This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/793fcee8-7478-4b11-9fee-e87da0f9edc2.roa
File:                     793fcee8-7478-4b11-9fee-e87da0f9edc2.roa (raw, json)
Hash identifier:          1B0UbmlLFEgbfLnlTAugmZaIyLjb4+tqlTkEgY9uiLY=
Subject key identifier:   37:1E:81:10:0C:37:19:E1:A7:14:F0:C8:3D:83:77:5C:E2:17:2A:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D9C42CEDC914BAF1197BD0E06F86BF0305A30AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/793fcee8-7478-4b11-9fee-e87da0f9edc2.roa
Signing time:             Wed 26 Nov 2025 00:11:04 +0000
ROA not before:           Wed 26 Nov 2025 00:11:04 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        31.220.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9c:42:ce:dc:91:4b:af:11:97:bd:0e:06:f8:6b:f0:30:5a:30:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:11:04 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=2f11cfc0db7b680bd2c054836410a89cd43932efc8308bbda16ad03d5fa4bd6c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:92:65:67:eb:b4:fc:96:e3:90:bb:45:d4:
                    6a:97:5a:06:1b:f8:b6:58:f6:1c:e8:84:18:5a:63:
                    19:79:ca:c8:41:bc:08:7c:83:de:2f:dd:ba:15:1e:
                    31:fc:e1:2a:0c:18:7f:f1:88:47:d0:36:65:83:45:
                    22:fb:57:62:06:02:b2:75:34:96:23:4e:81:43:6d:
                    62:92:4a:8e:85:4c:e0:6f:34:13:87:58:66:93:8e:
                    be:ea:2a:09:c5:0f:6b:a6:ec:9b:67:02:15:23:7b:
                    02:19:cc:86:38:b1:1d:9e:78:80:f7:73:a9:bd:82:
                    54:b9:a7:32:20:62:d7:25:a6:7b:05:a7:c6:b1:e1:
                    43:47:cb:d6:c8:61:c6:7d:17:69:b4:4f:85:9f:73:
                    be:e3:f1:46:95:0d:a3:30:65:a6:64:68:34:d1:37:
                    42:ce:53:99:9b:13:bc:05:35:c2:2e:a7:c5:ad:76:
                    b1:f9:a4:d1:c0:c8:12:66:37:cc:a9:f5:60:7b:8f:
                    fa:25:c9:2a:b3:fd:e3:96:9f:0a:c2:6b:cb:45:81:
                    e0:80:b8:1b:18:49:3f:4d:ee:8b:41:d8:23:ba:73:
                    a3:3e:50:f7:b2:0a:9f:30:f1:e0:57:b6:63:66:47:
                    40:c6:0a:88:24:10:f0:d7:15:02:2c:47:c2:54:85:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1E:81:10:0C:37:19:E1:A7:14:F0:C8:3D:83:77:5C:E2:17:2A:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/793fcee8-7478-4b11-9fee-e87da0f9edc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.220.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:1d:0b:5f:8c:4e:0a:75:2a:e2:17:3b:59:59:db:42:34:c8:
         d0:2f:60:b9:aa:b4:9f:30:89:97:f9:1a:2c:82:c0:6f:ea:c5:
         5b:4b:72:fa:f5:64:51:78:91:52:03:cd:eb:8f:ea:6e:42:52:
         eb:16:cb:14:9f:e1:f0:6b:39:53:a4:6d:6d:2c:6b:4d:03:f4:
         32:b4:99:ca:6f:55:48:9f:03:ff:cf:2b:e3:4a:35:dc:8b:51:
         e1:23:a5:23:a7:1b:fd:73:b5:16:1d:b5:d1:1b:82:ac:d6:d6:
         0b:18:ff:ec:be:85:57:65:2c:26:33:0a:b1:dd:f6:8c:a1:fc:
         6d:2d:87:90:b5:6b:22:3f:60:10:ac:e9:d3:bb:ae:ce:88:af:
         a5:ee:53:5d:fa:76:97:90:28:3b:27:69:85:7a:f6:45:02:b0:
         28:54:0c:f6:65:75:f2:77:91:d2:a9:18:16:7b:c6:36:10:30:
         55:a9:2e:7e:ce:78:dc:a6:22:bc:ed:19:54:1b:41:bd:27:e9:
         9c:ed:6e:bb:a2:79:83:01:18:98:ef:0c:b5:b6:fb:bb:a7:47:
         76:db:fd:30:8a:b1:81:ea:18:4b:42:f9:bf:9e:ff:22:a0:1b:
         9d:d5:d4:5e:99:42:10:5b:8e:4c:01:ac:8f:c7:17:08:e6:c9:
         42:49:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:33:18 2025 by rpki-client