This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa
File:                     603d26d7-c121-42e1-817f-ef0a806e3d69.roa (raw, json)
Hash identifier:          7U1hIDnoAoyo5Txs/pLrcytesM7DQIOcIA+VRqNibMI=
Subject key identifier:   37:92:44:BA:FE:F9:3F:D0:11:7E:BF:86:1A:08:1C:2F:27:52:60:00
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2959975ACDD9DEF6936D409AA41B565D2CCF862E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa
Signing time:             Sat 06 Dec 2025 02:21:16 +0000
ROA not before:           Sat 06 Dec 2025 02:21:16 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        185.212.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:59:97:5a:cd:d9:de:f6:93:6d:40:9a:a4:1b:56:5d:2c:cf:86:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 02:21:16 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=98953571014a7b46e594dac5bb1840ac1a1f33e2fbfd467708ae9337cab5a789, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ba:3f:3d:12:0a:1f:74:54:2a:35:c4:59:d6:
                    fd:0a:2f:40:b4:ec:8f:75:e4:37:6b:1e:88:fe:88:
                    3f:4c:09:08:d4:ec:0e:d0:ca:f2:c2:de:e1:a6:0e:
                    ee:33:62:2b:98:eb:1c:33:c9:8f:f3:64:d2:69:ed:
                    7c:b0:62:c4:10:10:e2:11:45:d4:5e:fc:88:24:21:
                    e8:ab:06:02:d1:bc:2a:aa:c3:c1:9f:f6:e8:a5:8e:
                    06:63:d0:1d:20:f1:c9:3e:19:65:d1:3c:44:02:55:
                    1d:28:05:a8:db:9c:8e:4c:3d:13:11:16:e0:4e:3d:
                    f3:1c:62:2e:cd:a9:31:5c:4a:bc:f3:6b:4c:e5:d7:
                    d5:a6:85:68:ca:08:1c:fc:70:5d:82:9e:8e:10:85:
                    59:53:87:54:d1:12:1d:3a:d8:a4:97:0d:1e:fd:35:
                    e2:f6:05:96:e5:5c:fd:ae:65:3d:79:bd:1a:2f:96:
                    41:41:f8:8c:fb:d4:25:5f:07:f3:0e:49:5e:76:d6:
                    a9:11:2a:b0:24:91:35:8b:ce:00:bf:c3:bc:f8:c9:
                    20:d3:14:2d:8f:31:a9:58:19:5b:ac:e1:7c:f7:30:
                    62:6b:e8:30:a3:58:06:69:09:1c:d4:bb:d1:51:96:
                    95:55:0e:4f:4f:a7:24:dd:e5:e9:42:68:28:61:08:
                    c4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:92:44:BA:FE:F9:3F:D0:11:7E:BF:86:1A:08:1C:2F:27:52:60:00
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:82:13:c0:ff:02:c4:e1:48:b7:79:98:1d:71:36:37:ae:f0:
         40:04:41:34:0b:f4:7a:04:b7:c4:55:89:5a:23:03:e1:e5:c2:
         d2:34:ee:1b:ed:d7:50:87:97:19:20:e9:43:b0:e9:45:de:ba:
         48:a9:7c:67:7c:e1:a5:29:b7:d7:3f:50:4c:77:57:e7:1f:08:
         b0:15:cc:ba:2c:8a:50:c7:38:b2:92:de:84:83:55:f9:bf:75:
         5b:60:80:c5:39:fb:eb:83:19:1b:55:80:13:0e:54:6e:82:a5:
         11:d5:59:bc:a3:a4:ec:de:56:9d:a4:30:58:7e:b6:a7:f2:ae:
         6c:60:57:35:73:45:c9:ff:be:96:fd:75:17:a5:55:d3:8e:3e:
         fe:d0:13:5b:3b:39:f0:85:d3:ee:25:b1:77:3e:2a:88:31:b1:
         d1:9b:9a:49:7d:16:6a:4d:e0:d8:71:0d:e5:aa:7c:e8:fe:92:
         f4:2f:13:01:0a:53:2d:f8:4c:2e:8e:c5:f8:f0:d9:5e:9f:60:
         7e:50:28:32:c1:d8:7e:70:e8:25:83:f0:b8:c2:e5:35:04:19:
         95:a4:c2:2a:28:6a:30:8b:26:80:c7:87:51:96:1e:0e:f5:20:
         40:f4:1e:7e:9d:66:1a:dc:b8:76:26:31:43:7e:b7:7f:09:08:
         aa:e0:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:20:09 2025 by rpki-client