This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f8ae91-92eb-4054-9a85-d212ce02b957.roa
File:                     40f8ae91-92eb-4054-9a85-d212ce02b957.roa (raw, json)
Hash identifier:          q2vwBv8ZjnU5/dxoYMnsuB+9me+Z8N1TimTim0nr7tw=
Subject key identifier:   3C:44:4E:B3:06:51:CE:DF:68:35:C0:24:3D:5D:9D:9F:98:E5:6E:15
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07621CD021F356FFAA27CA8F623EB5CEE16222E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f8ae91-92eb-4054-9a85-d212ce02b957.roa
Signing time:             Sat 06 Dec 2025 01:21:16 +0000
ROA not before:           Sat 06 Dec 2025 01:21:16 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        157.175.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:62:1c:d0:21:f3:56:ff:aa:27:ca:8f:62:3e:b5:ce:e1:62:22:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 01:21:16 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=2f25e6d6d9869696c1be75f291463357ac74cfc081a513ea1d2719bbf49be262, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:58:92:97:8d:13:29:d6:26:ea:b4:ba:a4:
                    f0:c0:91:18:b4:cf:48:32:b5:10:05:45:8c:53:8c:
                    76:3a:e5:a5:4c:ac:75:b4:d0:af:68:29:6a:f0:bd:
                    47:33:ed:83:ca:22:87:3e:ef:84:b4:4b:55:8f:f6:
                    47:2e:7b:e5:99:16:65:12:64:15:cb:43:9b:f8:bf:
                    13:df:92:e9:eb:9d:e9:b5:93:b5:80:96:51:1c:ec:
                    16:f1:e4:dc:e4:5e:79:ca:04:03:87:31:e5:ce:32:
                    0e:03:5d:3d:5d:35:91:00:68:30:24:96:75:5a:0a:
                    2c:b0:47:6e:95:95:72:59:ad:d8:61:2d:63:d3:27:
                    b6:a8:a2:d1:57:d5:e3:80:19:59:9e:02:4b:c6:88:
                    bc:bf:e0:eb:46:75:c7:8b:e9:52:d2:1c:64:15:ef:
                    55:8a:11:eb:24:99:6e:b2:1c:d8:42:14:8d:43:e3:
                    d6:f3:bd:2f:5d:4b:35:17:f3:f0:81:e3:df:5c:ef:
                    d2:45:f4:d5:5f:11:35:be:7c:96:3a:52:dd:c1:46:
                    2f:4a:ec:f4:b3:08:e3:0a:73:c1:da:5a:1e:43:ac:
                    7c:b3:0a:ae:ea:25:cd:e3:3e:e5:56:9d:c8:23:71:
                    d7:0c:79:77:9a:93:cb:4e:46:68:2a:65:8d:0e:01:
                    b6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:44:4E:B3:06:51:CE:DF:68:35:C0:24:3D:5D:9D:9F:98:E5:6E:15
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f8ae91-92eb-4054-9a85-d212ce02b957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:94:d0:f4:08:42:88:62:17:b8:74:70:5e:95:1b:f0:66:66:
         66:87:0f:79:64:99:bb:86:70:7d:8f:33:db:2d:72:6b:52:17:
         08:af:06:01:46:46:64:5d:a3:62:27:c9:26:77:07:22:ae:55:
         cb:ec:dc:dc:39:ef:74:4b:5b:7b:0d:13:ab:a1:80:ce:50:5e:
         e9:bb:df:43:56:d4:c6:77:bc:90:97:93:3a:c9:94:21:ad:62:
         7f:04:39:e8:03:40:e5:af:d7:b7:3f:f9:8c:e9:c1:6a:52:f1:
         93:24:90:98:40:17:53:03:3e:a4:08:c7:14:fa:3e:70:93:86:
         64:f4:76:f7:d1:de:10:6d:86:bd:5e:1f:19:3c:70:c6:7d:fd:
         ab:b5:77:2b:83:3d:0d:b1:07:f1:b8:8c:45:19:7b:8a:bd:3f:
         c4:3c:ee:c8:54:0a:9d:1a:63:4b:f4:50:b4:74:c6:2c:c6:41:
         38:7a:be:28:e7:0f:d0:dc:7b:fc:32:a0:39:1e:27:82:22:b8:
         54:58:28:55:e3:a5:52:d7:dc:70:06:40:7a:6f:d7:2b:59:21:
         59:d0:65:b3:6e:62:6d:48:f5:af:df:5f:36:24:b5:46:6d:b6:
         10:3e:ec:83:68:77:03:cb:18:ef:49:43:01:78:72:8c:4c:d6:
         86:ef:d2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:32:21 2025 by rpki-client