This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627c9ff0-447f-45b4-afd9-e0ecbd167a97.roa
File:                     627c9ff0-447f-45b4-afd9-e0ecbd167a97.roa (raw, json)
Hash identifier:          RnsmwcLX6Srjw9Y/HAGjAOnRsvNWXicMbloTxlBvNOc=
Subject key identifier:   A3:2C:A5:0D:AE:5B:41:01:16:EB:D1:94:91:87:45:7E:BC:60:17:64
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1872334755A9653BE4703FF91A16308E87F53A29
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627c9ff0-447f-45b4-afd9-e0ecbd167a97.roa
Signing time:             Sat 06 Dec 2025 00:31:01 +0000
ROA not before:           Sat 06 Dec 2025 00:31:01 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        121.91.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:72:33:47:55:a9:65:3b:e4:70:3f:f9:1a:16:30:8e:87:f5:3a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 00:31:01 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=a50a17a6d77294c5574800d05cb9566a3d70df1f49f05c1e16d0a04fc80e6bcf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:58:08:c6:58:34:34:d2:de:68:0b:01:a3:1f:
                    96:aa:31:ea:e9:d8:5b:1d:6c:02:d7:91:e3:5d:22:
                    f1:16:87:0b:04:f0:1b:55:99:ee:68:39:21:22:af:
                    33:c7:3f:e4:5b:85:dd:04:c5:5d:5f:05:7d:e3:80:
                    2f:cc:bf:b2:d4:dc:48:b0:40:a3:00:51:8f:c4:ca:
                    31:21:aa:f3:08:6a:0a:07:bd:72:bb:72:b9:39:2c:
                    25:90:ce:5d:bb:6a:3b:73:2e:bc:73:9e:6b:18:81:
                    a9:8e:1b:0c:0a:5a:db:cd:3e:bd:b4:23:f0:fa:23:
                    09:21:ce:53:ad:5c:78:2f:1d:ac:2f:6c:c5:91:46:
                    74:5b:fd:7a:48:51:55:9c:d8:11:08:74:47:fd:87:
                    72:ec:f7:bb:bb:5d:bf:2b:18:8f:45:a7:56:ea:2a:
                    d7:e5:e6:45:07:fe:2f:74:8a:c3:bd:1c:8b:75:40:
                    ff:76:7f:a9:ce:f5:94:11:48:41:0e:02:e8:8c:04:
                    13:2e:9e:50:c2:a9:7f:98:f8:47:44:dc:42:65:ba:
                    62:d5:64:8e:2c:15:ff:c8:1b:85:db:75:8c:58:7d:
                    f8:99:c2:a1:a9:b9:2a:b8:e8:97:b0:e5:5e:2e:c8:
                    b3:1a:f9:26:c8:ef:46:a3:30:33:d2:eb:66:bf:77:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2C:A5:0D:AE:5B:41:01:16:EB:D1:94:91:87:45:7E:BC:60:17:64
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627c9ff0-447f-45b4-afd9-e0ecbd167a97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.91.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:83:1f:47:48:0a:38:9e:55:ea:bc:96:43:6e:87:e9:04:be:
         fc:7c:8d:d6:9d:bc:45:27:b7:bc:0a:93:78:95:27:0b:e7:2d:
         79:5d:82:fe:fb:24:ee:22:4b:fe:5e:d6:2a:14:a0:82:c6:c4:
         f6:94:9f:ae:ec:e0:b8:bd:97:82:51:eb:72:e6:79:ed:0a:f4:
         b9:36:31:44:0c:7a:09:b3:b4:97:36:7c:aa:a0:c7:2f:8c:9d:
         e2:92:48:36:8e:b9:f4:1d:46:79:ac:4e:b6:5b:16:8a:a4:88:
         6a:a3:d4:8c:50:d4:8d:61:47:bd:80:24:d5:af:cf:3a:3b:f4:
         41:80:af:46:55:a1:a7:5e:90:93:40:86:75:6c:39:21:51:b9:
         e9:e2:5c:f6:aa:9d:44:cc:0e:c4:d6:de:bc:b8:a4:88:39:93:
         50:8c:98:e1:81:16:1f:d8:68:96:2c:21:29:db:b1:58:a6:3f:
         91:dd:24:2e:f4:3f:de:5f:8d:d4:44:37:16:c4:8b:8d:6c:75:
         0d:b9:51:90:f6:25:74:c3:45:fc:14:de:af:29:a6:47:c1:98:
         fb:7b:47:92:01:e1:5d:ef:bb:7e:a4:ae:0d:ac:38:d1:e2:8d:
         4a:3b:2a:cc:3e:73:49:2c:db:f2:54:cf:dd:7a:a9:51:ec:e6:
         4c:71:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:32:32 2025 by rpki-client