This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51b3f021-a7b7-49f6-8173-528075001f81.roa
File:                     51b3f021-a7b7-49f6-8173-528075001f81.roa (raw, json)
Hash identifier:          lezLele7ircC3PZgpVb2icEzLE22EzA3CNjPKiZzNc4=
Subject key identifier:   C1:D5:52:2C:58:74:01:7D:A6:45:C7:4F:66:B6:C6:46:3B:18:A9:01
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54A278DDA590356BC49E793AE6458AD714998C7D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51b3f021-a7b7-49f6-8173-528075001f81.roa
Signing time:             Sat 06 Dec 2025 00:30:56 +0000
ROA not before:           Sat 06 Dec 2025 00:30:56 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        107.21.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a2:78:dd:a5:90:35:6b:c4:9e:79:3a:e6:45:8a:d7:14:99:8c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 00:30:56 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=812dfe8aebbba47ea1bb28bbab1e9f99c00617a31ea0266395d78c12b7c093fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:8c:cf:51:b1:51:0c:f0:34:4d:9f:3c:e4:
                    1d:17:37:6c:0b:7b:b4:d4:20:c6:ac:f2:df:13:e8:
                    f0:43:8e:b3:0a:34:ff:0d:cf:f1:cf:ad:d7:57:cf:
                    e3:93:ff:8b:d6:c8:d8:7d:0a:f9:d9:9d:07:3e:43:
                    49:9a:e5:a9:3f:12:3e:e0:2c:ec:2f:46:57:3d:16:
                    4f:56:ac:43:ed:dd:aa:0d:60:1a:4c:1e:1f:02:9c:
                    92:d2:d1:17:78:d4:3e:9d:15:b0:19:cd:87:de:2f:
                    a3:4f:f8:da:14:38:95:33:aa:a0:d6:76:c5:00:14:
                    70:00:da:dc:4d:32:63:e5:77:85:39:ff:d3:bb:64:
                    36:65:de:f0:ff:2c:b7:cc:b7:13:85:6b:44:bd:f3:
                    5e:c1:3a:9c:1c:79:79:2c:8a:85:4e:84:16:d8:fa:
                    eb:fe:95:6e:6f:d4:b5:02:00:18:90:d5:b6:c6:d3:
                    98:54:dd:fc:a3:bc:a1:65:d3:dc:56:e0:8c:16:05:
                    21:f5:87:17:a3:ab:a2:a4:a6:ad:9e:22:0b:ff:3a:
                    f1:68:81:07:3d:da:d4:4b:6b:eb:c7:1b:2a:78:f1:
                    a8:28:34:8c:27:6e:6e:3b:9f:2c:8c:f2:f5:c5:18:
                    91:36:50:d5:4f:2b:8c:16:e4:99:3a:72:12:ac:d0:
                    2c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D5:52:2C:58:74:01:7D:A6:45:C7:4F:66:B6:C6:46:3B:18:A9:01
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51b3f021-a7b7-49f6-8173-528075001f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.21.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:be:02:71:f8:46:84:d2:98:d6:79:3c:fb:b9:8d:77:c1:de:
         57:63:8e:e9:fe:cb:98:e3:78:54:e7:a0:65:ba:04:07:1f:43:
         72:7e:ed:a9:85:bd:35:b2:5d:6e:e6:c8:6a:b2:af:e8:1d:6d:
         05:3b:6d:56:40:6d:df:02:0c:2f:5a:a5:84:b4:ad:6d:2f:6d:
         87:b7:6e:79:45:70:80:9a:cd:77:51:8b:01:49:51:b6:ee:e5:
         1b:85:ab:36:01:f2:ca:8c:60:bf:b7:6f:f7:91:d3:4d:c2:ea:
         5f:79:2a:be:b3:41:cb:eb:63:98:a4:c7:04:3d:af:48:88:f1:
         08:7c:f6:eb:de:45:c6:95:34:8e:6d:f3:1c:a2:dd:f7:92:71:
         c3:06:d5:65:44:e6:9d:ba:9c:7b:19:f0:aa:95:4e:5d:a4:3e:
         be:8c:1a:c3:d6:05:79:f3:f0:d6:87:15:8c:54:99:72:b5:59:
         37:ce:9c:8f:71:0b:06:51:87:2f:1b:5f:8e:65:b0:77:76:87:
         fb:89:07:5b:2c:0b:78:89:92:1e:19:c8:15:e4:ed:15:6c:13:
         47:c0:48:d1:76:23:64:bc:24:08:ee:02:30:98:e0:e3:2a:a3:
         d9:3d:29:8b:6e:44:83:aa:2a:c2:ea:96:49:63:9d:2b:3d:89:
         68:7c:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:55:38 2025 by rpki-client