This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa
File:                     6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa (raw, json)
Hash identifier:          34t0//q4x39GBI50OfZUqSsMRr3I9yuBoqHUl2ViGTM=
Subject key identifier:   4D:AE:3D:48:35:DC:4E:12:15:5E:A5:B4:5A:C6:AF:35:6C:33:F2:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BC04965E89B8CB7F75503CF2F432172F043AC8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa
Signing time:             Wed 26 Nov 2025 00:40:12 +0000
ROA not before:           Wed 26 Nov 2025 00:40:12 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.19.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c0:49:65:e8:9b:8c:b7:f7:55:03:cf:2f:43:21:72:f0:43:ac:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:40:12 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=9ca6cf94c63994147a1e896dfc64606ba47bd6d8700336c4ea4b1b274197a8a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:e7:a1:14:b5:c8:f7:e2:08:56:4c:b1:c6:
                    8b:d9:98:2f:3e:54:67:a6:ff:96:ac:bd:87:f1:1a:
                    88:5a:88:2c:75:fc:98:90:cb:94:25:6c:7d:e9:30:
                    ad:43:47:90:b0:80:bb:51:d7:0f:32:43:49:e7:42:
                    c8:b2:5b:14:92:cc:f7:7e:35:b4:39:da:78:f3:28:
                    80:42:32:ee:96:29:d5:1f:cc:65:28:34:95:b5:cf:
                    28:56:1a:e5:fc:ca:70:1a:8f:fc:88:e7:e3:00:ba:
                    c2:69:fd:2c:6a:68:d7:85:96:4d:e0:39:e6:d3:8c:
                    5a:9c:9d:25:53:6c:a2:25:2e:11:73:92:04:49:bd:
                    84:b2:0a:b3:1a:9d:a9:ea:ab:93:41:8c:f5:9b:c1:
                    3a:9f:3c:25:5b:47:b9:41:79:d1:98:49:8a:2d:ed:
                    23:eb:35:c2:0b:9a:fc:f2:7a:71:c3:cb:56:b1:e5:
                    11:6e:81:65:b9:ec:d3:48:73:a6:f6:34:95:1e:99:
                    31:c0:3e:58:e5:83:ec:8a:74:3a:fd:8a:e6:29:41:
                    1a:04:24:72:4f:4f:23:d0:17:df:c6:a6:63:21:8b:
                    5f:4a:02:fe:e3:fd:98:bc:c9:04:c4:9b:e0:67:59:
                    e6:c6:3b:8e:7d:66:0c:86:79:42:e0:8d:5b:ef:a7:
                    35:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AE:3D:48:35:DC:4E:12:15:5E:A5:B4:5A:C6:AF:35:6C:33:F2:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c5:c7:45:49:c1:39:91:e8:cd:ab:fb:08:3a:28:58:11:73:4b:
         3c:5c:c6:5b:cb:b3:49:bf:7e:9b:4a:e6:aa:f0:68:07:e8:17:
         e9:9f:04:06:6a:f9:96:10:06:a1:27:71:f6:af:8a:ec:b3:e2:
         2c:c1:f6:06:16:94:2f:0a:99:1e:f6:73:fc:58:76:e1:a3:05:
         52:5e:38:56:4f:ea:82:8b:a0:16:a0:79:b0:66:5f:fe:50:30:
         ff:08:19:c2:c2:12:06:ff:07:76:b5:8d:06:e1:82:6a:fb:cb:
         eb:68:32:45:3f:ac:41:b7:44:90:e8:7f:7c:b4:91:3d:30:69:
         80:14:de:1f:75:d9:b0:87:c9:ac:eb:94:87:ae:3e:62:a6:a0:
         e7:e6:ef:cd:12:81:fc:17:f0:5b:16:f4:3f:11:5d:42:d4:33:
         19:bf:ae:b2:d0:e9:57:48:4e:ad:4d:f8:9b:45:5a:dc:11:ba:
         63:a2:19:85:4d:42:3c:e9:3e:23:60:7c:f8:3d:bb:0a:6d:b4:
         42:81:64:92:f1:1a:da:f9:c5:53:26:1d:ba:8a:6e:be:3f:6e:
         a3:9d:b9:63:bd:e6:2a:ee:de:a2:1f:31:2f:ab:94:60:dd:db:
         33:72:c1:fd:7e:a3:c7:69:4c:c5:48:fd:bd:e5:3e:a9:b6:2f:
         4e:de:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:29:42 2025 by rpki-client