This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/761cd85e-a8f3-40d2-9207-e2cb83f306c8.roa
File:                     761cd85e-a8f3-40d2-9207-e2cb83f306c8.roa (raw, json)
Hash identifier:          AusrPgusD0gaFnsnUJoqMJ2Og1MnXNOjAknR4cSbwJs=
Subject key identifier:   73:E6:C5:CD:99:C9:10:18:C6:6D:34:47:E2:D7:98:5D:69:E3:03:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64A426713EB0E287C59FF13E8F442299B2096E9E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/761cd85e-a8f3-40d2-9207-e2cb83f306c8.roa
Signing time:             Sun 23 Nov 2025 01:21:02 +0000
ROA not before:           Sun 23 Nov 2025 01:21:02 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.10.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a4:26:71:3e:b0:e2:87:c5:9f:f1:3e:8f:44:22:99:b2:09:6e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 01:21:02 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=454826b9a352ff94464f5679b4b5c1afb0daa9a8f1ecb0b7e5e477c7d244f6a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:a4:cf:30:58:6f:cd:31:fd:16:8e:1b:fc:
                    6b:f9:61:b4:e8:f0:19:97:b6:5f:49:31:bf:ff:13:
                    fa:ae:85:9b:d3:fe:d4:99:ed:87:b0:15:bb:08:ff:
                    ef:4c:a4:ae:15:a4:47:59:2c:e6:14:bf:ef:2a:f2:
                    98:26:a9:23:3d:f2:14:c7:85:0a:71:87:cb:08:26:
                    95:58:0a:17:ec:b2:dc:d9:b4:13:60:22:bf:3a:dd:
                    c8:4c:8d:32:0f:01:d6:a2:d8:3c:49:58:6e:5a:f0:
                    fc:62:41:c2:9c:fe:81:16:d5:91:9d:cd:6b:3c:f2:
                    c3:aa:50:38:03:9a:aa:f6:e5:eb:04:fe:ba:ad:b0:
                    40:be:59:6c:65:53:de:a8:2e:30:bf:c2:7f:e9:ff:
                    59:96:cc:d9:5d:5c:06:4e:57:c6:52:2c:23:90:c3:
                    56:9d:30:7e:32:15:86:ea:e3:e4:34:dd:95:3c:b1:
                    a6:12:28:c4:07:2c:a7:e2:9a:57:e4:76:d9:ae:4f:
                    1e:f2:00:a0:57:5e:0f:77:9e:b5:b6:7d:16:95:13:
                    03:76:db:d6:ae:56:ce:fa:4d:ae:af:76:3f:0c:38:
                    27:64:85:0f:d5:6e:07:13:ea:e4:6c:f2:0c:b1:87:
                    3b:0d:91:55:1e:be:7c:b6:5d:7a:82:5d:cd:63:42:
                    6f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E6:C5:CD:99:C9:10:18:C6:6D:34:47:E2:D7:98:5D:69:E3:03:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/761cd85e-a8f3-40d2-9207-e2cb83f306c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.10.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         86:a7:da:92:72:b2:d9:23:e4:d5:4d:97:e0:17:b3:79:11:09:
         04:a1:d3:34:e2:a3:47:2c:ad:5c:ea:d6:0b:6b:ea:2f:bd:72:
         a7:1d:19:80:30:d4:29:9b:c5:85:4e:18:30:d6:fc:5e:6c:00:
         c9:f9:31:43:23:97:11:17:ce:62:c9:02:a9:3a:4f:64:0c:bd:
         70:9b:b3:11:33:23:e0:95:c6:8a:03:2b:3f:ce:13:82:48:fb:
         81:a5:0f:12:c0:e1:d4:0f:11:93:55:a3:69:b8:41:51:ef:14:
         08:1b:4c:d4:45:81:c8:a6:3f:7f:06:f4:dc:5a:3c:a9:29:39:
         27:6e:75:94:9b:f4:0b:f9:4b:58:a3:b4:d7:f4:30:8c:96:8d:
         3c:9e:65:a5:2b:56:0c:66:b0:3c:de:3b:29:33:ae:81:47:1a:
         36:67:98:44:01:72:6d:8a:82:ca:11:8b:24:ef:27:62:de:a4:
         5f:18:1a:27:c7:b8:7a:4c:f0:d0:80:79:8d:1b:a8:8e:be:ef:
         7b:41:63:64:b9:6f:33:13:6e:00:53:0a:50:a9:78:9d:6e:cd:
         83:74:f3:d8:1a:d5:4b:df:35:48:81:18:37:85:b2:09:d1:90:
         62:71:0a:89:31:56:55:5f:bb:b3:7b:ed:b4:f5:20:5f:64:bc:
         b9:32:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:27:17 2025 by rpki-client