This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d9fcf4-4228-49d5-bd7b-d0439141fb46.roa
File:                     75d9fcf4-4228-49d5-bd7b-d0439141fb46.roa (raw, json)
Hash identifier:          pcMqyN2QfzD8yNP4t34V2naGFyiJApN1aUYpP44TYB0=
Subject key identifier:   3A:C9:91:6F:C2:E2:AE:04:E0:25:19:82:1E:51:6F:47:E3:AF:92:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28B5959E957E5E93FB9ABC3E0708BE4CE902057A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d9fcf4-4228-49d5-bd7b-d0439141fb46.roa
Signing time:             Thu 20 Nov 2025 00:41:28 +0000
ROA not before:           Thu 20 Nov 2025 00:41:28 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.15.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b5:95:9e:95:7e:5e:93:fb:9a:bc:3e:07:08:be:4c:e9:02:05:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:41:28 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=78e2fdf726f3b54889af3fd42431b2ff83e2687f24b5eef4c770438a2d6dbb45, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:4e:3e:bd:40:4e:90:bb:59:24:ee:b4:e0:
                    e4:29:0c:30:a7:cc:95:7e:e2:2b:d8:4a:4d:dd:6a:
                    f1:fb:62:e9:5a:8e:db:33:d2:85:1f:35:2b:2d:df:
                    f7:6a:3d:6b:52:4f:8d:fe:1d:d2:62:36:56:5b:10:
                    1f:13:89:c6:d2:15:a2:34:19:47:37:58:e3:9f:23:
                    44:97:ab:84:6b:75:8a:99:f6:c4:90:7d:32:53:73:
                    5c:bf:c8:47:08:9e:93:5c:7d:8a:86:0a:5a:51:cb:
                    9f:36:b8:83:0e:bf:f6:01:4c:6e:c4:b7:bd:f8:2d:
                    06:98:c9:9f:0c:13:ad:27:49:e4:b8:73:75:a0:56:
                    75:42:9b:4b:88:f6:f8:bf:d8:0a:4f:5a:09:ce:63:
                    1c:c5:3f:28:c4:48:a7:01:2b:8c:4c:b6:8e:ee:c9:
                    b7:53:5f:60:25:f3:8f:cf:62:a2:bf:48:83:a0:a8:
                    1c:59:03:bf:3b:0e:23:63:7c:f4:c3:9f:7b:f3:93:
                    86:5a:4b:32:34:12:01:ec:bc:ed:cf:16:f0:ab:75:
                    e8:aa:ea:07:16:43:db:46:6a:80:74:d8:71:2d:85:
                    7b:82:4f:12:7f:59:e3:74:5e:d1:9e:77:92:b6:c8:
                    32:2d:86:4e:f4:15:1c:45:b0:2d:86:00:9d:d4:12:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C9:91:6F:C2:E2:AE:04:E0:25:19:82:1E:51:6F:47:E3:AF:92:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d9fcf4-4228-49d5-bd7b-d0439141fb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:1b:7e:72:32:eb:e6:94:b8:88:85:ef:5b:86:ce:b6:a7:28:
         c2:34:b9:4f:38:22:b3:85:d9:a7:64:d7:75:3d:d7:3d:1e:71:
         95:16:80:09:f8:dd:06:a3:fd:d2:3d:73:15:fa:b4:df:de:37:
         ae:09:5d:7a:8f:23:d7:c9:18:df:5f:f2:61:2b:d0:4f:c0:6b:
         c0:b9:08:22:c9:6c:24:04:e5:41:72:0c:b3:e1:2b:a8:d5:5a:
         31:5c:f0:66:7a:d3:11:12:bc:b9:60:7e:b4:72:20:15:3a:a3:
         1b:05:2e:a8:5d:94:38:21:de:c2:0f:fc:58:d3:3a:57:a6:40:
         e3:e9:cc:0f:99:cb:2a:f7:2e:7c:40:43:13:49:60:87:49:eb:
         69:be:f8:08:b4:3c:e7:7c:4c:5d:86:67:27:6c:10:ab:43:38:
         fb:92:0d:c0:cf:41:00:f8:c6:c0:35:30:db:45:d6:9d:fa:eb:
         f2:c0:e1:e9:8b:6b:19:2f:2b:d2:b8:70:21:a9:a6:ce:b7:a3:
         e5:de:b5:55:ea:b6:3c:73:6d:31:94:f9:73:ce:e8:d8:86:03:
         a7:ac:5f:38:3c:02:80:d7:4b:93:60:fc:49:50:ac:fc:42:75:
         c0:72:e6:4f:36:c1:b4:e6:c4:81:32:73:d0:47:5d:bf:d6:c1:
         c2:cc:73:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:29:03 2025 by rpki-client