This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa
File:                     738b308f-965a-4ab8-a5bc-e6af6f74131b.roa (raw, json)
Hash identifier:          RCVlsxYYCvQrRdQfMc8VDGvJ471N1fzZlsNzZFTVQMI=
Subject key identifier:   35:32:60:E0:1B:89:ED:84:E1:57:71:BC:3F:C8:90:8D:2F:04:D1:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F16624739A7C59014BB574A157BDCCF13509DC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa
Signing time:             Sat 06 Dec 2025 01:41:15 +0000
ROA not before:           Sat 06 Dec 2025 01:41:15 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        107.21.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:16:62:47:39:a7:c5:90:14:bb:57:4a:15:7b:dc:cf:13:50:9d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 01:41:15 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=27dd727f678fb900a4033d3b45f57e01e1655021796ffbf04683b5bfca993e5a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:4e:c0:de:85:6d:4f:3a:fd:e6:a6:c2:cf:
                    22:31:87:ca:d2:6c:42:37:fd:e7:f1:da:e0:10:df:
                    8f:e1:f7:7f:4f:69:61:67:e3:bb:12:14:27:2d:4c:
                    55:80:3a:08:0e:9a:01:7c:d6:59:a0:cd:35:f4:22:
                    36:3f:35:84:2a:52:ae:2b:45:f0:e4:87:43:19:93:
                    93:92:47:31:aa:52:ed:6e:89:60:9f:dc:6b:12:a2:
                    05:86:19:dd:d9:df:50:01:c1:48:3e:0a:8a:06:bd:
                    99:2c:37:89:d5:8a:37:ef:75:74:1c:87:f0:0f:02:
                    2c:3d:33:e1:53:07:75:5c:7c:20:bc:ff:70:c4:df:
                    93:92:8f:21:b1:c8:37:f9:a7:06:bf:47:53:97:3c:
                    0b:e6:73:92:94:77:4f:ed:36:5d:53:9f:3c:5f:d9:
                    1c:ac:22:f4:ed:92:ae:a1:c8:48:e3:57:64:21:05:
                    c6:be:0d:b9:67:ad:4c:f5:39:02:31:9a:f3:66:4a:
                    ba:58:e1:22:da:de:62:0e:a7:10:e3:41:ed:80:4c:
                    83:c4:d2:07:00:cd:cd:ea:4d:8d:a0:d8:1b:9d:bb:
                    6f:c0:b5:eb:42:2d:c4:8a:b3:48:b0:09:c5:2d:ff:
                    23:18:ea:ae:93:79:99:d4:4e:44:92:14:bb:fe:7f:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:32:60:E0:1B:89:ED:84:E1:57:71:BC:3F:C8:90:8D:2F:04:D1:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.21.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:c9:53:a6:18:11:e4:0a:7b:74:2d:1c:fa:5c:cb:2d:cc:ac:
         74:a6:65:f3:d4:7e:cd:04:5d:31:21:fe:d6:7e:75:8a:3e:68:
         23:4e:7b:cf:2f:b3:33:61:54:a3:e0:ad:63:8c:11:8a:75:dc:
         64:0f:d2:a9:15:03:6f:70:8e:7b:46:9a:03:6b:6c:93:fc:37:
         d0:cc:c8:e8:2b:f4:ba:c2:a0:df:ed:f3:0c:44:ce:3b:3a:0d:
         e6:b8:b1:59:87:24:3f:dd:18:da:d5:a7:76:e5:da:73:38:16:
         67:b5:9f:3f:51:36:d5:b2:2d:0b:e5:6f:73:a7:eb:ac:2d:78:
         69:6f:62:e1:dc:ca:37:88:ad:bf:ec:ed:8f:0e:7e:3b:cc:65:
         7f:85:78:f4:5a:cd:ca:3a:02:4a:76:e5:c9:cf:34:41:a1:6b:
         cd:4b:72:54:e3:24:30:65:5c:6d:73:e0:79:7f:1b:fb:2e:09:
         63:7b:ac:01:50:82:b0:56:29:d1:5e:24:0e:b6:a5:d3:81:15:
         1b:6c:cc:2a:90:12:15:a7:1c:6e:7e:7a:4f:ea:1a:99:45:df:
         63:e0:8e:4a:76:d7:01:e4:1f:b3:04:a8:f8:a5:8a:b9:a9:8c:
         75:60:fc:ee:1a:2f:2e:0c:e3:07:fb:b0:90:c8:7c:00:8d:21:
         d7:8e:e7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:37:05 2025 by rpki-client