This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bd2dbb0-04e3-4da9-9b37-f8cbf6ff9604.roa
File:                     7bd2dbb0-04e3-4da9-9b37-f8cbf6ff9604.roa (raw, json)
Hash identifier:          P5qEh/fobnuMsTAG+uvpNx08Iqs5wJo5TL4gaZ6U3J4=
Subject key identifier:   F9:2B:49:7B:C1:FE:2B:ED:D7:53:A0:FA:26:5E:63:28:B1:C2:D4:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27BAC49F24D7488D512D885B4751EBAF4B193908
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bd2dbb0-04e3-4da9-9b37-f8cbf6ff9604.roa
Signing time:             Wed 03 Dec 2025 01:21:12 +0000
ROA not before:           Wed 03 Dec 2025 01:21:12 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ba:c4:9f:24:d7:48:8d:51:2d:88:5b:47:51:eb:af:4b:19:39:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:21:12 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=53d36966dda343bf5572b7e4acfeb0e9589b56478279ccbc7980a832f6bdd758, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:91:05:b9:22:4f:44:2d:18:34:8d:4a:c7:
                    70:f7:cc:ff:af:e4:29:a3:68:9e:9b:1e:a4:58:c7:
                    f3:a6:20:86:f9:e3:af:38:38:10:d0:02:48:8b:20:
                    98:57:dd:1d:c7:db:5c:ce:87:87:06:4f:89:d7:18:
                    f5:35:6b:80:0d:2d:fe:08:19:c5:36:79:0f:50:58:
                    91:31:c1:b4:77:17:13:3c:53:a0:5c:10:3f:00:78:
                    eb:1b:92:f2:5e:01:2d:ef:7a:4a:fe:69:e4:91:ff:
                    d5:70:05:19:08:96:6c:40:99:90:27:55:a9:24:f8:
                    a4:01:76:1a:4c:7e:19:be:7b:5c:2c:42:a6:94:26:
                    29:1c:f7:18:a2:08:ae:12:d2:d4:f2:b6:61:af:78:
                    a5:8b:0e:bf:d2:34:97:f5:b3:bf:44:35:e9:f0:86:
                    e9:b5:51:b4:45:b1:36:68:2d:0d:2a:59:f9:46:ae:
                    9a:80:cb:a5:e8:c7:5f:cc:29:c9:7d:48:6d:72:7f:
                    4e:36:0f:5d:21:01:1e:6a:34:f6:e5:90:7e:3b:7c:
                    bb:43:7e:e6:75:1a:b0:b3:7c:40:d6:4e:75:52:85:
                    6e:c8:35:14:6b:59:2f:15:bb:b4:0e:0b:87:0d:46:
                    6a:f4:2c:c6:f2:6f:cf:cf:d5:47:45:35:52:87:48:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2B:49:7B:C1:FE:2B:ED:D7:53:A0:FA:26:5E:63:28:B1:C2:D4:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bd2dbb0-04e3-4da9-9b37-f8cbf6ff9604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:c1:8e:f9:95:9e:97:11:15:3a:e6:f2:32:01:30:86:28:
         b3:cd:40:2a:2f:00:79:f5:c3:ff:30:82:da:59:6f:41:94:a6:
         fd:b2:77:73:b2:da:1f:6d:d9:64:18:b2:72:e2:bc:f1:f9:aa:
         14:4c:aa:02:d8:34:fd:3e:d4:ab:5a:b3:41:74:bf:8d:d1:13:
         ad:0a:eb:ee:95:6a:87:e6:9a:aa:cf:ac:98:93:35:6a:84:f1:
         c5:ff:1c:28:af:45:a6:b9:15:28:3e:c6:71:1f:6b:b7:dc:bf:
         72:eb:8d:f1:93:3f:e6:f6:4b:f9:87:bf:94:39:0c:96:b7:5a:
         e2:91:25:7b:18:45:74:92:63:af:b2:2f:10:94:78:d1:6e:49:
         4a:9a:d3:da:83:93:52:b4:ab:ed:e6:d9:a2:26:05:18:58:f0:
         b1:81:28:51:2f:4a:fc:55:c6:a5:f2:45:67:47:c1:5a:07:df:
         16:8f:96:21:e8:6d:d2:c2:d0:14:b3:a0:fd:7c:4b:b3:ad:8b:
         4f:2f:3c:a4:e5:80:aa:c8:5e:0f:4b:13:a9:6f:4f:d5:97:04:
         d3:4b:c7:a6:4b:18:67:d3:f2:ae:a6:2f:f8:d5:db:54:58:19:
         1e:ba:b6:05:de:32:24:ab:06:17:b1:b0:f0:40:d6:28:9e:f3:
         ea:da:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:01:32 2025 by rpki-client