This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55634e39-a8da-4d69-a01a-c448a312369c.roa
File:                     55634e39-a8da-4d69-a01a-c448a312369c.roa (raw, json)
Hash identifier:          2OCgL3+uUirDJTvWF3LTG09y5FuGBfLskbNu9JzcY9I=
Subject key identifier:   AF:92:4D:95:F7:7B:21:AB:21:11:27:6B:A3:4D:BD:F2:5C:78:E2:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D39C1BC4F1BECC26AF64E64259ECF2B9EDA245A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55634e39-a8da-4d69-a01a-c448a312369c.roa
Signing time:             Tue 25 Nov 2025 00:30:17 +0000
ROA not before:           Tue 25 Nov 2025 00:30:17 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:39:c1:bc:4f:1b:ec:c2:6a:f6:4e:64:25:9e:cf:2b:9e:da:24:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:30:17 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=c6c6d27acd1a6ed5f86f23073f00493c239787f6791d4dbc9965d77b1b0bb009, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cd:8b:c2:39:6d:37:68:50:04:c0:8a:5a:5d:
                    da:89:c8:8a:ea:94:16:6c:59:11:96:50:78:e9:23:
                    8b:40:78:37:f9:4e:1a:52:7d:9d:10:3f:a1:40:ba:
                    5a:80:f2:a2:ee:b2:5b:b1:71:b0:2a:1f:93:a4:27:
                    7d:0e:6a:bc:b1:fb:a3:50:4b:ff:e8:ee:aa:11:78:
                    4b:85:29:5b:d5:b0:73:63:e8:b3:c9:9e:70:4f:cc:
                    32:04:7d:4b:cc:d4:3f:46:db:7f:b5:db:9b:ad:dd:
                    a4:02:58:df:a2:3a:13:80:23:8c:be:34:21:61:6a:
                    73:f7:f4:09:80:1c:3d:1e:e9:f4:ec:66:ad:df:bb:
                    7d:57:1d:15:2a:5b:c1:ad:c5:04:ad:d1:7d:57:57:
                    dc:f7:bb:82:1f:48:fd:61:c5:f2:12:2f:f6:04:42:
                    8d:90:a4:bf:3a:a7:c7:15:ff:c6:46:45:74:1b:62:
                    b1:a1:7b:d5:11:05:55:97:ba:36:8b:4f:19:fc:ce:
                    fd:b2:68:98:38:9b:46:19:a7:fa:cf:84:2d:24:0a:
                    40:13:15:46:d8:b0:3d:40:d7:11:ca:03:32:06:64:
                    c6:1b:72:f9:3e:b3:2e:14:6b:9b:fb:3c:b0:f3:43:
                    29:18:a3:a2:cb:b1:d0:d2:bb:c9:0b:c8:79:10:c4:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:92:4D:95:F7:7B:21:AB:21:11:27:6B:A3:4D:BD:F2:5C:78:E2:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55634e39-a8da-4d69-a01a-c448a312369c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b0:62:8d:e5:ee:9b:9c:76:b5:5c:f1:38:b3:e3:a4:c6:37:
         b2:85:87:9e:25:e8:b8:f8:52:72:45:1e:23:92:31:f9:48:09:
         e1:a0:60:e9:4b:f5:8e:ff:e7:ed:a7:74:19:17:69:6f:11:ab:
         29:ea:02:3d:19:73:31:2f:34:18:f6:3b:6a:0f:bb:61:0c:39:
         25:a2:83:9e:21:a2:86:d0:75:03:ab:21:b3:f5:70:36:e4:1c:
         9f:8f:56:aa:c6:de:53:84:0b:25:16:0c:76:26:c5:f0:8c:69:
         43:49:aa:a3:38:eb:2d:2f:7b:a9:9d:73:94:6c:71:91:67:99:
         80:7b:a9:ce:d1:89:53:7d:5d:77:22:83:2b:08:5f:b6:5e:bc:
         ef:2c:57:03:10:e4:7d:c8:59:ac:4c:43:df:1f:85:1b:56:6f:
         e9:44:91:80:70:26:9d:80:3a:f6:50:7e:d7:83:21:05:d4:0f:
         c1:3b:61:7e:c5:72:dd:0b:b6:fe:0d:bb:28:5e:aa:d4:fe:3c:
         d2:cc:03:e4:28:b0:9e:76:04:77:7c:d8:4b:84:1e:2a:b7:cb:
         c1:59:fe:30:ab:03:0b:ea:a9:58:9d:6d:c3:12:24:84:06:24:
         34:ff:0c:7c:f2:db:45:0c:bb:b2:9b:6f:ba:60:b5:fb:6c:7d:
         4d:50:ee:46
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULTnBvE8b7MJq9k5kJZ7PK57aJFowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDAzMDE3WhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNmM2ZDI3YWNkMWE2ZWQ1Zjg2ZjIzMDczZjAwNDkzYzIz
OTc4N2Y2NzkxZDRkYmM5OTY1ZDc3YjFiMGJiMDA5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZzYvCOW03aFAEwIpaXdqJyIrqlBZsWRGWUHjpI4tAeDf5
ThpSfZ0QP6FAulqA8qLusluxcbAqH5OkJ30Oaryx+6NQS//o7qoReEuFKVvVsHNj
6LPJnnBPzDIEfUvM1D9G23+125ut3aQCWN+iOhOAI4y+NCFhanP39AmAHD0e6fTs
Zq3fu31XHRUqW8GtxQSt0X1XV9z3u4IfSP1hxfISL/YEQo2QpL86p8cV/8ZGRXQb
YrGhe9URBVWXujaLTxn8zv2yaJg4m0YZp/rPhC0kCkATFUbYsD1A1xHKAzIGZMYb
cvk+sy4Ua5v7PLDzQykYo6LLsdDSu8kLyHkQxIUBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUr5JNlfd7IashESdro0298lx44rQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU1NjM0ZTM5LWE4ZGEtNGQ2OS1hMDFhLWM0NDhhMzEyMzY5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjUpwwDQYJKoZIhvcNAQELBQADggEBAGWwYo3l7pucdrVc8Tiz46TGN7KF
h54l6Lj4UnJFHiOSMflICeGgYOlL9Y7/5+2ndBkXaW8RqynqAj0ZczEvNBj2O2oP
u2EMOSWig54hoobQdQOrIbP1cDbkHJ+PVqrG3lOECyUWDHYmxfCMaUNJqqM46y0v
e6mdc5RscZFnmYB7qc7RiVN9XXcigysIX7ZevO8sVwMQ5H3IWaxMQ98fhRtWb+lE
kYBwJp2AOvZQfteDIQXUD8E7YX7Fct0Ltv4NuyheqtT+PNLMA+QosJ52BHd82EuE
Hiq3y8FZ/jCrAwvqqVidbcMSJIQGJDT/DHzy20UMu7Kbb7pgtftsfU1Q7kY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:07:43 2025 by rpki-client