This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d955b49-53bf-486d-8b46-c91c98ad9581.roa
File:                     5d955b49-53bf-486d-8b46-c91c98ad9581.roa (raw, json)
Hash identifier:          aOQmAjD46LF1jFYUX4iN6DWNmcuXxktclQlp29khT+w=
Subject key identifier:   09:03:10:3B:19:09:0E:C5:5A:C9:57:11:4D:FB:5E:62:83:B3:0F:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C1BFA8F0D38F2418B0F425FABAEB35EE9E314D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d955b49-53bf-486d-8b46-c91c98ad9581.roa
Signing time:             Tue 02 Dec 2025 00:40:03 +0000
ROA not before:           Tue 02 Dec 2025 00:40:03 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.91.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1b:fa:8f:0d:38:f2:41:8b:0f:42:5f:ab:ae:b3:5e:e9:e3:14:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  2 00:40:03 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=6a9647f71bc410504ae94020c193a6e84d52215d59d2a90b8f304a5e35106d8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:4e:c4:a6:9d:68:ae:65:b4:81:87:73:c3:
                    60:3a:ac:32:5f:a1:04:ab:19:90:3f:cc:78:5c:e5:
                    80:48:77:22:a0:7e:12:fa:58:82:76:74:3b:48:78:
                    9e:43:5a:03:b0:92:60:13:b9:f5:68:bc:04:21:12:
                    ca:62:05:3f:b1:94:14:9b:b5:e4:d8:2c:29:d3:1c:
                    aa:cf:f3:a9:69:4a:c2:cd:d2:21:4f:fd:4f:e2:89:
                    dd:a9:5f:f2:84:a7:ba:81:93:ed:ac:84:e0:6c:9f:
                    e9:6e:97:0c:77:e6:72:43:ef:f4:54:8b:65:2e:fe:
                    8f:1e:57:b3:04:59:78:90:69:5a:27:a9:de:cd:f4:
                    9e:a6:aa:37:86:c8:ed:8f:c8:08:18:b9:08:b6:c0:
                    d0:a1:54:a3:9d:39:2a:80:a1:b8:35:e8:f7:60:fe:
                    81:40:1b:f8:1a:86:38:66:9d:44:09:55:dd:6f:8a:
                    ce:ef:5f:eb:03:c8:e1:9b:27:ed:67:30:b4:cc:9d:
                    e1:82:25:c3:e5:89:2c:cf:dd:92:ae:fa:82:5b:fc:
                    eb:4a:8b:0c:20:7b:47:70:47:8b:3f:ae:b4:80:4b:
                    6a:19:6d:00:fa:1b:e1:9a:a8:81:b4:af:50:88:49:
                    69:84:c0:14:47:2e:c7:39:d8:d0:e2:af:75:fb:59:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:03:10:3B:19:09:0E:C5:5A:C9:57:11:4D:FB:5E:62:83:B3:0F:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d955b49-53bf-486d-8b46-c91c98ad9581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:a4:77:b2:da:94:e8:c6:b6:b9:ab:66:c5:2b:8a:02:b5:74:
         c4:34:60:18:44:73:b6:1b:9c:d4:cd:a8:42:e7:21:bc:ed:40:
         38:80:05:75:18:cc:df:66:65:a4:21:30:00:88:46:93:57:03:
         e3:9b:87:e6:5c:68:dd:9b:4b:ab:05:8d:f9:d0:33:40:cf:06:
         a5:80:fd:18:6e:33:c4:e4:6d:f7:c1:a8:21:1e:3b:95:ce:0f:
         7e:c5:6f:fe:c5:eb:0a:81:37:67:55:80:de:63:65:35:34:71:
         92:ef:2d:d7:0a:dc:3e:52:fc:b5:e5:24:c4:ae:4b:45:0f:80:
         af:fb:9c:70:d4:dd:3b:5d:ee:cd:f0:cc:14:e0:4a:55:e3:09:
         ef:ca:f2:d7:0d:ba:2e:63:71:f3:69:b1:b8:c5:26:df:48:4c:
         9d:9f:26:03:2d:65:c3:c2:7f:58:3d:de:c5:8f:45:ce:03:46:
         9e:ea:ae:ab:52:c4:15:58:29:3e:1e:e1:04:3f:72:17:22:e6:
         63:d5:9b:51:a1:83:60:de:d5:58:cb:b8:fa:a5:bd:e5:21:7f:
         37:46:91:69:03:f5:df:6c:18:da:f8:90:90:36:60:6d:89:ad:
         67:d9:20:55:aa:3e:60:db:be:77:56:95:3f:08:28:fb:c8:09:
         19:6e:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:06:55 2025 by rpki-client