This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e14a008-0f75-440e-a735-6754c084b1e3.roa
File:                     3e14a008-0f75-440e-a735-6754c084b1e3.roa (raw, json)
Hash identifier:          FIUzPTJFTtk3NwPg9XmpUcchiqz5kZfJZeTlE4J455E=
Subject key identifier:   04:A4:E9:A2:6D:53:B4:F4:6B:ED:74:0D:46:77:1A:BA:B4:AF:30:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39A1F144BF51CDA156C17AA225305D6365100793
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e14a008-0f75-440e-a735-6754c084b1e3.roa
Signing time:             Sun 30 Nov 2025 00:31:45 +0000
ROA not before:           Sun 30 Nov 2025 00:31:45 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        207.21.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a1:f1:44:bf:51:cd:a1:56:c1:7a:a2:25:30:5d:63:65:10:07:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:31:45 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=c9bc06c200a253d80503fc8fae48a286d38a66f4cf6dc669a61168c9a92589c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:bd:e2:8a:82:de:29:d7:57:8e:ac:50:d5:
                    6c:56:e4:a8:13:de:1d:a5:28:c3:3e:e9:08:e0:76:
                    36:71:89:c5:96:91:3d:fc:1a:90:93:b6:6f:2b:04:
                    cd:75:3b:90:69:ce:9d:90:96:0c:4e:c9:75:43:ac:
                    5e:2d:cf:c4:83:3d:ce:16:9d:fa:e5:4a:5f:dc:50:
                    ac:92:00:a1:15:18:c3:c4:9f:80:aa:c7:2c:9a:50:
                    76:fe:bb:5c:ec:17:b5:fb:00:57:8e:ae:5a:69:ec:
                    81:60:83:db:a4:d8:97:3f:0b:b8:d5:45:9f:fd:d3:
                    57:3b:6b:9c:f4:00:24:e6:5b:fe:01:bd:3a:b9:4e:
                    86:38:19:7d:be:f2:f3:05:82:de:71:84:7f:d8:0d:
                    10:20:1c:6a:88:6d:0b:e7:1f:1d:e8:fe:22:46:79:
                    55:9f:a9:3f:1a:81:1a:d2:e9:77:5b:e6:38:f5:c0:
                    b2:0d:86:e3:66:e3:8b:d4:15:7c:bb:9a:57:1d:28:
                    65:08:45:30:16:d1:67:5a:e8:8d:04:9c:97:ed:8c:
                    72:9f:20:6e:02:4e:3c:ae:87:21:00:d6:7a:25:f9:
                    1b:92:70:74:b4:7f:af:43:54:62:b4:4e:c2:82:c9:
                    00:1e:46:be:a4:3a:44:96:c8:b1:c4:0b:5e:ca:34:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A4:E9:A2:6D:53:B4:F4:6B:ED:74:0D:46:77:1A:BA:B4:AF:30:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e14a008-0f75-440e-a735-6754c084b1e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.21.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:1b:20:3c:5b:13:81:95:b9:3a:18:39:dd:39:53:bd:bf:
         c8:e2:1e:a8:8f:05:10:fd:fd:99:a5:54:aa:d3:c6:a0:c5:fd:
         6f:f2:7c:5d:de:35:90:71:6c:ce:de:b4:d2:61:be:d0:77:4b:
         59:3a:e9:1a:01:15:ae:57:ae:1c:17:c9:e9:cc:7b:98:d5:f6:
         ec:92:c3:48:55:6f:91:4c:5c:11:2f:21:9e:18:57:ef:fa:70:
         bc:01:69:51:2f:0d:11:d3:0c:59:af:ce:3f:10:aa:e7:db:30:
         70:b5:1b:53:d2:36:8e:30:5a:b5:ee:84:c9:29:cb:ba:ad:c2:
         a7:fa:19:38:0e:ef:72:e6:d1:0f:77:d9:81:df:a6:de:d9:e5:
         33:8e:56:cb:59:93:10:ca:9d:17:f6:0c:6d:46:58:31:91:b7:
         80:de:e1:00:07:73:72:42:10:09:f9:47:24:66:11:54:15:bf:
         26:1f:53:0c:a1:8e:e8:a9:fb:fb:6f:e3:bd:c3:1e:f3:4f:e2:
         34:ec:87:81:b3:27:64:cc:1e:b7:70:72:22:ab:ca:ce:d4:87:
         ab:e3:c7:c4:f9:bc:b4:26:56:cc:af:6c:d6:ac:c1:28:85:e9:
         22:19:3f:36:58:5b:4e:76:26:91:50:96:4d:40:93:54:ba:6e:
         6d:bb:ff:5a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOaHxRL9RzaFWwXqiJTBdY2UQB5MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTMwMDAzMTQ1WhcNMjYwMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOWJjMDZjMjAwYTI1M2Q4MDUwM2ZjOGZhZTQ4YTI4NmQz
OGE2NmY0Y2Y2ZGM2NjlhNjExNjhjOWE5MjU4OWMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdqr3iioLeKddXjqxQ1WxW5KgT3h2lKMM+6QjgdjZxicWW
kT38GpCTtm8rBM11O5Bpzp2QlgxOyXVDrF4tz8SDPc4WnfrlSl/cUKySAKEVGMPE
n4CqxyyaUHb+u1zsF7X7AFeOrlpp7IFgg9uk2Jc/C7jVRZ/901c7a5z0ACTmW/4B
vTq5ToY4GX2+8vMFgt5xhH/YDRAgHGqIbQvnHx3o/iJGeVWfqT8agRrS6Xdb5jj1
wLINhuNm44vUFXy7mlcdKGUIRTAW0Wda6I0EnJftjHKfIG4CTjyuhyEA1nol+RuS
cHS0f69DVGK0TsKCyQAeRr6kOkSWyLHEC17KNMaLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBKTpom1TtPRr7XQNRncaurSvMMowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNlMTRhMDA4LTBmNzUtNDQwZS1hNzM1LTY3NTRjMDg0YjFlMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALPFdgwDQYJKoZIhvcNAQELBQADggEBAJKzGyA8WxOBlbk6GDndOVO9v8ji
HqiPBRD9/ZmlVKrTxqDF/W/yfF3eNZBxbM7etNJhvtB3S1k66RoBFa5XrhwXyenM
e5jV9uySw0hVb5FMXBEvIZ4YV+/6cLwBaVEvDRHTDFmvzj8QqufbMHC1G1PSNo4w
WrXuhMkpy7qtwqf6GTgO73Lm0Q932YHfpt7Z5TOOVstZkxDKnRf2DG1GWDGRt4De
4QAHc3JCEAn5RyRmEVQVvyYfUwyhjuip+/tv473DHvNP4jTsh4GzJ2TMHrdwciKr
ys7Uh6vjx8T5vLQmVsyvbNaswSiF6SIZPzZYW052JpFQlk1Ak1S6bm27/1o=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:18:22 2025 by rpki-client