This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa
File:                     659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa (raw, json)
Hash identifier:          Fqk8vJoPK1za0crFJL5Cd0Dx5a+V32iOEEDZ9sKd1Ow=
Subject key identifier:   6E:2B:19:BA:F9:E8:77:DB:B9:DD:C4:49:E8:D1:6C:2C:F9:40:6D:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74DD48BBAB3AE45AB8935F6F1C6C9BA07A56421B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa
Signing time:             Thu 27 Nov 2025 00:11:09 +0000
ROA not before:           Thu 27 Nov 2025 00:11:09 +0000
ROA not after:            Wed 25 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.11.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:dd:48:bb:ab:3a:e4:5a:b8:93:5f:6f:1c:6c:9b:a0:7a:56:42:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 27 00:11:09 2025 GMT
            Not After : Feb 25 23:59:59 2026 GMT
        Subject: serialNumber=e1da63f9b478683955ffa15eebef19089b4a1cf0821b1351281468fa3db0f9ce, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:80:53:d0:e8:a2:1e:2a:c7:ba:1d:43:47:
                    65:2a:8b:d2:9d:b8:2b:c1:c5:27:ff:76:11:aa:a7:
                    b2:61:72:56:32:25:ea:47:bb:21:f6:2a:58:71:30:
                    ed:03:88:ae:c0:b5:95:04:3f:bd:63:f7:7e:85:01:
                    00:a7:26:e9:2a:fc:49:c2:01:59:e4:db:2e:28:b2:
                    0a:92:fa:eb:82:48:32:30:62:3e:b6:45:d6:44:61:
                    77:ea:03:79:b9:3e:70:17:55:a8:09:b6:cb:aa:78:
                    74:ec:ee:26:4f:25:32:f6:e1:68:9b:fa:1e:cf:fd:
                    8f:7f:be:b5:77:9d:4a:b9:07:d1:62:63:9e:41:04:
                    43:f0:03:b6:90:aa:3f:4b:43:8a:1b:f9:2d:41:f3:
                    75:fc:53:8d:eb:e5:cd:2a:0c:09:eb:d2:92:6a:6c:
                    b0:a2:ea:7f:d1:d2:db:1d:0d:37:0b:53:d0:a5:21:
                    7d:14:b7:15:f1:8e:58:5c:79:23:85:d5:0b:b8:e3:
                    8f:8d:f4:ae:0e:5a:6a:e1:a4:69:35:00:25:7f:99:
                    ad:e3:3a:e6:ba:5e:a5:c5:0a:29:1a:07:07:d9:7a:
                    6f:b8:fd:7c:57:31:fe:67:d3:b9:f8:07:6a:88:1b:
                    f4:5b:3a:49:30:f3:ef:3d:42:aa:e1:f6:c0:90:5d:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2B:19:BA:F9:E8:77:DB:B9:DD:C4:49:E8:D1:6C:2C:F9:40:6D:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.11.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:f5:62:12:2c:a3:81:5a:bc:b6:f1:38:74:9a:7e:53:c3:ca:
         1e:0e:6a:e3:34:3d:ec:2f:cc:29:71:83:6e:f4:c8:d0:d5:15:
         92:d8:ab:be:94:4d:fe:f4:26:23:5c:31:b4:10:99:31:52:67:
         7c:a5:fc:97:e8:ad:15:1e:3f:08:67:1e:72:ae:44:42:cd:33:
         39:a8:e5:e8:b1:f9:92:38:f4:28:80:0a:15:31:14:b5:02:0b:
         d3:8a:99:3d:2a:00:5a:f1:db:6e:96:c0:5b:26:df:1a:d5:b2:
         db:af:e8:8f:d2:cd:44:f8:79:35:28:0f:b8:1d:28:ef:4c:ec:
         70:e1:08:82:da:75:1e:8a:6f:98:43:f0:be:ed:18:99:14:27:
         a6:78:95:1a:77:fd:f6:ba:04:62:42:88:eb:b4:e4:92:93:20:
         fc:b8:ea:be:41:b7:bd:9c:7b:4e:d6:ad:cd:88:7e:67:83:26:
         69:df:43:f2:c7:4b:81:41:b4:5d:52:9a:92:69:af:a3:96:c5:
         6f:ca:2a:e2:bc:cf:03:f9:1d:5d:b7:90:5a:a2:c6:78:d2:00:
         a5:97:df:0c:d7:b4:e1:1c:85:25:d8:c7:66:af:8c:dd:11:33:
         45:05:d0:06:c5:bd:24:35:84:57:86:09:8e:a0:7c:69:52:27:
         a1:ec:e5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:40:39 2025 by rpki-client