This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c748147-8998-4672-8c3d-5171a4d8afff.roa
File:                     7c748147-8998-4672-8c3d-5171a4d8afff.roa (raw, json)
Hash identifier:          McCkuuVlQeStTiBQIiR/IeOotbKbvCPhkVN+i1N29c8=
Subject key identifier:   06:83:C6:70:E0:BA:47:2B:EF:93:01:FE:D6:D8:B2:9E:3E:6F:D9:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       231AB432DA1FC04F62FE0F437801E5E0BDE3216D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c748147-8998-4672-8c3d-5171a4d8afff.roa
Signing time:             Thu 20 Nov 2025 00:00:39 +0000
ROA not before:           Thu 20 Nov 2025 00:00:39 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.52.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1a:b4:32:da:1f:c0:4f:62:fe:0f:43:78:01:e5:e0:bd:e3:21:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:00:39 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=caff00b29cbd16bea6e196279c6eb5f3df765fb65644847b69d3221abe76cf06, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:4f:d8:1f:71:e3:8b:c1:13:ac:be:8b:e3:
                    2b:61:f6:62:da:d8:e7:4b:f8:6c:e6:ec:20:e8:dc:
                    0a:46:46:55:99:bd:dd:05:71:ba:30:ca:02:39:fc:
                    6c:a5:3a:52:4b:e7:de:22:cc:c1:30:a4:8c:18:c8:
                    22:9a:73:e8:6c:c5:bc:9b:73:cf:4f:70:14:08:25:
                    06:35:08:db:54:95:92:46:ad:43:f6:68:6f:a9:46:
                    98:d5:4e:24:ec:be:22:f0:87:f2:05:93:42:11:30:
                    47:ec:5f:6d:0d:d7:d6:8e:5e:47:49:3a:c9:76:5a:
                    a9:2b:65:77:50:f9:25:a0:ae:54:64:2a:ca:d3:51:
                    68:e3:21:c6:fb:94:24:b6:4d:da:fa:a3:23:89:4e:
                    de:d3:d6:7d:aa:15:d0:08:30:e5:db:ea:c1:65:88:
                    20:45:64:40:d1:4d:1b:6f:8b:8c:2e:a9:0b:91:09:
                    ae:ac:ee:d0:70:3a:91:61:bc:81:f7:79:b5:13:cb:
                    65:66:6e:0a:3d:b7:d9:d7:2e:43:36:d4:a1:5e:54:
                    0c:cf:ca:28:cb:0c:5c:86:63:3d:c0:b0:7b:8f:98:
                    a1:62:3c:ab:5e:d1:64:87:e3:b3:b9:99:2d:d3:87:
                    a7:40:c2:e8:38:bf:b3:ef:ad:21:88:e3:30:0c:69:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:83:C6:70:E0:BA:47:2B:EF:93:01:FE:D6:D8:B2:9E:3E:6F:D9:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c748147-8998-4672-8c3d-5171a4d8afff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.52.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         33:31:70:46:6a:78:41:8f:7e:a3:ee:85:5d:5a:f5:25:29:df:
         25:d7:ba:52:8c:f8:03:26:f7:5e:7a:ee:33:8a:a2:74:8b:01:
         81:80:28:e0:29:b8:cd:b3:8f:13:bb:e2:29:5f:10:65:3f:82:
         24:b6:5a:1b:d1:a6:1f:de:13:5c:27:2e:75:c6:04:12:fc:7a:
         eb:25:7f:92:2f:aa:df:b4:48:01:55:3e:57:96:ed:48:98:7d:
         4b:95:33:7d:de:1c:1c:04:b2:be:9c:3a:61:e7:1d:56:85:cf:
         5d:89:18:bf:08:4b:a6:74:2f:90:a9:d1:90:a5:19:0d:6c:12:
         a3:03:e4:d8:8f:dd:cb:8d:de:eb:85:39:25:32:0f:1b:3d:28:
         be:95:be:88:09:e8:6a:01:1e:67:2d:05:14:b7:f7:18:92:08:
         d8:25:ec:3f:95:da:13:99:4d:35:21:24:31:0d:41:0e:ce:2b:
         60:21:7e:93:3f:d6:e3:b8:a7:14:b6:d1:c9:d8:84:15:9e:cb:
         f9:00:88:37:05:5f:14:59:45:86:58:2c:20:b6:74:70:a1:7a:
         cb:c5:ff:71:c7:2b:14:71:67:d0:b5:87:6f:70:3e:2e:95:20:
         7d:61:a7:55:26:39:a9:a1:45:b4:f4:22:88:56:0b:45:be:d4:
         94:69:61:25
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUIxq0MtofwE9i/g9DeAHl4L3jIW0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMDAwMDM5WhcNMjYwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYWZmMDBiMjljYmQxNmJlYTZlMTk2Mjc5YzZlYjVmM2Rm
NzY1ZmI2NTY0NDg0N2I2OWQzMjIxYWJlNzZjZjA2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtP0/YH3Hji8ETrL6L4yth9mLa2OdL+Gzm7CDo3ApGRlWZ
vd0FcbowygI5/GylOlJL594izMEwpIwYyCKac+hsxbybc89PcBQIJQY1CNtUlZJG
rUP2aG+pRpjVTiTsviLwh/IFk0IRMEfsX20N19aOXkdJOsl2WqkrZXdQ+SWgrlRk
KsrTUWjjIcb7lCS2Tdr6oyOJTt7T1n2qFdAIMOXb6sFliCBFZEDRTRtvi4wuqQuR
Ca6s7tBwOpFhvIH3ebUTy2Vmbgo9t9nXLkM21KFeVAzPyijLDFyGYz3AsHuPmKFi
PKte0WSH47O5mS3Th6dAwug4v7PvrSGI4zAMaUePAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUBoPGcOC6RyvvkwH+1tiynj5v2dgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdjNzQ4MTQ3LTg5OTgtNDY3Mi04YzNkLTUxNzFhNGQ4YWZmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwIQNDANBgkqhkiG9w0BAQsFAAOCAQEAMzFwRmp4QY9+o+6FXVr1JSnfJde6
Uoz4Ayb3XnruM4qidIsBgYAo4Cm4zbOPE7viKV8QZT+CJLZaG9GmH94TXCcudcYE
Evx66yV/ki+q37RIAVU+V5btSJh9S5Uzfd4cHASyvpw6YecdVoXPXYkYvwhLpnQv
kKnRkKUZDWwSowPk2I/dy43e64U5JTIPGz0ovpW+iAnoagEeZy0FFLf3GJII2CXs
P5XaE5lNNSEkMQ1BDs4rYCF+kz/W47inFLbRydiEFZ7L+QCINwVfFFlFhlgsILZ0
cKF6y8X/cccrFHFn0LWHb3A+LpUgfWGnVSY5qaFFtPQiiFYLRb7UlGlhJQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:55 2025 by rpki-client