This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c69a2e-633e-4ef2-82c1-548d8d35456f.roa
File:                     33c69a2e-633e-4ef2-82c1-548d8d35456f.roa (raw, json)
Hash identifier:          FkqEWx+baqu7mHklOhCJuom9dgNlsekq2xr+F7JYRFM=
Subject key identifier:   22:4A:21:62:C7:21:5E:5F:B6:EA:9B:AB:4F:8A:33:E4:06:72:3A:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55135D750CD76826618D75788CA505219C566A00
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c69a2e-633e-4ef2-82c1-548d8d35456f.roa
Signing time:             Sun 30 Nov 2025 00:30:13 +0000
ROA not before:           Sun 30 Nov 2025 00:30:13 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        203.110.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:13:5d:75:0c:d7:68:26:61:8d:75:78:8c:a5:05:21:9c:56:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:30:13 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=8863c5b6f7209fb35af206d840e8772237d46644174c69264d9020035418972a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:34:9d:94:3b:64:6b:8a:52:2c:77:5c:49:da:
                    86:c7:c6:2b:cc:72:c2:e0:a4:40:99:a2:d1:b3:7b:
                    fc:a3:64:6c:aa:12:31:73:dc:9b:f2:a4:eb:32:72:
                    e8:e1:24:b4:92:8b:53:48:8f:84:8d:18:95:2d:83:
                    8c:5d:ae:a7:f0:3d:56:8a:b9:ba:da:48:3d:07:17:
                    6b:d0:73:84:76:fb:f3:74:34:ff:09:76:01:e8:c6:
                    69:89:18:4d:22:84:e4:31:91:24:3b:94:fa:94:50:
                    74:28:0e:61:fe:24:92:59:6c:e5:77:fd:39:d6:f1:
                    6e:e6:ca:56:f8:2a:38:bc:93:71:f4:ff:e5:57:4c:
                    4c:dd:36:e4:59:26:cc:92:24:7e:db:32:dc:31:59:
                    8e:bd:e7:33:3b:14:f7:15:2c:6b:66:c0:63:1d:c4:
                    01:b0:fa:ad:0f:18:58:77:95:01:4e:22:ee:26:14:
                    6a:5c:e3:77:2b:15:d2:07:d2:9c:e4:69:10:3e:b1:
                    78:42:52:e7:fa:0b:6e:07:a0:c8:d6:c2:9c:01:1e:
                    35:50:ba:83:9e:7d:0e:af:3d:0d:65:76:9d:bb:18:
                    69:ba:d6:c3:37:cd:94:91:2e:a2:8d:95:b9:07:0d:
                    81:47:93:55:5c:dd:24:cb:34:15:68:ec:7f:54:a3:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4A:21:62:C7:21:5E:5F:B6:EA:9B:AB:4F:8A:33:E4:06:72:3A:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c69a2e-633e-4ef2-82c1-548d8d35456f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:6d:46:2f:cc:dd:db:c6:d0:a6:42:ad:40:ab:f2:8b:0a:b7:
         07:34:53:c9:b7:f4:a9:70:80:a6:86:e1:05:83:a4:de:87:97:
         42:91:07:b9:6f:53:f0:f8:af:4b:31:e6:23:c6:15:66:a9:ac:
         d0:16:d5:7c:8d:19:98:b9:65:10:5e:01:fa:c0:e3:dc:51:1a:
         8d:40:d3:4b:9d:05:9d:6f:eb:0b:3e:04:89:fc:56:9e:2e:88:
         26:09:c0:03:c0:db:03:fd:b0:46:41:84:00:51:05:90:8c:96:
         e7:bc:e6:32:c2:45:2d:8b:a6:9f:ef:30:1b:70:f6:03:3f:27:
         4e:3b:3c:aa:fa:e3:13:2f:e6:65:2d:f5:be:25:01:38:d1:71:
         d5:da:17:f0:36:ce:1e:83:23:b6:13:8b:80:9e:75:33:cf:8b:
         6b:27:8c:3e:37:1d:9a:87:cf:c6:0f:e4:2f:94:51:3c:3f:b1:
         27:37:c0:eb:f1:e5:4e:f7:0b:63:98:3f:11:47:91:e3:06:55:
         7b:eb:ca:9a:bd:82:c0:73:a5:85:23:dd:81:82:86:6f:b8:c9:
         a5:e0:85:61:6d:48:7f:df:3c:d2:16:39:59:cc:30:ce:2b:88:
         7b:97:5d:b9:d2:fb:6d:89:03:2a:9f:1d:03:36:47:fe:da:7e:
         86:dc:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:23:18 2025 by rpki-client