This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6776af38-515d-4b33-bc1f-9f781cacf369.roa
File:                     6776af38-515d-4b33-bc1f-9f781cacf369.roa (raw, json)
Hash identifier:          a+A0mO0Q0LyBapzQ6Pvmgyn9q49HtKRSRsjpSPW4YN8=
Subject key identifier:   7B:2B:8C:C4:D6:C4:36:F0:EF:A8:5A:06:B5:F7:9D:AB:0B:1C:A4:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3603F731097D9E14C308FF3D96104662B300BDD7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6776af38-515d-4b33-bc1f-9f781cacf369.roa
Signing time:             Sat 06 Dec 2025 02:30:13 +0000
ROA not before:           Sat 06 Dec 2025 02:30:13 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        107.20.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:03:f7:31:09:7d:9e:14:c3:08:ff:3d:96:10:46:62:b3:00:bd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 02:30:13 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=18ba7ba0e3e2bd936a69c854d24c173fdc0260df3d9418ec5cdb9ad3657c0868, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:f7:d3:8c:f4:f9:06:19:77:c3:0b:64:6e:
                    27:53:05:de:40:11:69:95:0e:94:d3:b1:06:8f:e5:
                    52:ee:2b:b9:18:66:9d:7e:a1:54:a4:be:35:dc:01:
                    ff:a3:8b:d5:ed:ee:7a:93:7a:05:71:b3:ba:cc:cb:
                    4b:76:db:45:d6:15:df:b2:36:9a:d0:aa:a9:b3:73:
                    d7:55:f7:0b:a0:46:06:44:47:9c:f2:70:0a:59:b8:
                    60:04:bc:c8:d4:42:7d:21:90:06:7d:01:8d:f3:e2:
                    8d:c9:35:bc:e3:ff:cc:4d:c3:26:bc:d7:16:57:98:
                    7d:b5:72:4a:c8:17:fd:c0:4d:50:25:52:35:5c:a3:
                    7a:fa:b8:fa:92:92:ac:f0:c9:fb:f0:e8:b1:af:32:
                    d2:2f:01:4c:a2:a4:81:16:b8:cf:a4:7a:db:5f:b7:
                    90:2d:e7:b7:22:c3:dd:f1:f0:dc:2f:88:b6:cb:e1:
                    d3:64:7b:2e:05:0a:64:c7:fe:9f:32:e1:d7:e9:68:
                    c2:ea:78:d5:65:98:23:94:e5:7b:e7:77:cd:47:e9:
                    f6:6e:4c:eb:10:7f:66:78:9b:ef:7f:e4:bf:a9:73:
                    a3:e9:cb:6a:d2:73:f5:56:9b:db:49:f6:1b:b1:f3:
                    c7:46:80:2e:52:77:e2:9e:52:db:f5:2c:23:7b:c5:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2B:8C:C4:D6:C4:36:F0:EF:A8:5A:06:B5:F7:9D:AB:0B:1C:A4:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6776af38-515d-4b33-bc1f-9f781cacf369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.20.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:73:4b:19:7d:3e:79:74:41:f2:a6:79:3c:ac:b1:9c:f4:38:
         fe:99:2e:a5:6c:2a:2f:1d:70:62:55:9d:37:b3:76:3c:b9:37:
         ce:9a:0a:93:4c:7d:29:c6:d8:98:93:95:35:d4:26:5e:54:b6:
         aa:5d:1d:5f:f6:ff:12:90:44:6d:d5:5c:d0:b1:f1:31:26:b4:
         ba:b1:73:a0:55:ba:4f:16:94:4c:d4:eb:e3:3b:30:82:a6:12:
         a3:5f:8b:3b:bf:99:37:e6:d7:7e:5f:77:52:0a:07:6d:91:32:
         42:45:24:f3:a1:93:65:c6:99:4c:db:c0:8b:96:b8:e0:e5:fd:
         e9:d3:61:24:6d:5e:72:ad:0f:99:68:63:f7:9b:8b:6b:e6:8f:
         31:3b:f4:e3:4e:29:62:a0:68:5f:f6:dd:3d:68:41:50:f7:eb:
         08:e8:52:5f:d5:cd:38:51:46:a0:85:e6:e0:b6:97:ba:91:a0:
         ba:ac:b8:8c:aa:b3:58:cb:73:89:83:48:81:6f:8e:cf:bf:88:
         24:de:75:35:62:f1:7c:dc:83:8a:ca:0c:f0:cf:01:61:1e:3a:
         b5:3f:ba:0e:9d:ed:bd:36:92:42:54:d8:bb:75:21:13:56:0b:
         7b:6a:ec:41:9f:6a:a8:75:ea:16:8e:5f:c7:b2:9b:1c:27:d6:
         14:21:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:04:27 2025 by rpki-client