This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a8d54a7-4b7c-4847-8577-5c3e11cd8456.roa
File:                     6a8d54a7-4b7c-4847-8577-5c3e11cd8456.roa (raw, json)
Hash identifier:          VVLKjxGon/mzYXKIimxxGRyHR4F/YwRUzMa/pvuV6PQ=
Subject key identifier:   7D:9E:07:15:F6:A7:57:D0:CA:7E:71:E0:DC:F1:14:F2:79:3F:C2:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D2EF36F19A1C395E7CB995FC359965D61402BB0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a8d54a7-4b7c-4847-8577-5c3e11cd8456.roa
Signing time:             Wed 03 Dec 2025 01:40:07 +0000
ROA not before:           Wed 03 Dec 2025 01:40:07 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2e:f3:6f:19:a1:c3:95:e7:cb:99:5f:c3:59:96:5d:61:40:2b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:40:07 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=8e0201db6d10aa2bc5ca5be05d43854349207e1e0d00b3bae6e0cbf2d8fd76f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:a8:45:84:dd:8b:e0:5f:c3:e6:73:46:62:
                    74:44:8c:10:c7:34:18:c9:00:fd:36:88:cb:fc:e2:
                    7a:27:7c:fd:7d:88:e3:76:b0:9d:e4:ee:cb:fd:71:
                    8a:49:a5:20:7c:61:f4:97:b9:da:f2:25:3d:dd:57:
                    92:b6:42:dc:51:a7:dd:31:27:15:02:8b:37:ec:f7:
                    38:13:dc:34:03:35:3b:30:c5:dc:e4:ee:e2:4c:2e:
                    75:70:78:76:ed:0a:69:c3:eb:ae:b4:a9:f3:2f:9a:
                    bb:e1:9d:7f:20:e9:aa:74:44:26:25:7b:fd:a1:27:
                    6a:80:8d:87:a0:bd:d6:c9:04:da:55:a7:c9:c2:c5:
                    5a:27:62:46:f9:e5:b6:13:21:60:ab:b4:88:b6:19:
                    50:a6:18:f9:d9:f7:fd:7c:8d:54:6c:c0:34:b9:31:
                    82:25:20:b1:69:55:d3:85:74:bd:38:7b:bd:de:4e:
                    d0:e5:d2:91:1a:1d:e0:ee:47:40:09:24:b3:6d:92:
                    69:73:a7:2a:b4:eb:c9:63:46:fe:ca:eb:6b:fa:94:
                    d4:42:3f:79:66:81:83:df:3a:b4:66:80:3a:66:62:
                    7c:dd:4a:6e:7a:93:92:7a:a6:0d:63:3e:c4:cf:94:
                    b1:46:31:ff:8d:3e:c1:62:a1:58:53:53:91:c0:c4:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9E:07:15:F6:A7:57:D0:CA:7E:71:E0:DC:F1:14:F2:79:3F:C2:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a8d54a7-4b7c-4847-8577-5c3e11cd8456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:fe:03:30:9c:57:97:31:c3:9e:09:3a:8e:4c:ce:59:45:bf:
         f3:60:2b:cc:fc:0f:ca:0f:8c:4f:12:db:fa:ce:b0:38:44:39:
         d7:07:cc:64:8c:92:2e:ea:80:31:57:91:79:31:65:fb:90:8c:
         c7:11:ca:30:d3:bc:37:7b:46:63:a0:43:63:b0:17:af:e6:2c:
         04:ca:34:3e:6d:1f:75:a7:1d:ce:b5:7d:1d:ff:4a:6e:a9:9e:
         bb:34:ac:d1:9c:59:de:e8:33:9f:3b:2f:1c:35:4c:23:61:f8:
         6d:72:78:88:5c:03:4e:65:a5:d4:9b:e9:1b:bb:ef:15:53:df:
         bb:fc:a5:df:db:6a:cd:e7:8f:aa:f2:d9:13:75:47:c1:f3:79:
         0f:e9:72:3f:84:3b:56:78:2b:c3:1a:7e:b7:7d:90:03:8b:3b:
         50:c1:94:f0:cc:84:45:f0:f2:e9:14:d6:11:4c:88:11:f3:93:
         05:88:36:e4:7d:eb:93:90:fd:90:b5:b8:8c:a1:c0:84:f2:5c:
         45:71:bf:fa:38:08:73:6a:a0:a8:b0:3b:df:79:b4:57:09:e6:
         7a:1c:a7:a7:2d:c4:99:ed:8b:82:36:a6:55:a4:c9:42:9d:2f:
         ce:50:e5:9e:20:8d:83:1a:98:59:bd:18:34:c5:f7:f8:f0:7f:
         43:f8:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:24:07 2025 by rpki-client