:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F3ACD937382460B40201172464119A80A23C3CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26ebf15b-8b83-4ca7-9786-65e57e8877c3.roa
Signing time:             Thu 27 Nov 2025 00:00:20 +0000
ROA not before:           Thu 27 Nov 2025 00:00:20 +0000
ROA not after:            Wed 25 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.250.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3a:cd:93:73:82:46:0b:40:20:11:72:46:41:19:a8:0a:23:c3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 27 00:00:20 2025 GMT
            Not After : Feb 25 23:59:59 2026 GMT
        Subject: serialNumber=99beacda7f39942eeb30893a9d2462dd0dc93dcea3ba81f318c78228ade772a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:97:6d:4a:39:04:03:c3:cd:14:26:be:9a:83:
                    cf:88:23:65:9e:7d:63:74:21:8c:ac:2a:ad:4c:3c:
                    39:e0:72:55:89:90:91:37:29:97:d8:ec:8c:f9:d7:
                    96:5e:06:fa:6e:6b:d0:a3:ae:b3:1d:d9:ea:c3:9d:
                    7b:05:21:85:11:65:f3:2b:6b:d5:89:aa:a3:29:68:
                    b8:27:00:4a:1d:16:58:ff:f9:1e:45:27:77:08:00:
                    d1:f8:e6:d0:3d:c7:8c:d7:8c:38:eb:5f:d5:ca:33:
                    8f:be:86:be:78:a2:e0:25:c2:73:25:3e:6f:a4:37:
                    6e:90:45:0c:d3:fb:db:87:17:25:9a:a3:a5:01:8c:
                    26:10:54:e8:f2:cc:b2:76:1f:98:fb:3a:75:79:88:
                    c4:38:54:33:e4:bf:93:4a:02:91:34:d6:52:ab:87:
                    60:7b:fe:3b:12:55:c2:d3:af:e1:7f:61:df:9d:d5:
                    87:aa:a4:61:b5:11:f5:f9:fe:c0:fc:dd:2b:aa:32:
                    d5:94:5a:73:a0:d0:ac:e8:64:cc:df:ee:71:61:8c:
                    89:ec:43:97:56:6b:8e:4d:3a:f5:20:50:9e:00:79:
                    b6:d6:10:5a:17:93:27:c0:ed:53:27:25:4c:eb:91:
                    20:0c:d1:6f:dc:f9:68:4d:39:fa:e0:5e:58:58:14:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:12:2D:30:CB:00:4D:C8:20:C3:B0:75:56:04:19:BD:54:99:03:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26ebf15b-8b83-4ca7-9786-65e57e8877c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:92:3c:8f:dc:a6:4c:84:ca:f5:b6:18:e6:7a:b5:5b:aa:51:
         dc:b1:ef:e2:02:0c:2a:a5:fb:87:16:09:8a:f9:5d:27:5c:f4:
         5a:1d:42:f4:34:8c:fd:45:ab:54:84:b8:7d:cb:d0:76:35:62:
         d0:31:d2:5e:e3:e1:35:f8:1a:d4:9e:49:90:d9:93:f1:f4:86:
         81:91:df:bb:9b:2c:3d:5b:6f:37:20:2e:b1:87:10:75:46:3d:
         c2:2e:b4:5e:f1:79:17:c4:6a:82:c6:dc:19:80:fb:46:8a:c4:
         77:29:80:10:d9:6d:86:ed:68:83:a2:ee:54:92:13:a9:3d:e9:
         d7:df:86:0f:1c:d5:29:cf:e2:cf:ec:83:fe:98:d5:fe:50:0b:
         88:63:46:fd:af:10:2d:1a:de:34:2d:4d:12:6a:a8:a2:58:07:
         0b:44:32:26:ab:ca:bb:02:67:af:cd:dc:46:1d:fc:39:a4:3e:
         d5:fd:4b:c3:a2:40:89:74:04:c9:76:4f:e8:16:8c:0e:c8:e8:
         04:4e:78:47:21:44:69:17:27:75:04:0f:a0:b7:7c:c6:04:2f:
         c6:bc:bf:cc:05:88:ef:92:f7:a6:01:d9:a2:9d:ed:de:c7:81:
         79:bd:60:78:fe:26:d6:2a:e1:26:b9:d8:a8:a4:34:23:76:08:
         48:1a:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:44:52 2025 by rpki-client