This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/646c43c0-5fb0-40e1-9466-05bdc0cdc3f1.roa
File:                     646c43c0-5fb0-40e1-9466-05bdc0cdc3f1.roa (raw, json)
Hash identifier:          CZN4PVZgqJbi95cxyDLoqNvHbjAWJj4/xRe5UiILhEI=
Subject key identifier:   12:7B:6A:3B:41:B1:B1:B2:6A:10:3A:77:B4:3C:29:5C:82:2F:C1:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0527A47568C9A89F2178D17F29C38AE487CF1D09
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/646c43c0-5fb0-40e1-9466-05bdc0cdc3f1.roa
Signing time:             Sat 06 Dec 2025 01:00:27 +0000
ROA not before:           Sat 06 Dec 2025 01:00:27 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        174.129.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:27:a4:75:68:c9:a8:9f:21:78:d1:7f:29:c3:8a:e4:87:cf:1d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 01:00:27 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=c71f2f44da5124c57ea002a4541dacb769e8d283739748a4b68c0d2d9c220fb6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:5e:f0:57:f2:41:78:65:a6:68:b2:96:92:
                    64:3f:0b:0f:fd:fc:de:56:eb:33:97:d6:1a:c5:00:
                    ff:fa:07:62:1c:25:1a:8b:c0:f8:d8:8a:c6:93:f1:
                    bb:6f:9c:e1:ef:cd:a8:23:94:8b:f1:31:b7:7e:93:
                    20:a7:6e:fe:2f:cf:4e:c4:ef:4f:87:21:81:94:dc:
                    50:10:57:30:be:18:0b:c3:95:2f:27:d0:cd:db:ce:
                    18:0a:42:56:b5:0f:10:87:b5:69:a5:eb:3d:04:72:
                    2f:f3:bc:30:d3:dd:b5:87:61:27:30:f0:bd:b2:bc:
                    77:0d:df:cb:26:f8:80:63:0d:c3:96:ab:42:f9:29:
                    8f:75:b2:c2:41:3f:a3:fd:e4:57:24:c1:83:51:59:
                    24:f8:29:8b:cf:88:03:88:68:ef:57:b4:35:22:8a:
                    72:2d:1b:3c:32:a4:33:25:48:0a:d3:11:7c:0f:f5:
                    6f:43:6e:0d:c7:d0:49:0b:0f:74:9e:6a:e6:84:d1:
                    7d:ec:91:90:aa:db:ec:00:74:cc:73:de:16:31:52:
                    bd:c7:da:71:17:82:db:20:0d:06:47:ce:64:66:de:
                    8a:85:0d:c1:84:77:ff:4e:fe:24:b5:e6:c3:d0:3b:
                    e7:89:50:e3:51:7e:5f:2c:88:05:fb:6a:13:0d:27:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7B:6A:3B:41:B1:B1:B2:6A:10:3A:77:B4:3C:29:5C:82:2F:C1:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/646c43c0-5fb0-40e1-9466-05bdc0cdc3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.129.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         cb:f9:02:d8:23:56:f9:0f:d9:28:9b:87:12:16:f2:02:87:c5:
         7d:44:97:1d:89:f7:ec:0a:15:70:40:ab:05:57:6c:9e:5a:4a:
         d3:61:d7:0b:eb:3c:75:22:62:49:3c:3c:3f:e3:2b:75:51:4b:
         87:9b:8b:bc:2c:02:58:9a:02:8a:4c:c3:b2:bf:66:45:c4:eb:
         07:00:b2:77:31:c8:1c:2f:05:2c:bc:25:ea:b3:59:02:62:48:
         12:63:d0:86:76:67:2c:f4:7a:1c:a6:fd:a6:4e:6a:91:b1:78:
         5a:67:ad:91:a2:c1:a6:df:c9:1a:35:cf:39:c2:ac:e6:76:64:
         28:ac:94:bb:73:ed:e8:dd:d9:5b:5e:56:69:88:30:83:89:f5:
         24:d6:a8:ba:d3:d2:4d:a0:08:11:e3:66:1e:4b:35:fc:80:22:
         a5:b3:d3:69:3e:2e:16:b6:b4:ea:49:be:fd:6e:ad:34:76:ea:
         a9:64:45:f8:5c:81:f4:b3:22:1d:92:a9:78:09:11:09:ce:ae:
         b7:e5:ac:c2:b6:d1:5d:de:8e:00:cb:94:f7:3c:c1:53:b9:d5:
         1c:c2:09:f4:73:eb:5a:77:5f:e4:c2:23:9a:87:ef:b7:38:9e:
         7d:01:71:aa:b4:c8:b2:29:5d:1a:0a:38:16:09:49:be:97:17:
         88:0c:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:49 2025 by rpki-client