This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa
File:                     6928a406-38e7-41d6-a4c4-6665e62bdcea.roa (raw, json)
Hash identifier:          DKCa0u7FpWFwmf3vcwJ8ItqKvYe9iO4w/16//xp+d1k=
Subject key identifier:   C8:3A:3B:9B:40:6D:EF:5E:BC:F1:40:41:FC:9F:97:1F:C9:04:04:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5746133A7063D31200BEE4DEB0225E85C325CA81
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa
Signing time:             Tue 25 Nov 2025 00:50:59 +0000
ROA not before:           Tue 25 Nov 2025 00:50:59 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.144.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:46:13:3a:70:63:d3:12:00:be:e4:de:b0:22:5e:85:c3:25:ca:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:50:59 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=f63e7262a5ff912e1f5ecb77f67fdd5b0d3f132e89a16670417e5dd41b36de1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:3d:89:13:04:9a:15:1b:6f:59:42:b4:56:
                    76:68:40:fe:51:e2:2f:99:75:7d:50:82:d2:29:9c:
                    b4:3e:ed:77:b8:60:5f:09:6e:82:0d:f9:8d:3c:3b:
                    9e:4d:76:1a:41:bc:c0:ca:03:ba:42:f1:16:d7:52:
                    fc:fe:cc:0a:00:12:56:70:74:e5:0c:53:a5:7d:5e:
                    1f:7c:5b:ad:f8:c1:1b:80:50:77:dd:05:dd:e9:93:
                    0d:b8:f2:eb:04:91:6c:99:81:a9:4c:a2:0e:d8:8c:
                    81:d2:9c:51:43:2f:1c:21:a2:de:3b:53:88:d0:95:
                    80:d5:4b:cd:8f:14:90:72:cb:27:26:6b:70:44:72:
                    0d:2a:a3:e0:ba:2c:30:cb:20:dd:1c:dd:1c:67:66:
                    7f:d8:1f:76:4a:1e:9d:1d:f2:af:9a:69:13:7d:db:
                    0b:ef:62:68:68:34:75:1d:07:e0:f2:e4:d6:4a:54:
                    64:43:85:be:5d:cf:7f:62:91:c4:e1:24:3d:c5:27:
                    7e:ea:8d:ad:8d:b4:11:1d:ea:fe:55:02:ff:e9:d7:
                    25:db:c1:ed:f3:f3:80:af:b7:27:91:a8:69:28:88:
                    45:91:cb:f6:02:f9:9d:bd:de:db:28:51:33:4b:44:
                    c8:99:c8:41:32:c7:ce:d0:08:7b:7e:0b:f1:47:2d:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:3B:9B:40:6D:EF:5E:BC:F1:40:41:FC:9F:97:1F:C9:04:04:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.144.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:5c:25:e6:43:4d:7b:de:77:1d:28:f1:cf:08:79:35:25:b5:
         18:77:dc:36:d2:0e:3d:27:b7:6f:d4:3f:83:50:46:51:47:61:
         52:dc:78:78:c8:72:e0:7e:ca:af:0f:cb:67:39:e2:99:5d:a1:
         61:ea:6f:7d:df:ad:66:c2:6f:73:e1:ee:92:65:18:60:c0:dd:
         d1:e4:96:93:29:61:5f:28:27:a3:06:45:99:c7:61:24:0f:72:
         1c:87:03:6a:3a:83:5a:11:2c:32:98:8c:51:29:23:77:0e:2e:
         fd:50:0a:09:ea:dc:a7:14:b3:a7:f5:72:5c:78:3a:aa:22:37:
         c8:97:23:bc:8a:6f:01:09:ef:9a:19:ed:61:cf:9b:fb:ec:14:
         f6:a3:3d:56:dc:e5:6d:df:50:d0:7b:84:9d:ec:9a:62:78:3d:
         69:52:1e:33:e9:ee:5e:6d:ec:9b:7e:4f:ea:90:90:d6:b8:41:
         2a:9a:a0:a4:fb:59:00:a7:49:7f:1a:bb:30:45:b3:e1:87:e7:
         6e:fd:f7:1f:2e:54:71:bb:b7:39:84:49:20:a5:b7:a2:72:2c:
         33:57:9d:b8:f7:3d:a1:be:24:40:c6:17:a5:65:96:6f:3b:91:
         b7:9a:ba:78:4f:81:3f:eb:ed:f0:c5:c2:b1:57:09:ba:5e:f8:
         be:68:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:16:08 2025 by rpki-client