This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d85f1a7-bc00-456f-9416-b9d234381145.roa
File:                     5d85f1a7-bc00-456f-9416-b9d234381145.roa (raw, json)
Hash identifier:          bhDEts1xWx38npFiQdt3hsR4dKCMZmT1EjMLm/cT7z0=
Subject key identifier:   B8:D3:10:D4:49:3C:DE:9B:5E:9D:D8:E0:58:AA:3C:7D:76:11:A7:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02FF08033E015F2F33A4A20D8BB19DD109AF8D1D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d85f1a7-bc00-456f-9416-b9d234381145.roa
Signing time:             Sat 29 Nov 2025 00:00:45 +0000
ROA not before:           Sat 29 Nov 2025 00:00:45 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.79.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ff:08:03:3e:01:5f:2f:33:a4:a2:0d:8b:b1:9d:d1:09:af:8d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 29 00:00:45 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=ab10e36d51e144c01bd36a129d5557f2802936e68f7167e05c6b3141f373032d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:79:87:a1:3a:5d:8b:ee:b7:81:00:b9:e4:
                    34:1e:6c:96:4f:d3:e4:0f:7e:62:95:bb:fa:3d:84:
                    b9:61:5a:61:31:0e:97:4f:55:b3:1c:d1:b2:63:dd:
                    d8:09:0b:27:7f:68:50:53:a7:e4:fc:54:9d:21:02:
                    41:de:e0:e9:49:59:d9:af:1a:b1:a0:15:5b:6b:32:
                    d7:d7:03:5f:1f:6d:5b:93:d8:47:58:92:45:04:ee:
                    89:a4:5a:fd:ee:85:68:36:c3:c5:ad:e3:b8:20:1d:
                    60:ac:58:98:eb:f0:06:48:4f:2a:66:4c:42:ae:10:
                    cb:76:65:c8:ca:ba:94:01:67:21:8c:8b:ca:63:f6:
                    15:97:87:e7:9b:dc:3b:9f:9f:3b:60:e9:ae:3a:09:
                    fd:29:c6:8b:8e:15:0a:ef:0c:94:c2:81:01:f3:a9:
                    ae:e9:5f:84:c6:fa:9d:3d:0d:60:44:18:e1:3c:b0:
                    cb:1a:29:11:fe:32:fa:b7:1d:4e:15:a7:9c:fb:bb:
                    f0:15:ae:67:ae:f0:ab:89:d1:5d:d6:a2:6e:ed:71:
                    09:56:a4:2f:d2:5a:12:ac:37:d6:7b:04:37:3f:df:
                    23:1a:a7:ca:17:08:e9:e8:11:10:be:38:c3:7d:a1:
                    32:2d:ff:a9:b1:b5:62:1f:65:41:e9:af:1e:14:2d:
                    86:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D3:10:D4:49:3C:DE:9B:5E:9D:D8:E0:58:AA:3C:7D:76:11:A7:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d85f1a7-bc00-456f-9416-b9d234381145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.79.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6e:f0:fa:fb:df:14:e9:54:02:03:ba:2c:f8:90:04:23:2b:f7:
         08:1d:93:19:5c:ad:eb:88:62:01:4d:bf:fc:b4:82:74:10:08:
         ce:20:66:96:ed:ff:8a:2b:2d:0d:d0:c1:6f:53:51:1d:a8:e1:
         d1:c4:ef:0c:0c:19:be:61:f6:cc:74:fb:ed:34:16:06:8d:b5:
         36:a8:b4:bd:90:0d:72:16:6b:6e:ad:0a:79:02:a1:e2:63:c6:
         7e:fa:d2:3b:c6:44:78:70:9b:81:7e:83:75:2f:4a:76:2c:00:
         07:47:c0:0c:1c:32:60:17:9a:fb:dc:8c:44:c7:62:43:c4:d0:
         60:e2:9f:9e:56:83:82:90:2b:8d:5e:38:d3:bf:a6:3a:c9:ce:
         13:c0:1c:4c:f9:d7:77:2a:b1:e4:f0:30:28:4b:e8:e5:0a:e6:
         2a:e3:b9:5b:f2:62:59:f9:ab:b2:da:e7:22:7d:56:ec:ca:dd:
         cb:66:76:73:88:6c:55:4a:99:60:d5:6f:f6:97:cf:3b:0e:c1:
         6b:94:c1:5b:49:d0:35:7b:87:6a:03:60:7d:44:df:d9:b1:18:
         76:8f:17:15:e8:ee:f1:d0:d7:44:ca:fb:4f:96:9f:bd:8c:8e:
         af:bc:18:57:81:26:33:10:3c:21:54:c2:96:e4:a3:ad:fc:86:
         82:55:be:63
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAv8IAz4BXy8zpKINi7Gd0QmvjR0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI5MDAwMDQ1WhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYjEwZTM2ZDUxZTE0NGMwMWJkMzZhMTI5ZDU1NTdmMjgw
MjkzNmU2OGY3MTY3ZTA1YzZiMzE0MWYzNzMwMzJkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOwHmHoTpdi+63gQC55DQebJZP0+QPfmKVu/o9hLlhWmEx
DpdPVbMc0bJj3dgJCyd/aFBTp+T8VJ0hAkHe4OlJWdmvGrGgFVtrMtfXA18fbVuT
2EdYkkUE7omkWv3uhWg2w8Wt47ggHWCsWJjr8AZITypmTEKuEMt2ZcjKupQBZyGM
i8pj9hWXh+eb3Dufnztg6a46Cf0pxouOFQrvDJTCgQHzqa7pX4TG+p09DWBEGOE8
sMsaKRH+Mvq3HU4Vp5z7u/AVrmeu8KuJ0V3Wom7tcQlWpC/SWhKsN9Z7BDc/3yMa
p8oXCOnoERC+OMN9oTIt/6mxtWIfZUHprx4ULYZ7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUuNMQ1Ek83ptendjgWKo8fXYRp30wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVkODVmMWE3LWJjMDAtNDU2Zi05NDE2LWI5ZDIzNDM4MTE0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAddTwAwDQYJKoZIhvcNAQELBQADggEBAG7w+vvfFOlUAgO6LPiQBCMr9wgd
kxlcreuIYgFNv/y0gnQQCM4gZpbt/4orLQ3QwW9TUR2o4dHE7wwMGb5h9sx0++00
FgaNtTaotL2QDXIWa26tCnkCoeJjxn760jvGRHhwm4F+g3UvSnYsAAdHwAwcMmAX
mvvcjETHYkPE0GDin55Wg4KQK41eONO/pjrJzhPAHEz513cqseTwMChL6OUK5irj
uVvyYln5q7La5yJ9VuzK3ctmdnOIbFVKmWDVb/aXzzsOwWuUwVtJ0DV7h2oDYH1E
39mxGHaPFxXo7vHQ10TK+0+Wn72Mjq+8GFeBJjMQPCFUwpbko638hoJVvmM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:24:52 2025 by rpki-client