This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2efb9bd0-475f-417d-8e72-8a50428e9da8.roa
File:                     2efb9bd0-475f-417d-8e72-8a50428e9da8.roa (raw, json)
Hash identifier:          TcVVvDkMA4bEWz7nrBgEp/eyYxpt6L7RpVnLI7ohcm4=
Subject key identifier:   33:0B:CD:20:AE:4D:3A:E2:A9:10:4A:CE:3B:C4:A1:02:16:53:1A:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1781DB840483D7E7D8DBF2F8983804A39651B923
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2efb9bd0-475f-417d-8e72-8a50428e9da8.roa
Signing time:             Sat 06 Dec 2025 00:50:50 +0000
ROA not before:           Sat 06 Dec 2025 00:50:50 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        1.179.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:81:db:84:04:83:d7:e7:d8:db:f2:f8:98:38:04:a3:96:51:b9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 00:50:50 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=5f6ca99b3f0678c2e91b91a325ca3b6ead50d4cf4368b504001c0b9d898b12b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:65:09:53:6a:88:e7:b0:c5:f4:93:6f:b7:
                    73:5f:a9:77:6f:1d:23:a9:6d:88:ed:18:df:d9:e5:
                    43:40:1c:f6:21:fc:a6:7f:97:54:fb:bc:0e:04:33:
                    83:f1:07:52:5e:44:4c:97:cf:eb:64:49:60:c8:f9:
                    db:72:28:86:ab:e3:b0:16:ce:da:59:44:bc:58:37:
                    ac:74:49:98:1e:da:5f:24:0e:ba:c8:a2:88:12:5d:
                    00:71:75:88:f8:d8:e9:b1:08:75:f2:7c:74:61:0f:
                    8e:c9:72:6c:f2:76:b7:bd:93:d3:42:c1:43:ad:fe:
                    43:35:93:55:59:04:d6:cb:86:c8:7b:a9:44:46:5d:
                    f7:84:b0:f5:30:de:4d:fe:e8:8b:8e:7c:91:1b:73:
                    15:df:dd:e0:a0:03:bd:2e:4c:56:06:05:78:a4:ea:
                    c9:33:5d:1d:f6:21:12:e3:b0:2d:1a:d1:0a:93:2a:
                    5d:6c:20:0e:0c:bd:bf:53:e1:85:20:ee:9b:fe:e7:
                    c5:53:52:91:e9:61:d3:76:14:f1:3d:75:5f:b4:e1:
                    b7:66:6b:e2:c9:6e:9c:05:6b:b1:a7:02:92:cb:a4:
                    05:9d:a3:82:1c:82:2b:22:ba:b3:65:a4:24:5e:53:
                    49:21:67:5f:6a:73:45:82:37:20:3e:38:00:33:5a:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0B:CD:20:AE:4D:3A:E2:A9:10:4A:CE:3B:C4:A1:02:16:53:1A:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2efb9bd0-475f-417d-8e72-8a50428e9da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.179.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:d1:21:a7:52:8f:fc:7a:6f:cd:c1:85:b1:a8:f8:92:6a:ae:
         88:24:07:89:d4:16:01:9c:5b:51:c1:72:76:51:97:c4:6e:c6:
         d4:ba:1c:28:ed:90:83:ee:4d:ee:1b:fb:89:40:c6:24:cf:db:
         c8:6e:2a:95:05:88:a2:8c:95:57:f5:a3:69:d3:08:0f:03:41:
         3c:a9:b2:35:27:72:50:63:12:c9:40:38:c4:0f:15:24:41:1d:
         ae:7d:b0:9a:ef:5e:e6:7a:31:91:1c:9a:28:a3:43:ab:02:7b:
         d8:4f:3e:9d:51:63:26:26:cf:1a:36:5a:06:35:a5:29:a5:f7:
         7d:f2:5e:8c:2d:fc:81:86:14:b3:fc:e7:de:3c:8f:ad:40:df:
         67:b7:4e:b5:5f:2d:cd:ab:63:88:9a:12:72:41:37:38:6c:50:
         05:24:27:f3:bc:35:f1:9f:ea:80:68:a0:7b:60:8e:0b:d7:bf:
         85:8b:8a:c2:44:e0:f2:b8:35:f1:3c:56:23:20:84:6d:21:cf:
         46:98:66:f6:ba:8f:b4:bb:ac:97:0e:b6:ad:21:dd:c9:ee:e3:
         05:f0:f5:80:c1:8c:19:c4:96:cb:1b:88:fb:5d:ec:b1:f6:a6:
         dd:7d:ae:fd:91:83:b4:ec:c6:f5:94:b6:fb:68:4d:c8:60:ea:
         a8:97:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:14:32 2025 by rpki-client