This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42b647a3-df86-48ab-9aef-85d200253272.roa
File:                     42b647a3-df86-48ab-9aef-85d200253272.roa (raw, json)
Hash identifier:          J5rrEFNtq+yzbFfPbTDhAWdMllRgKkYm5tAJAJkJyCE=
Subject key identifier:   09:12:38:AF:17:BC:69:39:9D:B0:26:D2:89:E3:5F:F2:26:58:7A:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       096230A94AFC59FB82D8B708BC2492C441839F1B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42b647a3-df86-48ab-9aef-85d200253272.roa
Signing time:             Wed 03 Dec 2025 01:10:09 +0000
ROA not before:           Wed 03 Dec 2025 01:10:09 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:62:30:a9:4a:fc:59:fb:82:d8:b7:08:bc:24:92:c4:41:83:9f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:10:09 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=033f9931d0ca8cd468aa688fb77abc72d03531a9d92c0a497cfad54e8c185f6b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:b4:02:1b:25:ae:31:68:7a:4d:12:87:44:
                    41:6c:c5:42:6a:56:f5:c6:bd:be:3e:f6:8a:32:e0:
                    1d:c7:c2:f5:35:87:7e:20:91:c4:8c:88:fb:71:df:
                    ef:84:e4:61:f6:4d:3d:f1:ca:fc:cb:3a:38:07:5d:
                    53:63:92:bc:42:0a:02:9a:82:2e:44:20:18:bc:7b:
                    86:21:94:df:60:6c:51:39:de:e8:ff:f0:7f:19:f0:
                    1c:a8:e9:2e:fb:ac:f7:6f:c7:f3:07:35:a6:0e:98:
                    46:ac:d7:0d:17:3e:53:62:2d:c3:bd:6e:4a:19:ec:
                    b8:92:8e:5b:d6:27:49:8c:d3:78:b1:e8:1a:de:38:
                    53:5e:67:38:e9:bd:93:86:7f:8c:97:53:51:17:86:
                    a4:2e:71:8a:c7:d6:90:05:98:7c:90:af:3b:d5:f2:
                    c4:67:dd:64:24:e0:66:32:91:a3:7d:e0:e4:ea:c3:
                    6e:2c:07:3f:58:a9:68:e3:20:c1:40:f8:9a:c2:c0:
                    80:6e:e1:f4:9f:bf:ea:58:bc:b2:92:31:97:07:77:
                    18:6d:ff:68:d2:a9:5e:99:e0:38:19:82:3f:91:8f:
                    91:42:1c:fc:26:e9:69:93:35:b9:8e:d7:46:a5:eb:
                    5c:21:e3:be:83:90:22:29:85:61:99:48:14:2e:b4:
                    f3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:12:38:AF:17:BC:69:39:9D:B0:26:D2:89:E3:5F:F2:26:58:7A:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42b647a3-df86-48ab-9aef-85d200253272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d1:6a:b3:ec:72:6b:11:51:32:dd:cc:5d:08:82:05:bb:3d:
         c5:48:66:eb:87:10:30:79:c7:18:e7:30:18:7e:dc:be:1e:41:
         c7:f1:91:f2:03:69:42:24:21:42:54:ed:5c:5d:e5:e0:e0:6b:
         e3:07:48:d7:f5:5c:bd:31:71:e8:a1:6d:47:6e:8e:44:b5:a0:
         ca:39:2d:f9:51:4b:f5:2c:ca:1f:2e:a8:a6:bc:39:b5:c5:46:
         48:a4:da:70:fa:74:93:5b:e0:aa:22:70:15:4a:ff:d2:cd:d3:
         52:4d:26:24:35:24:23:54:7c:52:d5:fa:15:f2:92:d1:77:58:
         fa:e8:d7:c5:cd:ef:d9:1f:fc:c4:b2:a3:06:5d:dc:d5:fc:f0:
         39:7e:a7:7e:c7:44:30:4e:89:25:78:a1:7a:e3:bc:09:51:2a:
         37:79:88:c0:16:6b:da:c8:68:f3:bc:ac:29:48:c0:3e:2e:10:
         7d:15:f5:49:41:5e:9a:9b:35:b4:04:b5:53:e2:7f:88:6b:0b:
         6c:d7:f5:57:19:98:7e:4e:ce:6b:70:c8:f8:85:47:a3:cc:e0:
         b3:e7:30:dd:1b:d2:ca:22:ad:5a:28:d4:96:54:c6:42:a0:b4:
         32:a8:9e:9a:03:5b:09:b8:98:1b:a4:ba:2d:b6:ef:d9:ef:20:
         14:b2:e5:fa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCWIwqUr8WfuC2LcIvCSSxEGDnxswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDExMDA5WhcNMjYwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMzNmOTkzMWQwY2E4Y2Q0NjhhYTY4OGZiNzdhYmM3MmQw
MzUzMWE5ZDkyYzBhNDk3Y2ZhZDU0ZThjMTg1ZjZiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnfLQCGyWuMWh6TRKHREFsxUJqVvXGvb4+9ooy4B3HwvU1
h34gkcSMiPtx3++E5GH2TT3xyvzLOjgHXVNjkrxCCgKagi5EIBi8e4YhlN9gbFE5
3uj/8H8Z8Byo6S77rPdvx/MHNaYOmEas1w0XPlNiLcO9bkoZ7LiSjlvWJ0mM03ix
6BreOFNeZzjpvZOGf4yXU1EXhqQucYrH1pAFmHyQrzvV8sRn3WQk4GYykaN94OTq
w24sBz9YqWjjIMFA+JrCwIBu4fSfv+pYvLKSMZcHdxht/2jSqV6Z4DgZgj+Rj5FC
HPwm6WmTNbmO10al61wh476DkCIphWGZSBQutPNhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCRI4rxe8aTmdsCbSieNf8iZYetMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQyYjY0N2EzLWRmODYtNDhhYi05YWVmLTg1ZDIwMDI1MzI3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsEMwDQYJKoZIhvcNAQELBQADggEBAGLRarPscmsRUTLdzF0IggW7PcVI
ZuuHEDB5xxjnMBh+3L4eQcfxkfIDaUIkIUJU7Vxd5eDga+MHSNf1XL0xceihbUdu
jkS1oMo5LflRS/Usyh8uqKa8ObXFRkik2nD6dJNb4KoicBVK/9LN01JNJiQ1JCNU
fFLV+hXyktF3WPro18XN79kf/MSyowZd3NX88Dl+p37HRDBOiSV4oXrjvAlRKjd5
iMAWa9rIaPO8rClIwD4uEH0V9UlBXpqbNbQEtVPif4hrC2zX9VcZmH5OzmtwyPiF
R6PM4LPnMN0b0soirVoo1JZUxkKgtDKonpoDWwm4mBukui2279nvIBSy5fo=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:28:53 2025 by rpki-client