This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a75c6b-2d41-4eb6-8c7e-89ebd3314427.roa
File:                     35a75c6b-2d41-4eb6-8c7e-89ebd3314427.roa (raw, json)
Hash identifier:          h8fQ70vmLFMoq20ghPNE9fRctcGhqBFFGxG8LQRGaBE=
Subject key identifier:   D8:41:31:62:94:AF:40:78:5C:D1:7F:4A:84:DE:FE:97:3A:ED:C4:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D2C11F2A9AB32172E8CD483ABF27F30206BE2EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a75c6b-2d41-4eb6-8c7e-89ebd3314427.roa
Signing time:             Tue 25 Nov 2025 01:11:16 +0000
ROA not before:           Tue 25 Nov 2025 01:11:16 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2c:11:f2:a9:ab:32:17:2e:8c:d4:83:ab:f2:7f:30:20:6b:e2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 01:11:16 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=e39b340839467f3021375e3b2fe34af47d0f4a7301e60ad1459b4bc14ca70b28, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:cb:a0:46:03:22:71:46:d7:6c:94:d4:af:
                    25:14:32:ce:cf:97:74:eb:5a:8a:79:7a:0a:81:26:
                    d4:57:0b:d7:71:c8:8f:67:2c:4e:d9:a0:c2:95:61:
                    09:ba:df:f3:4b:9d:e7:8a:6b:e5:57:67:2f:44:06:
                    e3:f6:a2:3c:20:aa:a5:68:12:9d:2d:17:68:03:d9:
                    c3:52:37:4b:16:2c:ec:e6:24:f5:b5:d9:ca:af:c8:
                    a8:ea:a5:1a:a5:d1:01:d0:ed:6d:8d:b9:55:eb:07:
                    de:f3:45:83:41:72:17:ed:b2:1c:c6:e7:5f:6a:39:
                    54:4b:43:2b:83:c9:5a:d5:1d:c7:81:dc:7d:73:3f:
                    85:c6:df:e3:bd:df:03:29:9a:73:c1:22:a0:81:a3:
                    85:04:53:82:06:06:06:87:c7:bd:e8:31:3e:da:c5:
                    8e:d8:b8:d5:ca:bc:fb:3d:65:49:e3:f7:de:ae:7a:
                    a9:f7:a8:df:02:38:8e:36:9f:8f:b5:0f:7b:02:77:
                    75:b4:93:0d:96:08:6a:67:23:c1:c1:3f:c5:86:b7:
                    2e:6e:62:73:b2:39:68:28:0b:63:24:a9:67:e7:85:
                    06:96:11:01:68:8e:30:f9:95:29:c3:67:9b:0c:1b:
                    6f:13:9f:e9:69:2f:45:f4:61:67:01:dd:2f:d0:0a:
                    c5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:41:31:62:94:AF:40:78:5C:D1:7F:4A:84:DE:FE:97:3A:ED:C4:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a75c6b-2d41-4eb6-8c7e-89ebd3314427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:53:fd:94:e8:c0:5d:c6:90:c1:aa:93:1f:82:47:3e:fd:cc:
         5e:94:14:be:31:96:84:07:8b:f4:e2:a8:a4:39:49:ee:33:bd:
         00:93:1d:79:b5:37:ab:15:ea:4f:da:1c:13:6f:bd:ee:b5:27:
         29:1b:05:dc:95:96:20:4b:22:83:22:63:85:b9:6a:cc:96:dd:
         b1:ca:b8:00:20:62:7a:96:2c:83:ff:e3:f1:c4:73:b9:e0:57:
         35:9f:e4:2b:27:b0:47:e9:cf:98:ac:f9:3f:ec:3c:1b:54:13:
         2e:d3:e3:50:2f:44:43:15:31:88:6b:56:97:4c:8b:b1:b1:6c:
         91:09:bc:76:1c:4a:a6:1d:b9:f6:81:a0:be:08:4c:b6:47:32:
         b4:a7:fe:a7:35:86:d5:f6:f6:29:7f:4b:05:97:f5:fe:19:ed:
         ba:3a:a9:2a:aa:7e:0c:c1:93:f5:b4:48:1a:8e:b5:a1:27:de:
         81:4f:9b:61:66:7e:56:68:f8:59:04:f8:9e:e3:2d:da:f4:6b:
         af:36:c6:75:75:dc:cf:f6:5e:b7:19:de:b4:0e:4d:8c:1b:8b:
         e1:e0:dd:cd:a7:a1:90:24:67:fc:97:0f:8d:76:21:eb:ff:c1:
         4b:ed:e4:76:15:a4:6d:b2:0b:59:8b:a8:f5:7e:ed:43:ee:28:
         8f:b1:a1:7c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULSwR8qmrMhcujNSDq/J/MCBr4u8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDExMTE2WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMzliMzQwODM5NDY3ZjMwMjEzNzVlM2IyZmUzNGFmNDdk
MGY0YTczMDFlNjBhZDE0NTliNGJjMTRjYTcwYjI4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCjMugRgMicUbXbJTUryUUMs7Pl3TrWop5egqBJtRXC9dx
yI9nLE7ZoMKVYQm63/NLneeKa+VXZy9EBuP2ojwgqqVoEp0tF2gD2cNSN0sWLOzm
JPW12cqvyKjqpRql0QHQ7W2NuVXrB97zRYNBchftshzG519qOVRLQyuDyVrVHceB
3H1zP4XG3+O93wMpmnPBIqCBo4UEU4IGBgaHx73oMT7axY7YuNXKvPs9ZUnj996u
eqn3qN8COI42n4+1D3sCd3W0kw2WCGpnI8HBP8WGty5uYnOyOWgoC2MkqWfnhQaW
EQFojjD5lSnDZ5sMG28Tn+lpL0X0YWcB3S/QCsVTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2EExYpSvQHhc0X9KhN7+lzrtxAcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM1YTc1YzZiLTJkNDEtNGViNi04YzdlLTg5ZWJkMzMxNDQyNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARM3zAwDQYJKoZIhvcNAQELBQADggEBAGhT/ZTowF3GkMGqkx+CRz79zF6U
FL4xloQHi/TiqKQ5Se4zvQCTHXm1N6sV6k/aHBNvve61JykbBdyVliBLIoMiY4W5
asyW3bHKuAAgYnqWLIP/4/HEc7ngVzWf5CsnsEfpz5is+T/sPBtUEy7T41AvREMV
MYhrVpdMi7GxbJEJvHYcSqYdufaBoL4ITLZHMrSn/qc1htX29il/SwWX9f4Z7bo6
qSqqfgzBk/W0SBqOtaEn3oFPm2FmflZo+FkE+J7jLdr0a682xnV13M/2XrcZ3rQO
TYwbi+Hg3c2noZAkZ/yXD412Iev/wUvt5HYVpG2yC1mLqPV+7UPuKI+xoXw=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:14:47 2025 by rpki-client