This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4391dc68-2a33-4b79-8713-4af8518a52be.roa
File:                     4391dc68-2a33-4b79-8713-4af8518a52be.roa (raw, json)
Hash identifier:          VRhzJp+5405nmTX2hNPO98XCieVMAmqWflIRjeuP3K0=
Subject key identifier:   DE:89:B6:7D:6A:FA:40:B5:F2:96:C5:C8:47:B6:87:16:24:D9:56:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E036D338582F81ECB16D1E589F43E9D8E63C7A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4391dc68-2a33-4b79-8713-4af8518a52be.roa
Signing time:             Sun 16 Nov 2025 00:10:41 +0000
ROA not before:           Sun 16 Nov 2025 00:10:41 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.255.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:03:6d:33:85:82:f8:1e:cb:16:d1:e5:89:f4:3e:9d:8e:63:c7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 16 00:10:41 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=12f99ea9e2cfdadfef883d837949303a70ae131364a0326dc58fbc4c0ebaad90, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:68:87:13:91:a4:b8:6a:93:5e:7e:cf:14:
                    98:76:75:75:c2:97:0c:af:43:8a:47:4a:42:fb:d3:
                    a3:68:c5:2b:80:5a:4c:39:6f:2b:d1:18:10:d1:53:
                    39:57:4a:e9:03:ff:97:ee:dc:57:18:7e:17:24:3f:
                    34:8a:22:6f:1d:f8:7a:db:e4:8e:30:bb:3c:4f:14:
                    45:22:dc:cf:5a:71:79:f9:87:c8:00:e1:07:b6:e5:
                    fa:a5:82:aa:e3:1f:1f:c4:0e:1a:5a:8a:a2:42:01:
                    7b:4d:db:9d:57:eb:bb:d1:a5:16:fa:d6:1d:79:cd:
                    d4:50:6d:83:73:ca:b9:b0:41:ec:04:a7:77:03:45:
                    37:d3:76:d6:65:e8:10:9c:ad:92:d6:60:d3:70:3a:
                    33:c5:e2:88:80:3f:2e:8b:4f:5e:d3:12:59:6f:d4:
                    50:df:98:29:2d:3f:e2:34:ff:58:60:6f:fc:5d:9b:
                    f3:d7:eb:d8:c2:0c:3a:6c:23:9b:c3:76:31:53:ce:
                    ce:7a:7d:40:92:84:8d:a4:4a:44:23:b1:f4:91:7f:
                    f2:1f:b8:7d:c6:6b:f8:96:41:6a:c8:48:cc:4d:4c:
                    39:16:1e:c0:c4:7f:87:fa:44:8c:7b:38:88:97:dc:
                    80:ed:76:29:48:b0:ac:2a:e8:a0:e0:6e:08:9e:12:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:89:B6:7D:6A:FA:40:B5:F2:96:C5:C8:47:B6:87:16:24:D9:56:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4391dc68-2a33-4b79-8713-4af8518a52be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.255.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5d:8a:ab:15:ac:c3:ce:ac:ee:61:ae:c7:42:64:66:69:44:05:
         85:4f:76:92:1f:d9:14:52:17:51:69:9e:7f:84:0b:8a:44:f8:
         33:82:92:c1:97:94:bc:7f:7f:24:8d:56:78:3c:0f:e2:a7:d6:
         98:cc:8b:a5:d2:99:39:2f:8d:a9:48:66:84:cf:a2:13:27:e6:
         eb:55:06:f4:7e:4a:a4:b5:15:0a:ce:94:bd:12:a9:e4:00:70:
         33:fb:cc:23:df:bc:53:7b:f9:ca:7d:e2:d5:d7:2d:56:a3:41:
         f3:d6:eb:1a:42:38:48:fa:be:bf:96:9a:87:34:0e:75:77:ea:
         8e:d1:23:29:22:35:32:f9:f6:d6:23:30:bb:05:b5:77:2c:d9:
         ef:ec:e9:96:42:05:1d:c2:2a:e3:a2:87:29:1c:6b:79:16:64:
         29:64:1a:ad:2e:90:31:9e:07:ce:67:64:a1:e4:b1:02:e8:2a:
         74:92:83:90:f9:f8:22:8b:21:b8:ca:b9:40:ef:d2:f2:e4:25:
         41:cd:da:00:8a:e9:a2:87:1c:31:97:a9:56:50:64:1d:c8:c2:
         4a:d9:c6:49:36:be:e6:2c:38:ff:8e:7e:40:a8:71:6a:e6:f4:
         95:52:a0:f1:57:5e:01:88:a1:c5:80:a3:37:f8:02:fe:fd:9d:
         76:66:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:56 2025 by rpki-client