This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5307b426-3578-4099-8905-82473e6dd0a6.roa
File:                     5307b426-3578-4099-8905-82473e6dd0a6.roa (raw, json)
Hash identifier:          Wh/qzo6BujQrImXi2kfnRqGAyHHbFWOhwTAqrDazK1E=
Subject key identifier:   39:0D:16:36:C9:EE:F0:7C:ED:31:7D:F8:47:E1:D1:44:2D:E8:EE:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       676665F6FEC022BDA0A26263A9E2B898BCC8E18A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5307b426-3578-4099-8905-82473e6dd0a6.roa
Signing time:             Tue 25 Nov 2025 00:11:20 +0000
ROA not before:           Tue 25 Nov 2025 00:11:20 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        206.72.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:66:65:f6:fe:c0:22:bd:a0:a2:62:63:a9:e2:b8:98:bc:c8:e1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:11:20 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=c199601f371d6f50626aa09afa6bc357fb4e6dfc5eb0419713dfea8a6b6e5b57, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:89:36:ea:97:fa:c1:3f:07:57:1c:e7:d0:46:
                    3c:10:3f:ee:6e:65:10:03:2d:97:b4:5f:dc:83:24:
                    73:5c:77:cd:49:26:ec:5d:15:3f:db:e4:f0:e4:94:
                    50:66:a5:78:50:f3:a7:7e:79:35:d0:09:5e:43:df:
                    5b:70:12:a9:77:44:29:1b:e7:ff:8f:87:34:b3:da:
                    0d:cf:af:54:60:de:45:55:2c:12:b3:b4:f2:86:01:
                    a9:a9:c6:a1:ae:54:67:a7:65:20:c7:92:03:f5:2a:
                    29:a1:8d:b0:6b:52:8e:a7:8e:87:55:43:0d:dc:23:
                    e2:37:19:02:cd:ef:5f:f1:d5:47:29:42:ed:a2:ad:
                    45:eb:15:7a:c8:0e:2b:b1:62:a7:67:88:db:6f:a2:
                    3d:d3:bc:e3:1d:af:20:53:80:08:37:c7:95:8b:ec:
                    a3:1f:06:da:4e:e1:31:16:9b:84:3d:c2:af:4d:4e:
                    05:fa:a3:b4:94:ea:c2:0f:87:a7:96:d5:c3:84:31:
                    e3:0b:73:45:43:09:d6:b5:a3:08:68:1d:34:ef:71:
                    62:72:e7:68:6a:ba:67:23:83:d9:23:20:87:ed:e9:
                    53:0e:85:83:97:aa:4c:d7:20:4c:0b:2c:31:1e:5b:
                    d6:82:fd:fb:f2:71:14:92:f3:dc:ea:11:e6:94:f8:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0D:16:36:C9:EE:F0:7C:ED:31:7D:F8:47:E1:D1:44:2D:E8:EE:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5307b426-3578-4099-8905-82473e6dd0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.72.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:d1:9b:a9:47:6c:63:fc:6d:c2:5b:e9:e9:e1:a6:93:a3:9f:
         a4:2a:30:8c:79:b7:8e:5c:5d:0c:03:5c:d3:a0:1e:b3:22:ca:
         db:8e:81:16:ab:ac:bb:8b:fc:b4:78:4d:c2:fe:4b:08:25:f1:
         7c:ae:64:7b:48:8d:86:b0:48:26:6f:d6:d8:df:8f:d3:71:ed:
         04:56:01:da:9f:02:f1:81:bd:a8:e0:e3:e2:be:2a:33:4c:c9:
         75:f6:78:9a:7a:db:90:dd:bf:9a:ed:5a:28:ef:b6:49:aa:b3:
         1a:e0:74:2c:c4:bd:7f:25:e3:9d:01:8f:e8:e7:65:36:fd:86:
         9f:d5:59:95:26:9f:1f:11:44:2c:38:bb:4a:77:c8:6f:db:f9:
         7a:29:93:80:b9:29:a6:7d:df:09:c2:92:22:8c:20:c5:a0:2f:
         b4:30:47:3f:87:81:9c:f6:df:0b:a9:6b:f4:fb:23:c8:4c:ab:
         66:33:cd:bb:0b:67:81:36:91:2c:4d:00:b9:05:59:0a:ae:6c:
         60:69:6b:14:15:41:2b:5c:5e:58:53:b7:46:91:6a:8f:ba:21:
         6d:a2:ec:72:9a:3f:a6:30:f0:cb:1d:cd:3c:1c:a1:94:44:93:
         c5:71:b5:45:e3:45:99:57:85:fa:f3:ca:4a:ec:37:85:cc:cf:
         04:16:9e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:04:34 2025 by rpki-client