This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d30b28-58e8-4af5-82fd-ecde44d38fb0.roa
File:                     79d30b28-58e8-4af5-82fd-ecde44d38fb0.roa (raw, json)
Hash identifier:          Hp37x55pte8P6H+8vfA9Iayel5CiFkkxwpOlzb1BbAY=
Subject key identifier:   18:39:2C:6C:48:A2:C6:26:8D:88:5C:DF:F6:8D:EE:A1:1D:EF:11:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       274A098981A28A85A762A9CE2EC68EFE2B7B7718
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d30b28-58e8-4af5-82fd-ecde44d38fb0.roa
Signing time:             Sat 06 Dec 2025 00:30:09 +0000
ROA not before:           Sat 06 Dec 2025 00:30:09 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        192.43.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4a:09:89:81:a2:8a:85:a7:62:a9:ce:2e:c6:8e:fe:2b:7b:77:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 00:30:09 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=5e846ac0a494e3773013b25976392a7c439c3eb08c00745e034614f4ff5dc415, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:f8:e1:32:f4:2a:03:ab:d1:55:4c:ed:d8:
                    0a:ed:ba:5f:94:6a:2e:b6:ec:c9:dc:8d:71:e0:83:
                    6b:11:22:e8:4b:5e:60:ed:23:8b:a0:6d:9f:ee:a3:
                    3a:0f:73:78:39:08:39:43:00:5e:a3:a9:5b:e2:9a:
                    a8:28:7a:02:82:b6:79:ae:50:8d:f1:e3:8f:79:e6:
                    d7:9b:da:00:08:03:7e:f1:41:9d:0e:37:b4:cf:da:
                    6c:04:8b:2e:64:72:34:6d:9c:e3:83:09:0a:9a:f9:
                    93:4c:bd:42:aa:af:97:fa:7d:cf:ed:55:e5:46:d7:
                    db:cb:af:08:e0:d8:63:9c:00:16:81:4a:6f:87:f3:
                    d0:49:57:72:c0:0b:fb:af:00:cb:ba:f7:90:ad:2e:
                    df:6a:e7:99:2b:cb:10:a8:3f:c6:f5:ff:39:4f:b8:
                    b8:6a:d8:8c:a5:77:55:9d:19:a6:3a:05:a7:3e:79:
                    93:25:de:7f:f9:30:08:2e:76:e1:13:b5:3d:d6:8b:
                    2c:b1:c6:97:b6:d3:33:62:e6:fa:81:32:3c:5a:93:
                    28:78:9d:46:b5:a2:08:91:60:b5:f2:75:81:40:43:
                    48:ef:de:15:5c:c2:7b:b8:2d:a0:91:40:21:0f:37:
                    88:9b:07:b8:b1:39:01:51:a4:5f:de:2a:b5:fd:8c:
                    3b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:39:2C:6C:48:A2:C6:26:8D:88:5C:DF:F6:8D:EE:A1:1D:EF:11:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d30b28-58e8-4af5-82fd-ecde44d38fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:03:53:63:9b:c6:0a:e1:df:aa:6e:2a:4d:6c:bc:a6:16:e9:
         4d:63:a6:86:51:1e:7d:21:f9:ca:af:cc:aa:47:af:42:55:4e:
         d2:f8:70:16:3b:54:d2:78:f5:43:bd:6b:07:db:f8:36:ce:ce:
         b4:da:f9:94:e4:a5:a4:f3:72:11:a1:f2:2e:50:45:a2:da:9f:
         d3:65:a7:7e:87:c7:90:ab:31:76:e2:54:a0:fe:b7:ba:5e:ea:
         23:42:72:64:a7:5e:75:ec:da:66:cf:ad:bf:a7:22:6d:7e:e7:
         47:92:bc:1d:4d:97:2b:a5:b7:0a:a1:09:75:7f:5f:33:36:c3:
         18:2c:b0:3a:ea:65:27:5d:09:5c:2f:a1:ac:43:f7:e3:fe:92:
         31:6b:04:76:26:b8:77:80:1f:6f:46:22:1d:9e:61:f4:fb:bb:
         15:56:86:cf:0c:e0:d5:ac:d6:5f:35:f1:70:1f:29:dd:cd:2b:
         61:04:ba:74:0c:68:a4:74:0c:cd:f3:5c:ca:13:ef:63:2d:14:
         a8:ef:8f:c1:fa:7b:c9:4e:86:65:96:f9:37:78:af:38:18:a7:
         ae:c6:d6:e4:c1:5c:1e:0f:22:01:d1:0f:d8:31:75:5e:0b:77:
         f6:af:b4:6c:9a:de:5b:bc:d0:37:72:8a:cd:4f:f3:16:df:99:
         ba:a2:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:56:57 2025 by rpki-client