This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4faa1bd2-03e8-4b93-adcd-b37abd4a32fa.roa
File:                     4faa1bd2-03e8-4b93-adcd-b37abd4a32fa.roa (raw, json)
Hash identifier:          hQCEc8qAYSjTrzGxD1ktBPJuNa3NrhqGsQEE4/HkMoE=
Subject key identifier:   DC:70:D6:38:3B:D4:1A:35:30:60:FE:8D:30:42:18:00:E9:B2:79:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7635A2308A461E4F7F0CF913A66B3CF90CA23E0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4faa1bd2-03e8-4b93-adcd-b37abd4a32fa.roa
Signing time:             Fri 21 Nov 2025 00:00:56 +0000
ROA not before:           Fri 21 Nov 2025 00:00:56 +0000
ROA not after:            Thu 19 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        89.60.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:35:a2:30:8a:46:1e:4f:7f:0c:f9:13:a6:6b:3c:f9:0c:a2:3e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 21 00:00:56 2025 GMT
            Not After : Feb 19 23:59:59 2026 GMT
        Subject: serialNumber=7c5a18cb714796a467e1649ef5ebca6008c2a2857ac7ea043729cb674f6146f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2d:b7:c9:26:79:10:f9:0f:0f:5a:dc:43:c4:
                    3c:83:5e:72:49:d6:bd:44:61:e5:e0:f1:f1:bb:47:
                    2b:04:83:56:84:09:91:f4:6c:77:84:2c:03:13:19:
                    a4:53:4b:95:cc:8f:5e:08:f3:d5:80:45:81:76:1f:
                    e5:ee:fc:2d:28:96:52:58:1b:24:09:05:a6:ef:e9:
                    45:f8:5e:73:a1:fe:77:62:ed:46:a3:f5:15:eb:4e:
                    5d:8b:b6:53:5b:60:2d:dc:a3:80:ec:1d:be:ab:38:
                    2f:04:16:9a:af:92:52:8c:97:1a:4a:20:d9:91:b4:
                    7c:65:27:88:12:ed:34:cc:6f:d8:74:be:52:98:65:
                    f2:8f:60:b6:bf:93:0d:d2:7f:32:fe:a3:73:e4:de:
                    61:c4:a6:50:6d:6c:d1:07:4f:34:e0:dd:91:61:6c:
                    70:3f:9c:62:ca:d0:47:34:bd:c8:37:1f:1c:31:39:
                    37:09:da:01:89:69:82:2c:08:76:f1:be:6f:d0:7c:
                    b4:f0:7b:6c:59:4f:75:1b:a5:a6:a9:58:6b:f9:87:
                    56:04:82:f4:72:b8:75:82:1d:98:db:38:1f:cc:af:
                    c8:18:cf:e9:8e:31:71:8d:a9:3b:37:1b:6f:b2:14:
                    90:49:4c:de:99:71:14:42:a9:e2:ba:ce:20:6e:c4:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:70:D6:38:3B:D4:1A:35:30:60:FE:8D:30:42:18:00:E9:B2:79:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4faa1bd2-03e8-4b93-adcd-b37abd4a32fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.60.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:86:87:94:2a:08:8f:41:c8:16:d0:d6:21:0f:96:19:cf:
         01:88:6c:99:ba:55:6e:d0:d3:7e:4f:38:e3:89:d5:91:ea:41:
         25:2c:7b:c2:1a:1b:fe:44:c4:91:88:2e:6d:cf:61:44:9b:1c:
         e2:38:ad:3d:b2:70:32:80:91:4e:2b:fd:a2:95:98:a2:32:13:
         f4:f3:74:7d:38:92:2c:37:97:a3:a4:b0:c6:c4:dd:5e:08:9c:
         b2:22:78:df:4b:66:a5:fa:fc:e5:34:e2:27:58:41:9b:ec:a4:
         28:d8:2b:77:9c:47:59:2d:38:8c:b0:d5:03:0b:35:82:06:87:
         1b:6d:38:c8:fd:c0:d3:0e:3f:2e:89:e4:c9:b8:0f:da:8c:cb:
         ea:32:ba:9e:75:38:85:23:20:7d:a4:c6:af:10:cb:cb:0f:e9:
         31:2b:d6:1b:fe:52:24:e2:6b:b6:95:04:6f:4b:26:19:71:c0:
         5c:66:72:66:3b:9e:8c:a1:d7:8d:73:43:89:aa:2c:8a:95:83:
         52:7e:d8:35:37:bf:60:7e:45:d0:f2:70:4e:06:9b:f0:1a:56:
         17:b1:cb:bc:92:60:c8:04:67:81:af:f7:3a:8e:80:3e:22:36:
         99:70:d5:3d:8b:75:e9:61:19:f0:e6:ec:55:59:87:6c:25:21:
         61:bf:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:01:08 2025 by rpki-client