This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4085f065-a4ee-4426-8e45-715fae95ccc0.roa
File:                     4085f065-a4ee-4426-8e45-715fae95ccc0.roa (raw, json)
Hash identifier:          845IkJj5w7n5h+smJYbimrOZOMhZr4fAX4oysNqDIAc=
Subject key identifier:   AF:82:DF:53:40:CC:0C:7E:6D:49:5E:90:E3:E1:64:4B:AD:E8:F5:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       789DE56C371D3054844FB5836B847EA705FFFB39
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4085f065-a4ee-4426-8e45-715fae95ccc0.roa
Signing time:             Wed 03 Dec 2025 01:21:11 +0000
ROA not before:           Wed 03 Dec 2025 01:21:11 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9d:e5:6c:37:1d:30:54:84:4f:b5:83:6b:84:7e:a7:05:ff:fb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:21:11 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=727251a9b603960b0dc3c750dc895d8f255b8c416235db7c3a0ea15ac0fe42eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:e9:c7:c2:d9:a3:18:01:af:3b:f3:f0:f7:
                    8d:ea:28:e7:03:22:47:a3:3f:81:8c:d5:d5:c2:d9:
                    de:3b:10:42:5b:21:49:27:7a:f0:8d:78:38:b3:98:
                    f8:f3:2b:31:86:df:8c:9c:81:09:2f:6c:94:d8:d3:
                    0f:b3:27:df:9f:98:46:28:bb:07:74:c3:85:d7:52:
                    f8:bb:ef:7d:78:00:64:f1:2d:cd:e6:e7:6c:f9:15:
                    03:ee:bc:07:e3:6f:d6:e0:63:09:7a:19:68:d7:ec:
                    fc:39:ba:8a:04:be:63:6a:75:b1:7a:71:22:59:fe:
                    ed:70:a2:e6:c3:71:92:b5:1a:75:2a:41:91:2f:1a:
                    0f:5b:98:da:01:39:70:4d:d3:48:9f:8c:a5:68:42:
                    6c:53:12:3a:7d:15:04:8c:23:9e:76:1d:ec:97:e3:
                    44:96:a5:f6:1a:2e:2e:ac:84:5b:63:d4:53:e7:68:
                    34:73:69:16:4f:aa:3d:da:c4:b1:6d:46:ed:36:1b:
                    10:df:fd:48:8a:35:a5:f4:c5:0e:63:75:7e:4e:81:
                    76:87:ae:09:d4:49:d4:f0:0e:62:ef:b3:f0:cb:69:
                    72:a8:db:cf:23:70:08:14:86:e5:af:fe:86:2c:d1:
                    67:c4:26:bb:2e:84:47:a6:51:09:14:52:2a:ee:7b:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:82:DF:53:40:CC:0C:7E:6D:49:5E:90:E3:E1:64:4B:AD:E8:F5:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4085f065-a4ee-4426-8e45-715fae95ccc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:da:1e:95:33:12:2c:70:c0:4c:2d:1d:66:05:f7:05:17:24:
         8a:fc:c9:19:e2:cd:6c:7f:e9:7c:f5:24:88:73:13:a7:4c:d1:
         21:0d:bf:08:c6:66:96:dd:b9:6e:83:ff:9d:ce:01:df:21:61:
         24:39:0d:e7:fa:94:99:bb:6e:61:0b:19:95:bd:5e:3e:6f:94:
         04:2f:be:2c:e9:6b:12:47:e4:20:29:fa:91:a6:38:65:58:ef:
         64:b1:05:73:cc:fd:58:6b:e3:e3:7d:e4:da:b6:37:88:25:57:
         f0:55:67:3c:dd:a2:37:db:bc:77:03:ae:e0:18:e0:35:df:49:
         04:7b:8e:3b:12:84:bf:a9:96:e7:d4:c6:c5:78:6a:88:90:d9:
         ee:9a:ba:6b:b5:75:a5:67:92:3f:44:85:21:8e:5f:56:bd:fd:
         94:36:12:85:cf:ce:0f:ee:d5:92:d7:5d:ba:49:82:c1:eb:04:
         9a:9a:04:6c:f6:4a:41:11:84:26:de:62:16:b4:30:e5:64:49:
         f5:2f:72:4f:c9:58:cf:35:60:4f:03:b9:dc:c9:b3:72:24:12:
         24:03:00:7e:2a:ca:74:43:99:f5:30:36:ea:ff:74:bb:bd:60:
         ad:3e:1b:b9:3c:b2:7b:84:c5:d5:44:64:75:aa:82:56:13:56:
         ea:7b:ce:fe
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeJ3lbDcdMFSET7WDa4R+pwX/+zkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDEyMTExWhcNMjYwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MjcyNTFhOWI2MDM5NjBiMGRjM2M3NTBkYzg5NWQ4ZjI1
NWI4YzQxNjIzNWRiN2MzYTBlYTE1YWMwZmU0MmViMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2E+nHwtmjGAGvO/Pw943qKOcDIkejP4GM1dXC2d47EEJb
IUknevCNeDizmPjzKzGG34ycgQkvbJTY0w+zJ9+fmEYouwd0w4XXUvi77314AGTx
Lc3m52z5FQPuvAfjb9bgYwl6GWjX7Pw5uooEvmNqdbF6cSJZ/u1woubDcZK1GnUq
QZEvGg9bmNoBOXBN00ifjKVoQmxTEjp9FQSMI552HeyX40SWpfYaLi6shFtj1FPn
aDRzaRZPqj3axLFtRu02GxDf/UiKNaX0xQ5jdX5OgXaHrgnUSdTwDmLvs/DLaXKo
288jcAgUhuWv/oYs0WfEJrsuhEemUQkUUirue4xvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUr4LfU0DMDH5tSV6Q4+FkS63o9fwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQwODVmMDY1LWE0ZWUtNDQyNi04ZTQ1LTcxNWZhZTk1Y2NjMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsAgwDQYJKoZIhvcNAQELBQADggEBACPaHpUzEixwwEwtHWYF9wUXJIr8
yRnizWx/6Xz1JIhzE6dM0SENvwjGZpbduW6D/53OAd8hYSQ5Def6lJm7bmELGZW9
Xj5vlAQvvizpaxJH5CAp+pGmOGVY72SxBXPM/Vhr4+N95Nq2N4glV/BVZzzdojfb
vHcDruAY4DXfSQR7jjsShL+plufUxsV4aoiQ2e6aumu1daVnkj9EhSGOX1a9/ZQ2
EoXPzg/u1ZLXXbpJgsHrBJqaBGz2SkERhCbeYha0MOVkSfUvck/JWM81YE8DudzJ
s3IkEiQDAH4qynRDmfUwNur/dLu9YK0+G7k8snuExdVEZHWqglYTVup7zv4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:48:52 2025 by rpki-client