This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa
File:                     7840150d-90b6-4a97-8609-5a40556c4e1b.roa (raw, json)
Hash identifier:          J9PRRbwZd5fbCgB+q6bKuKLM+I98llxtA4PRyHggcEE=
Subject key identifier:   5F:2A:01:E8:CA:1C:30:A9:A1:AE:31:00:16:1D:0F:C9:EA:5D:B3:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69712CE0E6F585B20309B75BF7D43A93F5E2C3B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa
Signing time:             Sat 22 Nov 2025 00:10:36 +0000
ROA not before:           Sat 22 Nov 2025 00:10:36 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.149.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:71:2c:e0:e6:f5:85:b2:03:09:b7:5b:f7:d4:3a:93:f5:e2:c3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:10:36 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=8b54c7d9fc6a5a2de03eb119157788b9b6fc0be0f41fa68852c54eb96552e25a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:21:d0:e5:09:3f:6a:81:31:8d:fc:76:8f:
                    a7:09:05:64:b5:07:68:dc:e4:84:b8:3a:3c:6c:55:
                    13:af:ae:d2:f0:a6:b6:9d:59:8b:0a:ba:7f:b5:7a:
                    0f:b2:1a:0a:72:89:0b:75:e6:30:c2:fa:7f:40:ed:
                    e1:c1:61:84:db:79:50:9e:0d:ac:7a:34:ce:4e:cc:
                    65:d6:de:f8:d9:10:b3:f6:c5:3f:5c:86:5b:7e:27:
                    19:44:ce:35:6d:76:f5:e1:9c:34:cc:48:20:c3:6e:
                    ad:45:99:71:f8:a0:a4:a0:c9:9f:b2:e2:14:8f:e2:
                    80:ba:ed:af:94:66:25:5a:5e:41:77:dd:17:a6:5b:
                    0e:d2:77:12:c9:c8:d4:5e:71:3d:87:40:fc:06:3b:
                    51:70:fa:e1:9a:9c:a7:03:95:35:44:8a:8a:67:5e:
                    cc:50:2a:5c:3a:63:e8:4e:dd:3d:56:81:2d:29:68:
                    3a:92:f2:3e:8b:2b:53:35:ff:5e:f8:be:69:8b:46:
                    99:22:c7:2e:5c:75:45:1a:1b:4e:93:98:90:0b:e0:
                    85:5c:ff:4a:26:bf:c9:40:95:21:8a:d6:88:31:51:
                    ec:5a:a8:60:95:a1:06:73:5d:1d:bc:74:0c:45:96:
                    bf:ca:4a:04:d2:a9:2c:00:55:a0:c9:5b:43:f5:a0:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2A:01:E8:CA:1C:30:A9:A1:AE:31:00:16:1D:0F:C9:EA:5D:B3:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.149.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:34:54:be:cc:78:69:dd:d8:61:fe:3a:1e:57:d8:b3:e4:43:
         a2:e4:3e:6e:47:60:e5:cc:db:f8:21:96:5a:f8:41:64:05:fd:
         6d:44:fb:ba:d3:82:6c:f5:24:14:a1:58:01:a8:13:95:fa:9a:
         18:f3:31:61:a9:d1:d8:46:d8:e2:95:e7:7b:4b:e6:a8:53:69:
         69:00:da:36:b3:4f:dd:b8:96:e8:d1:93:86:1b:05:85:10:a2:
         fa:66:43:81:a9:c6:eb:7d:c7:a9:84:56:b4:b7:ff:07:4a:de:
         93:aa:5a:8b:74:dd:31:de:3f:fb:81:91:07:18:99:75:24:dc:
         bc:5d:c1:84:c6:cf:d8:37:36:67:35:2c:36:be:2a:5c:0b:0b:
         0b:a0:6c:df:fe:19:29:33:92:20:e4:01:e0:5e:98:38:27:df:
         4e:f5:0f:b4:28:e8:22:32:fd:6c:5b:6c:94:7e:06:97:14:61:
         02:ec:06:e8:28:a6:2a:a4:99:c6:13:42:bb:65:db:10:e6:5a:
         d6:61:15:cf:4e:14:f6:d8:09:72:33:35:41:1c:e6:6c:17:e3:
         ac:a1:7c:06:d9:c1:14:3d:3a:4e:87:4e:ab:1f:a0:63:75:f3:
         b6:9d:d1:a0:f0:22:14:8c:c8:d5:5b:af:c5:4b:67:c8:db:1c:
         f2:8d:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:26 2025 by rpki-client