This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6751dc8c-51d5-4081-86c9-7c06c81aac98.roa
File:                     6751dc8c-51d5-4081-86c9-7c06c81aac98.roa (raw, json)
Hash identifier:          /XCjJONk5cP1k3k3hDtil5vrMuteqJwh7ip4YOZxzmE=
Subject key identifier:   69:6E:68:60:31:65:16:9E:42:E7:6F:2E:A8:61:34:60:76:B8:91:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47BF2AC31AE4B82F4E95AA49EACD10D1297B6FC5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6751dc8c-51d5-4081-86c9-7c06c81aac98.roa
Signing time:             Tue 25 Nov 2025 00:21:04 +0000
ROA not before:           Tue 25 Nov 2025 00:21:04 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.17.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:2a:c3:1a:e4:b8:2f:4e:95:aa:49:ea:cd:10:d1:29:7b:6f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:21:04 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=55854c2010073eea86dc546f49f92487a702cdc36d1cb56c2efaf7ad157a504d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:ce:1c:6c:0b:fa:f9:67:98:66:ee:5e:c8:
                    7f:8d:52:0d:4d:ef:82:2d:6b:64:76:fb:42:43:6c:
                    90:a3:e3:8d:c8:da:f4:da:cb:11:f6:84:fa:9c:bf:
                    76:7f:a4:a9:b0:df:6f:7b:d5:6d:fb:a2:8b:f3:9c:
                    f5:4c:f6:9a:eb:cd:c6:75:68:89:8e:1b:d1:5c:a7:
                    8b:a6:fa:39:27:0c:72:a7:32:f9:1a:37:61:a0:e4:
                    92:b0:db:bd:08:7e:6d:dc:95:dc:9b:a5:99:53:0d:
                    2c:7f:37:8a:53:52:9c:fe:cd:18:85:fb:72:d9:bc:
                    ba:45:45:43:43:8d:c3:2c:70:b4:21:e6:a3:5e:76:
                    fe:2a:6f:d6:21:d8:fd:fe:94:9b:65:85:fc:3d:27:
                    29:0e:a5:58:c8:9d:e8:31:81:1a:9b:77:cf:9c:8a:
                    d8:6a:34:c8:c0:a1:d2:8a:ff:c9:f7:40:11:05:43:
                    24:98:30:82:8c:53:a0:6b:d9:b8:bb:6a:79:a9:00:
                    0d:d9:b3:01:6f:61:33:d8:85:55:76:dc:26:ca:07:
                    6b:71:6a:c0:7f:53:1d:fd:a8:15:85:3e:96:c1:ef:
                    52:d1:26:c8:b9:7e:39:6b:1b:3e:89:78:d1:ec:60:
                    c8:09:0d:85:ee:6e:cc:d9:5e:0a:d4:69:9e:b9:36:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6E:68:60:31:65:16:9E:42:E7:6F:2E:A8:61:34:60:76:B8:91:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6751dc8c-51d5-4081-86c9-7c06c81aac98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.17.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:4f:37:1e:a9:a4:3e:85:fc:a9:5b:b8:da:27:6c:eb:01:
         5f:98:c9:e1:bf:35:bf:27:14:51:dd:70:67:59:15:68:77:be:
         b0:cf:5d:b2:e3:e9:32:3e:0a:96:49:73:82:79:d2:37:63:96:
         f2:01:ea:ef:6d:ea:f0:eb:13:9f:ee:a8:ec:62:9a:a5:c8:b2:
         6f:e3:4b:54:f3:02:2b:84:38:8a:45:89:b4:ff:6e:7d:0c:30:
         47:dc:16:ff:fd:5c:8f:22:d6:cd:52:4c:74:0e:9b:e5:1d:95:
         06:1d:80:a3:95:9d:16:ee:b3:30:98:91:28:e2:f6:c5:2b:7f:
         a2:e1:bb:48:44:00:11:7a:7a:bf:c5:d0:c8:17:2f:fe:3a:15:
         be:f4:9f:28:24:79:44:66:8a:0a:fc:a5:44:cd:51:66:3c:93:
         bb:7f:4e:7d:7c:53:07:37:7b:bb:04:2f:ab:a2:62:27:f1:27:
         50:25:75:ae:d2:c7:03:16:ba:58:de:5a:92:9c:e3:fd:c7:c0:
         1b:d6:58:ed:e3:e9:97:0d:c1:f3:fb:af:c6:47:90:6a:ef:3b:
         9f:1b:90:81:67:e4:ee:2e:99:49:6d:ec:87:4e:ce:69:d8:89:
         ff:05:78:c5:da:f5:ef:ed:8b:be:94:cc:45:62:a3:c0:ca:91:
         7e:f9:09:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:34:56 2025 by rpki-client