This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa
File:                     5831f36f-50de-43df-b1e3-ee6e835954e3.roa (raw, json)
Hash identifier:          AWMqEpMBD01+S4wD/iKvRRFQ17CvzKUbaXvnPsaCOQQ=
Subject key identifier:   54:FB:DB:2A:F7:E9:3E:88:2B:4F:F0:F8:83:8E:59:1C:56:FE:30:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       422EF78D3511E302E688DD193B66FB37856F683F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa
Signing time:             Thu 27 Nov 2025 00:41:56 +0000
ROA not before:           Thu 27 Nov 2025 00:41:56 +0000
ROA not after:            Wed 25 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2e:f7:8d:35:11:e3:02:e6:88:dd:19:3b:66:fb:37:85:6f:68:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 27 00:41:56 2025 GMT
            Not After : Feb 25 23:59:59 2026 GMT
        Subject: serialNumber=85b66c62f8dcacc3b3ffdd69884f40b44463d4a6a93014aa32e28728a60f6105, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:31:ad:5c:d5:80:aa:36:64:71:73:a9:ed:
                    e9:8e:02:e7:9f:0e:a5:59:8f:8d:aa:11:e0:01:28:
                    92:72:bb:ab:c5:87:1e:16:d0:81:e9:bb:46:67:56:
                    21:ab:2d:88:de:ce:d5:90:ee:d6:e6:82:a7:5f:a2:
                    aa:e8:01:46:7f:da:46:e9:ff:f4:9e:db:da:af:79:
                    15:e3:dd:e8:ff:6f:50:8a:38:bd:37:e2:f2:bd:86:
                    88:f8:c4:a6:99:64:6c:07:c2:d5:4a:25:69:8b:f2:
                    f9:db:75:a2:4f:2e:7e:2a:fe:2f:9a:39:3f:b6:95:
                    05:90:3f:11:9b:19:b9:d8:d0:0e:9f:b7:4b:cb:e7:
                    88:23:b7:83:98:07:f1:b5:64:40:18:d4:5e:6e:6d:
                    d4:5d:b5:83:aa:08:8e:36:04:f6:89:42:fc:e7:2b:
                    bb:2d:94:d5:ef:82:49:e5:87:a4:4e:18:a6:79:61:
                    52:a7:96:58:80:98:b9:e1:bc:d8:e7:1c:6e:25:ed:
                    da:f3:d4:bf:3b:69:a2:0c:45:16:4f:a5:0b:7d:17:
                    92:45:8b:89:68:3c:6d:48:af:c4:9f:41:ec:22:76:
                    a5:64:b3:05:b0:14:bd:ae:9b:04:8a:27:f4:e0:61:
                    6a:20:47:ff:00:08:55:c1:7e:31:0e:0b:0e:c8:19:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:DB:2A:F7:E9:3E:88:2B:4F:F0:F8:83:8E:59:1C:56:FE:30:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:1a:f2:8c:57:64:4f:63:a3:9d:96:18:97:61:5c:16:03:cf:
         b8:68:ad:63:e0:bc:ca:9e:44:df:13:28:73:37:f3:d3:b8:46:
         32:da:fd:b9:2c:10:f6:2e:17:a7:c6:15:cf:d6:6b:da:98:96:
         ed:92:59:53:c5:a0:55:7a:a8:72:1c:77:f2:15:3c:d5:61:c3:
         a8:a8:83:cb:e2:5a:f4:4a:94:1a:3d:56:df:ed:b6:0b:af:24:
         39:11:54:81:1b:35:41:0d:d9:9e:35:35:af:a8:ac:cc:da:6c:
         87:b7:73:a3:bd:dd:d1:14:7b:f9:37:88:1c:49:26:25:82:ed:
         5e:a6:56:e6:c4:c7:c7:60:73:c2:39:73:cf:b1:d3:47:58:b0:
         5f:40:e7:4a:d2:63:32:28:da:ff:45:d6:b9:a8:7d:56:80:61:
         e3:c6:f2:95:07:79:c5:6f:d0:26:4f:81:e7:05:88:14:02:49:
         a2:9f:60:a6:e3:5a:2d:e0:fe:75:ea:0c:d5:d8:cc:a7:0f:73:
         96:87:a4:e7:b5:fc:29:dc:a1:a4:fe:b6:c9:6b:50:d6:09:04:
         53:28:89:ff:21:e9:fe:38:9e:1e:f0:63:fc:ef:26:54:30:61:
         b2:e8:90:2f:4e:00:6f:c6:23:fc:5f:8a:03:36:ae:72:4d:11:
         6f:a5:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:24:23 2025 by rpki-client