This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/669641e2-6613-40c0-915f-0c45280a8d19.roa
File:                     669641e2-6613-40c0-915f-0c45280a8d19.roa (raw, json)
Hash identifier:          GqMDnlwpDhQyGQ0uef+i5fPnFwuhe9/oeWabhadxn5I=
Subject key identifier:   B2:28:6C:05:56:BB:02:0C:06:0E:34:1D:7E:F0:C8:52:B9:C8:28:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7114C26DC602ABD68BEDBD610709A477CFDA4DDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/669641e2-6613-40c0-915f-0c45280a8d19.roa
Signing time:             Wed 26 Nov 2025 00:21:21 +0000
ROA not before:           Wed 26 Nov 2025 00:21:21 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.73.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:14:c2:6d:c6:02:ab:d6:8b:ed:bd:61:07:09:a4:77:cf:da:4d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:21:21 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=9387eeb500f221d3943ba72762c54bd947708f8c3fac6ce4288d2f9059d56806, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:84:a1:13:87:bb:cc:5f:fb:74:eb:5d:df:
                    e3:b0:5c:77:62:15:05:a8:1d:33:cc:95:2b:29:0e:
                    fe:9b:5f:1b:31:ce:30:bb:62:3d:a0:c5:aa:26:66:
                    94:3c:81:39:be:51:b0:e6:59:de:a5:91:3e:ed:22:
                    9f:e8:dc:28:4c:a1:1a:bc:54:87:17:c8:c1:7d:0f:
                    aa:0c:44:56:ef:bc:af:49:d5:71:df:8e:34:01:6e:
                    ef:dc:ad:f2:dc:83:4a:40:06:9b:1e:62:9f:34:4e:
                    f7:69:06:fc:18:aa:5c:59:b1:8b:f8:38:20:a2:51:
                    67:32:31:0f:15:a7:70:e0:e6:18:d1:46:d7:4b:e4:
                    78:84:dc:47:19:40:f4:a7:02:ff:bd:31:bd:9f:cd:
                    34:93:21:88:ad:d1:81:22:fb:17:e0:22:81:9e:e8:
                    fd:43:bc:e0:0c:67:db:12:e7:71:f2:95:01:97:d1:
                    b2:f5:62:26:a8:4c:a3:a1:31:90:fa:7f:3b:99:13:
                    1d:55:ac:8d:eb:82:9f:1d:fb:3e:14:f7:24:b7:dd:
                    24:5c:f2:61:86:b7:12:29:f5:ca:61:20:08:8d:d8:
                    a8:7b:9d:d5:ec:13:d3:96:10:10:be:ae:72:c9:96:
                    67:8a:42:ac:33:5e:83:8c:b9:de:bc:f0:cc:dd:41:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:28:6C:05:56:BB:02:0C:06:0E:34:1D:7E:F0:C8:52:B9:C8:28:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/669641e2-6613-40c0-915f-0c45280a8d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:32:6b:b3:b0:49:e1:f7:66:18:f3:39:0a:c6:51:7c:80:1b:
         75:15:01:35:b9:41:88:3a:07:b1:24:b9:68:eb:45:46:ef:c6:
         4f:35:a2:9d:39:3d:c8:5e:ea:da:94:4b:43:5c:f0:2e:3f:ac:
         46:6c:74:e1:9d:cd:6c:d4:ba:63:0a:1d:6c:dd:0d:77:c1:94:
         fa:47:02:15:e0:ef:69:29:df:69:b4:45:6f:51:76:48:28:2c:
         09:93:a1:ac:8f:3a:3b:b3:5b:d5:6e:90:46:b5:11:24:94:3f:
         68:1d:0b:24:66:c7:4f:14:b4:68:59:16:8f:7d:ee:14:2b:46:
         fa:0a:1b:4d:bc:ab:a3:b0:6d:43:e5:68:c0:e4:47:f1:31:4c:
         22:f1:92:68:ce:1c:01:a6:37:24:6e:10:20:fc:58:ea:0f:85:
         52:24:9d:01:96:3b:3d:e7:ed:36:7d:63:9d:13:f5:7e:46:fb:
         b5:aa:59:3e:e9:db:f9:61:d7:3d:c1:3a:ec:fe:66:0e:af:5b:
         fb:7b:9c:81:d8:93:a6:f0:8b:b8:3c:0e:8a:26:0d:fe:e7:12:
         20:31:20:2f:eb:f8:18:0a:0c:13:3a:4f:13:6a:2d:4a:05:d9:
         79:6c:64:7b:c4:7e:1f:e7:11:c1:a0:3f:0d:1a:65:0d:02:93:
         19:c9:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:28:53 2025 by rpki-client