This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3075fd28-3221-468a-9dea-be5b1b4612d0.roa
File:                     3075fd28-3221-468a-9dea-be5b1b4612d0.roa (raw, json)
Hash identifier:          M5GX9pczI+PgzyWYHWYIMKXVPgj/UO0xQUTzspqFEs0=
Subject key identifier:   06:C1:A4:6B:E1:F5:48:59:AB:7B:D3:C1:AC:B3:12:4C:F1:31:F6:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0EF5A92D6E1EAECF510692A756B2F123B6A84240
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3075fd28-3221-468a-9dea-be5b1b4612d0.roa
Signing time:             Tue 25 Nov 2025 00:41:24 +0000
ROA not before:           Tue 25 Nov 2025 00:41:24 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        63.246.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f5:a9:2d:6e:1e:ae:cf:51:06:92:a7:56:b2:f1:23:b6:a8:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:41:24 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=4340001a4507785ba693b66d09a7311c5b1c59d048587d02a34f1c4733382a37, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:5c:47:b7:69:45:9a:cd:94:f5:12:31:dd:
                    eb:6f:3d:67:0d:41:c3:a0:92:23:ec:61:1e:86:2b:
                    f6:62:d6:fd:74:d9:15:75:9e:de:17:86:ee:c1:c5:
                    3e:73:36:80:25:8f:05:c4:b3:43:3b:f7:1f:81:e9:
                    8c:45:11:df:12:fb:58:27:d5:17:1e:ee:42:17:c2:
                    96:38:91:d7:99:df:1f:a8:50:64:d5:4b:37:af:b5:
                    60:61:6b:a1:23:44:7d:b0:e4:82:45:0c:63:e7:57:
                    97:ff:67:a7:be:c4:d0:43:76:54:12:28:e1:62:1b:
                    cd:6b:a6:cb:2d:7c:97:3b:b9:d3:fc:f8:03:e9:f0:
                    da:9d:d6:fe:c7:28:ec:63:b5:c1:8b:d3:c7:38:f2:
                    91:ab:0a:71:7a:4d:f1:f4:ce:78:07:d5:12:b8:7c:
                    cb:7a:0a:cb:bb:a6:f5:90:cb:3b:f2:15:d8:87:71:
                    52:6e:1e:71:bf:d3:fd:07:70:6b:8b:5a:fe:4b:a4:
                    a0:64:2a:37:22:29:83:dd:ac:cd:dc:e6:dd:99:11:
                    b9:12:97:94:d0:8b:16:b4:4c:50:98:a9:00:cb:11:
                    fd:35:1c:b7:e9:03:2c:b9:61:71:67:bb:fb:04:d0:
                    e4:a2:e0:28:90:7d:08:07:a6:57:d2:7c:d8:f1:5a:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:A4:6B:E1:F5:48:59:AB:7B:D3:C1:AC:B3:12:4C:F1:31:F6:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3075fd28-3221-468a-9dea-be5b1b4612d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:8b:14:a7:8a:40:84:4d:d8:ad:c4:8f:5d:33:f4:b3:fe:17:
         86:30:e3:f4:0e:cd:98:57:8c:52:dc:ed:49:16:80:3d:1e:77:
         48:0c:b8:ea:21:10:76:0f:1d:89:ec:88:65:1a:cf:9d:b3:7e:
         c9:87:1e:ba:ae:45:19:e9:93:35:ab:30:20:73:1c:36:d7:4f:
         8a:66:fd:ee:1b:43:29:82:2c:05:14:f1:f9:c2:ca:9c:0c:0a:
         ec:98:c9:0c:fd:54:66:a7:ee:02:74:b7:c9:89:37:8e:cc:fe:
         04:3f:af:25:66:57:ad:e3:d9:fa:85:a8:71:33:39:ad:8f:d5:
         2b:cf:50:a6:0e:2f:30:8b:40:7a:1b:e1:dc:ed:b4:2c:dc:68:
         a2:e7:e8:97:1d:f6:7a:71:24:a0:e5:31:f6:7e:ae:93:08:f2:
         eb:6a:f7:2e:76:8f:51:42:e5:63:8e:6e:d7:1c:b6:45:30:be:
         a2:dd:b2:d3:94:42:d2:9f:6d:75:3b:31:8a:58:93:07:54:33:
         42:90:f5:77:1c:c8:7b:26:ea:88:62:ae:5d:55:2d:32:5f:f7:
         ff:f8:37:5c:25:4f:ed:81:56:bd:d3:57:9e:d5:46:cf:e7:1f:
         4f:cd:b7:e5:8d:4f:eb:72:8f:a8:db:52:ef:a6:f8:d7:75:35:
         aa:80:c8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:19:47 2025 by rpki-client