This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cdadfcf-adc0-476a-9113-37fbab9c7479.roa
File:                     3cdadfcf-adc0-476a-9113-37fbab9c7479.roa (raw, json)
Hash identifier:          I9LWFqacZOp4g9Ur2R/08DhQt3UVCepmhRg1DYD3IGI=
Subject key identifier:   AB:87:75:9D:0F:BA:48:AB:82:AA:0D:4C:5F:19:09:92:38:00:6C:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       318B8E116D9ED312C860F9897929D1227CB5A8B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cdadfcf-adc0-476a-9113-37fbab9c7479.roa
Signing time:             Tue 02 Dec 2025 00:31:01 +0000
ROA not before:           Tue 02 Dec 2025 00:31:01 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8b:8e:11:6d:9e:d3:12:c8:60:f9:89:79:29:d1:22:7c:b5:a8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  2 00:31:01 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=6827d50b8372e509492d3e90647098dbf2cb21bafc3a11a72e442ce2a9360d6c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f6:ef:34:b3:61:94:81:5b:38:da:12:d7:1a:
                    1a:2f:8c:2d:75:f7:19:54:45:15:9c:22:e6:7d:48:
                    0e:10:da:5c:8c:0d:b9:16:30:57:25:26:3f:d4:29:
                    b8:d8:14:53:74:bb:3c:6e:1d:ed:66:e2:3f:7d:f5:
                    68:0e:5a:e1:60:65:ba:19:31:f3:ac:35:82:47:70:
                    49:d1:5f:ed:03:79:36:ce:b3:02:8b:0e:65:9c:7f:
                    c2:ed:0e:bf:90:79:56:e3:c2:3c:aa:de:38:1c:85:
                    36:07:15:75:d6:ef:d6:30:c5:b7:6d:9e:3a:b7:00:
                    6b:fd:d2:60:79:89:c8:a0:d4:0a:8d:69:3d:47:a5:
                    a3:a9:6d:41:0e:af:04:65:a0:48:b3:e7:28:ca:f3:
                    42:e0:e6:0f:c1:78:8d:54:8e:30:bf:93:fa:c7:6c:
                    e3:2a:ab:13:72:9f:7d:ee:3f:c2:08:f5:57:f7:94:
                    00:97:fe:53:fc:0d:af:f5:e3:d1:ad:4e:74:94:6c:
                    6c:39:03:4c:3e:38:30:bc:2e:df:e0:84:ac:82:9e:
                    c2:65:27:f4:a2:5e:7e:6c:d5:84:ba:fc:e6:eb:d2:
                    0c:4a:3e:b9:b6:97:f3:be:c7:b3:86:3e:a3:e9:fb:
                    03:12:44:f4:99:fe:37:71:f8:ed:cf:8a:89:0b:f7:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:87:75:9D:0F:BA:48:AB:82:AA:0D:4C:5F:19:09:92:38:00:6C:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cdadfcf-adc0-476a-9113-37fbab9c7479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:85:51:21:9c:80:dd:77:9a:50:1c:e1:75:52:c2:12:37:79:
         91:5d:ca:82:99:16:20:98:bb:15:90:57:f2:7d:54:7f:6d:46:
         e4:92:be:c7:57:4a:12:21:f0:cc:cb:5e:b3:ac:c3:d5:00:d5:
         94:2d:96:a7:84:94:84:44:c6:cf:36:b7:ed:1b:ae:1a:44:61:
         3d:1c:d7:10:68:23:8b:ff:d6:7d:4e:dd:75:57:57:a4:4d:63:
         73:6a:90:b3:42:b6:82:e1:d6:51:8c:fc:3d:b7:20:b0:8d:e2:
         93:d8:4a:10:c3:c2:14:f5:b7:92:ca:6f:5f:3f:41:39:ee:47:
         9a:65:f6:a0:d9:c1:fb:bb:44:7e:5a:fb:fd:f7:d4:16:e0:09:
         8e:04:92:25:30:30:a8:20:4e:6a:19:19:4c:90:42:7a:69:ba:
         77:c5:5a:41:86:23:f5:6c:fe:76:bd:67:b1:48:72:66:61:ad:
         1f:46:52:34:56:d3:0f:9f:31:c1:d7:7d:f8:6c:24:06:9f:02:
         d6:7b:a8:77:0a:0b:30:0b:dc:30:dd:6e:fc:88:58:26:e6:e8:
         98:77:2e:e2:77:27:c2:8a:59:ca:27:80:6d:4f:76:e6:24:e0:
         f7:de:60:5e:e8:45:61:30:8e:40:6e:92:04:f9:5b:19:94:86:
         cf:36:ee:e5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMYuOEW2e0xLIYPmJeSnRIny1qLcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAyMDAzMTAxWhcNMjYwMzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ODI3ZDUwYjgzNzJlNTA5NDkyZDNlOTA2NDcwOThkYmYy
Y2IyMWJhZmMzYTExYTcyZTQ0MmNlMmE5MzYwZDZjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCH9u80s2GUgVs42hLXGhovjC119xlURRWcIuZ9SA4Q2lyM
DbkWMFclJj/UKbjYFFN0uzxuHe1m4j999WgOWuFgZboZMfOsNYJHcEnRX+0DeTbO
swKLDmWcf8LtDr+QeVbjwjyq3jgchTYHFXXW79Ywxbdtnjq3AGv90mB5icig1AqN
aT1HpaOpbUEOrwRloEiz5yjK80Lg5g/BeI1UjjC/k/rHbOMqqxNyn33uP8II9Vf3
lACX/lP8Da/149GtTnSUbGw5A0w+ODC8Lt/ghKyCnsJlJ/SiXn5s1YS6/Obr0gxK
Prm2l/O+x7OGPqPp+wMSRPSZ/jdx+O3PiokL96+/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUq4d1nQ+6SKuCqg1MXxkJkjgAbD8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNjZGFkZmNmLWFkYzAtNDc2YS05MTEzLTM3ZmJhYjljNzQ3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUYbiAwDQYJKoZIhvcNAQELBQADggEBALyFUSGcgN13mlAc4XVSwhI3eZFd
yoKZFiCYuxWQV/J9VH9tRuSSvsdXShIh8MzLXrOsw9UA1ZQtlqeElIRExs82t+0b
rhpEYT0c1xBoI4v/1n1O3XVXV6RNY3NqkLNCtoLh1lGM/D23ILCN4pPYShDDwhT1
t5LKb18/QTnuR5pl9qDZwfu7RH5a+/331BbgCY4EkiUwMKggTmoZGUyQQnppunfF
WkGGI/Vs/na9Z7FIcmZhrR9GUjRW0w+fMcHXffhsJAafAtZ7qHcKCzAL3DDdbvyI
WCbm6Jh3LuJ3J8KKWcongG1PduYk4PfeYF7oRWEwjkBukgT5WxmUhs827uU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:48:27 2025 by rpki-client