This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa
File:                     75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa (raw, json)
Hash identifier:          W9crqm1a8MFxWIXIiahkR3mUzEXYWGWgCqkJ6YAhyJ0=
Subject key identifier:   07:63:AE:E8:65:B4:7E:97:B6:A9:D8:33:BE:C3:32:DE:C5:A7:98:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B35735458D9038DC2D0F42E61B872F14C794369
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa
Signing time:             Sun 23 Nov 2025 00:51:30 +0000
ROA not before:           Sun 23 Nov 2025 00:51:30 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        40.238.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:35:73:54:58:d9:03:8d:c2:d0:f4:2e:61:b8:72:f1:4c:79:43:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 00:51:30 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=6683202c5f8fb6eed82859b9b0a972a8fb06c4e9b2e7704d5e350bba14ce56d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:fb:75:a1:4a:17:08:10:34:84:4b:3a:f7:
                    b2:1c:f1:e3:5b:9b:eb:aa:d3:8d:9d:a7:cc:02:21:
                    59:43:63:2b:50:d2:83:9e:65:0d:d4:46:ba:a9:2d:
                    dc:74:86:e2:10:98:b6:69:7d:0b:32:45:c0:c1:fc:
                    e9:7c:ba:fb:8e:94:91:f7:7b:ee:76:de:c3:8a:26:
                    36:a0:16:3d:7f:da:4a:48:f0:7c:32:0f:e9:59:c5:
                    49:24:4c:27:45:09:95:c6:e2:0d:43:fd:3c:22:09:
                    2d:90:86:47:b6:b6:f3:b7:f9:40:58:5f:6e:16:49:
                    af:c0:9d:f5:86:46:89:41:11:7c:d0:07:1d:55:cc:
                    67:10:71:15:4c:a7:fd:0d:1f:38:41:68:7e:1b:00:
                    8e:4b:ac:01:18:31:4e:01:8b:63:46:6f:11:2d:2b:
                    3c:e2:fd:1a:6e:d6:42:99:06:93:1f:5e:b1:9e:0e:
                    da:7c:8b:ee:16:a4:04:bc:d6:58:db:83:3b:98:b3:
                    01:8d:76:5c:7a:a8:fe:f2:93:6e:ce:98:bb:d8:cb:
                    42:79:43:29:10:bc:e9:61:2b:02:df:42:15:1f:b4:
                    eb:0e:27:d1:9d:2d:0b:1d:96:71:4a:cc:04:d8:14:
                    2e:8e:ad:64:e2:7d:03:c4:2d:5c:f7:b8:2d:e0:96:
                    3a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:63:AE:E8:65:B4:7E:97:B6:A9:D8:33:BE:C3:32:DE:C5:A7:98:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.238.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:66:d1:59:ee:c2:7b:1a:56:cc:b3:b7:84:9c:87:45:74:92:
         d3:c4:e9:c1:d2:39:81:49:d3:a5:e1:01:d5:d2:bb:a3:fe:22:
         bd:0c:7c:d1:74:86:92:10:b5:64:ce:d4:e9:fa:67:ee:63:01:
         db:e9:46:79:48:6c:a9:09:a8:10:c7:4c:30:6e:04:b5:82:b2:
         4b:5a:62:c1:b2:bd:e7:8b:ef:cd:9e:95:00:f6:9e:cd:a5:69:
         f6:44:e1:ee:ab:15:86:63:54:d9:50:cc:a2:ab:7f:aa:7e:91:
         08:e5:7c:38:ef:bd:9d:0e:4b:85:18:99:44:e0:31:fc:9a:11:
         7f:02:0b:36:84:98:7f:c1:7d:1f:a2:15:2f:f0:cd:9f:20:d0:
         79:b2:b1:75:42:fa:65:f0:ab:1e:70:dc:0d:e5:03:5a:1d:e5:
         c6:2b:b7:81:87:f2:a1:5b:3d:2d:72:9b:39:f1:38:46:16:1d:
         2d:24:9f:32:a0:a0:e6:f4:c5:bc:60:72:3b:aa:f8:05:71:29:
         c9:8b:fb:fb:94:c6:24:5b:a1:81:64:d3:45:67:21:aa:92:b6:
         a0:23:57:4e:89:84:52:53:66:98:1c:4d:10:26:90:f2:e0:01:
         29:62:4d:3c:30:86:10:96:55:a1:13:f1:df:4f:db:4d:07:f2:
         73:24:b7:db
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUezVzVFjZA43C0PQuYbhy8Ux5Q2kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIzMDA1MTMwWhcNMjYwMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NjgzMjAyYzVmOGZiNmVlZDgyODU5YjliMGE5NzJhOGZi
MDZjNGU5YjJlNzcwNGQ1ZTM1MGJiYTE0Y2U1NmQwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpp/t1oUoXCBA0hEs697Ic8eNbm+uq042dp8wCIVlDYytQ
0oOeZQ3URrqpLdx0huIQmLZpfQsyRcDB/Ol8uvuOlJH3e+523sOKJjagFj1/2kpI
8HwyD+lZxUkkTCdFCZXG4g1D/TwiCS2Qhke2tvO3+UBYX24WSa/AnfWGRolBEXzQ
Bx1VzGcQcRVMp/0NHzhBaH4bAI5LrAEYMU4Bi2NGbxEtKzzi/Rpu1kKZBpMfXrGe
Dtp8i+4WpAS81ljbgzuYswGNdlx6qP7yk27OmLvYy0J5QykQvOlhKwLfQhUftOsO
J9GdLQsdlnFKzATYFC6OrWTifQPELVz3uC3gljrBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUB2Ou6GW0fpe2qdgzvsMy3sWnmIUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc1ZDAxYWZlLTE1NDItNGFiNy1hYWI5LTljMjhlMDc4ZWEwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAo7jANBgkqhkiG9w0BAQsFAAOCAQEAM2bRWe7CexpWzLO3hJyHRXSS08Tp
wdI5gUnTpeEB1dK7o/4ivQx80XSGkhC1ZM7U6fpn7mMB2+lGeUhsqQmoEMdMMG4E
tYKyS1piwbK954vvzZ6VAPaezaVp9kTh7qsVhmNU2VDMoqt/qn6RCOV8OO+9nQ5L
hRiZROAx/JoRfwILNoSYf8F9H6IVL/DNnyDQebKxdUL6ZfCrHnDcDeUDWh3lxiu3
gYfyoVs9LXKbOfE4RhYdLSSfMqCg5vTFvGByO6r4BXEpyYv7+5TGJFuhgWTTRWch
qpK2oCNXTomEUlNmmBxNECaQ8uABKWJNPDCGEJZVoRPx30/bTQfycyS32w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:33:15 2025 by rpki-client