This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76eae47e-4a9e-4b32-81f3-fd3ee3581c0a.roa
File:                     76eae47e-4a9e-4b32-81f3-fd3ee3581c0a.roa (raw, json)
Hash identifier:          cKTu1LQ/Xjc2ztGUA9zxaBtmqPW8+NkCep9EcmbJXa8=
Subject key identifier:   4C:2A:CC:58:B5:8F:80:BD:4E:11:A8:AF:0F:40:37:C7:7F:51:51:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0191B2D75317B79921FE89B811F4B0C448122280
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76eae47e-4a9e-4b32-81f3-fd3ee3581c0a.roa
Signing time:             Sun 23 Nov 2025 00:51:27 +0000
ROA not before:           Sun 23 Nov 2025 00:51:27 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        43.226.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b2:d7:53:17:b7:99:21:fe:89:b8:11:f4:b0:c4:48:12:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 00:51:27 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=48e7070dac8b80733e5a61de1badddd3af295e22aec5c03fd82dced59ab7bdb8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:83:cb:eb:01:f0:1a:f4:68:11:24:97:ee:a2:
                    48:a1:b3:33:4a:31:8c:ec:6e:a0:51:c6:ce:3d:00:
                    7f:61:66:3d:da:70:68:73:e4:a4:d1:f2:af:0a:af:
                    fa:a8:08:56:76:cb:6f:17:7d:d4:79:80:6c:da:61:
                    d2:1d:98:5c:95:78:89:83:e4:df:32:a6:78:58:38:
                    df:52:4f:e6:e1:0a:5e:60:8a:e6:90:53:aa:a8:71:
                    e7:b3:99:10:3f:e3:1d:ff:7f:67:50:29:00:18:3f:
                    22:58:d0:76:3a:f3:06:19:fd:15:43:ca:6c:3d:77:
                    54:6d:dd:a4:2c:c6:bc:d5:bd:24:39:87:35:fc:8a:
                    b3:7b:1d:44:53:b3:83:d8:e8:76:1e:bf:dd:27:87:
                    b9:1d:bf:13:22:f7:6d:61:d3:63:86:1f:9c:54:ef:
                    48:6e:9a:4d:20:e8:65:b3:9e:76:2b:e5:5d:d5:4c:
                    b1:5a:c2:d5:e9:95:86:f3:d7:49:7d:33:81:2f:50:
                    6d:d8:de:8d:1b:4b:60:ad:81:64:db:8b:53:fb:90:
                    c3:ec:03:8c:e5:24:ab:db:2b:2b:62:f3:d1:e0:a6:
                    f0:b4:8a:a8:90:2b:fd:fd:f6:3a:d3:40:9f:cd:1a:
                    94:49:62:3b:05:83:d6:3b:29:58:b6:b0:12:77:c4:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2A:CC:58:B5:8F:80:BD:4E:11:A8:AF:0F:40:37:C7:7F:51:51:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76eae47e-4a9e-4b32-81f3-fd3ee3581c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:02:f7:76:f7:ba:03:c1:ea:27:20:76:0c:e3:b7:71:69:61:
         02:d3:03:f0:dd:d1:23:03:95:76:ec:28:8e:e0:16:35:80:9f:
         ef:be:4a:a0:d4:5a:75:ff:fa:9c:30:55:3c:6c:4c:3c:68:0d:
         67:d0:55:81:98:e2:af:cd:14:99:c6:e2:04:d2:91:a7:62:5c:
         2a:59:56:82:c4:91:ba:3e:1e:7f:34:dc:06:0d:0c:99:bb:9f:
         e7:4f:e0:a2:58:ba:ca:f6:93:22:b0:8e:ba:64:b9:cd:c9:2e:
         ef:e0:ef:ca:e7:92:d5:d1:7a:ee:bf:28:9f:9a:ab:24:3f:7a:
         4d:74:6c:2e:a2:86:1d:b0:75:a7:59:9f:6a:30:90:1e:11:8a:
         00:3a:0c:32:90:87:fb:e8:a8:df:87:36:11:cb:d7:79:d8:3c:
         ff:47:32:04:d8:ed:a0:ef:c9:c0:c7:03:c1:a0:42:b4:34:f0:
         9c:b8:38:c4:18:34:62:3a:71:24:37:e4:1d:f9:fb:56:43:6f:
         6b:cf:57:4b:8b:86:d2:7f:74:bf:c4:18:81:9f:8a:13:bc:f8:
         4d:fb:ac:c1:56:26:7a:f7:2d:5b:e2:2a:55:6c:8e:31:66:b1:
         a6:ed:ec:65:2b:7f:d5:b5:86:e2:c5:a9:75:7e:57:df:a6:cd:
         f3:d2:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:07:34 2025 by rpki-client