This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34314e31-c1a5-43fa-8d66-5753153e11e4.roa
File:                     34314e31-c1a5-43fa-8d66-5753153e11e4.roa (raw, json)
Hash identifier:          41aIIoMX51g884Rd7i7KE1wFyO4G/rUlWG6osQNlGZk=
Subject key identifier:   C3:15:3B:3F:21:BD:85:D1:A1:E4:F8:D4:4C:17:29:BC:47:2E:FB:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27FF5C9460746B92A8CDDA5BD902AD9850E9B42C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34314e31-c1a5-43fa-8d66-5753153e11e4.roa
Signing time:             Thu 04 Dec 2025 00:40:42 +0000
ROA not before:           Thu 04 Dec 2025 00:40:42 +0000
ROA not after:            Wed 04 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ff:5c:94:60:74:6b:92:a8:cd:da:5b:d9:02:ad:98:50:e9:b4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  4 00:40:42 2025 GMT
            Not After : Mar  4 23:59:59 2026 GMT
        Subject: serialNumber=7e7ac6a2ffc72ea396d8bf4d24fc0e5be342fbf4e73789a2ed7f3340d0e6c67f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:de:0b:a7:3a:f4:eb:bc:48:5c:91:55:6a:
                    d0:c0:5e:60:59:d2:eb:20:8e:83:c8:b0:37:fb:bf:
                    5f:57:cb:71:35:45:48:8f:78:4e:06:63:0d:4e:fb:
                    69:7e:58:94:a2:77:14:cf:5f:1e:3d:43:c2:41:bd:
                    fe:b2:a9:b0:28:e5:db:e0:f9:66:b2:83:49:c1:d5:
                    c1:51:63:aa:2a:c5:43:cb:76:8b:f4:a7:32:ad:01:
                    26:98:a6:4a:95:61:b4:7a:37:73:6b:ad:83:02:12:
                    14:3f:47:cc:a8:10:b5:f7:90:22:80:ca:40:39:a0:
                    ad:c2:15:1d:47:00:f8:e1:7a:f5:4f:d1:54:6e:2c:
                    44:bb:7e:d4:5a:ff:e2:65:1a:59:dd:91:67:61:a6:
                    35:1f:cf:7c:0d:86:03:09:19:bb:1b:ce:97:fd:f0:
                    ff:d1:24:ca:59:6c:5f:b7:5a:c3:5a:78:81:f1:d5:
                    57:72:73:4b:39:dd:c5:d0:fa:ed:df:59:fd:19:d8:
                    0d:5a:60:18:48:98:0e:1f:df:f2:3e:6a:a3:ef:ab:
                    52:06:4e:56:ed:87:58:52:55:ec:f0:06:03:02:05:
                    10:14:fd:6e:fd:23:80:c7:3d:5e:77:fb:f8:ce:1a:
                    92:fa:0a:4f:3d:9b:51:23:5a:6e:b2:0f:19:7d:ce:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:15:3B:3F:21:BD:85:D1:A1:E4:F8:D4:4C:17:29:BC:47:2E:FB:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34314e31-c1a5-43fa-8d66-5753153e11e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:9e:31:bc:f8:8e:e1:b4:d8:13:3c:0e:76:62:56:17:6e:
         8a:84:33:fe:c6:d3:bb:76:56:d1:a2:25:50:1a:96:90:48:e3:
         0a:ee:32:45:f2:19:70:e1:44:f7:4b:f2:e0:6f:9c:6d:06:b9:
         21:30:6d:e9:18:f0:51:e5:58:27:2c:17:70:73:ce:dd:72:a3:
         22:41:15:8f:40:b9:4d:b2:00:bb:16:7c:5f:7b:18:92:5a:40:
         88:2f:7f:4e:5d:e5:7b:cb:4c:69:a8:7d:a7:7b:5a:1e:85:14:
         f2:37:76:32:ca:66:1b:bd:dc:0c:2e:35:c4:56:2d:42:d2:a1:
         2e:86:9a:c0:e3:e0:61:d1:0c:c7:41:e8:c5:f3:c1:8c:08:16:
         b2:93:e6:0e:02:9f:6f:65:a6:45:5c:d3:14:17:71:11:54:64:
         2c:1f:12:75:78:8c:a7:47:08:c1:16:15:a6:e3:ab:66:7f:81:
         d2:2a:28:54:8c:f1:eb:a6:e4:17:a7:46:f6:9f:a1:4f:b9:39:
         f4:d5:25:0c:0d:63:9f:ba:48:23:a4:48:b4:2f:ec:62:0b:79:
         ce:93:f7:1d:bb:80:50:5b:18:95:f9:95:c0:5e:50:17:49:ff:
         be:bb:15:17:f6:39:13:a9:80:e3:4d:c2:49:c2:30:c9:f2:aa:
         75:9a:a8:1f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ/9clGB0a5Kozdpb2QKtmFDptCwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA0MDA0MDQyWhcNMjYwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZTdhYzZhMmZmYzcyZWEzOTZkOGJmNGQyNGZjMGU1YmUz
NDJmYmY0ZTczNzg5YTJlZDdmMzM0MGQwZTZjNjdmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1Md4Lpzr067xIXJFVatDAXmBZ0usgjoPIsDf7v19Xy3E1
RUiPeE4GYw1O+2l+WJSidxTPXx49Q8JBvf6yqbAo5dvg+Wayg0nB1cFRY6oqxUPL
dov0pzKtASaYpkqVYbR6N3NrrYMCEhQ/R8yoELX3kCKAykA5oK3CFR1HAPjhevVP
0VRuLES7ftRa/+JlGlndkWdhpjUfz3wNhgMJGbsbzpf98P/RJMpZbF+3WsNaeIHx
1Vdyc0s53cXQ+u3fWf0Z2A1aYBhImA4f3/I+aqPvq1IGTlbth1hSVezwBgMCBRAU
/W79I4DHPV53+/jOGpL6Ck89m1EjWm6yDxl9zktFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwxU7PyG9hdGh5PjUTBcpvEcu+/owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM0MzE0ZTMxLWMxYTUtNDNmYS04ZDY2LTU3NTMxNTNlMTFlNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADRXDkwDQYJKoZIhvcNAQELBQADggEBAHWcnjG8+I7htNgTPA52YlYXboqE
M/7G07t2VtGiJVAalpBI4wruMkXyGXDhRPdL8uBvnG0GuSEwbekY8FHlWCcsF3Bz
zt1yoyJBFY9AuU2yALsWfF97GJJaQIgvf05d5XvLTGmofad7Wh6FFPI3djLKZhu9
3AwuNcRWLULSoS6GmsDj4GHRDMdB6MXzwYwIFrKT5g4Cn29lpkVc0xQXcRFUZCwf
EnV4jKdHCMEWFabjq2Z/gdIqKFSM8eum5BenRvafoU+5OfTVJQwNY5+6SCOkSLQv
7GILec6T9x27gFBbGJX5lcBeUBdJ/767FRf2OROpgONNwknCMMnyqnWaqB8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:49:23 2025 by rpki-client