This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e7a3c02-d133-4537-b6c6-fdda998211fb.roa
File:                     7e7a3c02-d133-4537-b6c6-fdda998211fb.roa (raw, json)
Hash identifier:          ztEYZ0/jZ1JSZJesj7uykk4ENGAxigG665l0Ks3R5zA=
Subject key identifier:   8E:05:2B:52:B5:DD:F1:CD:97:AF:8B:27:62:4D:5A:9B:8A:CD:72:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6BB0F39FB591CF12DD4E90877600B34AA1CD13E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e7a3c02-d133-4537-b6c6-fdda998211fb.roa
Signing time:             Wed 03 Dec 2025 01:10:08 +0000
ROA not before:           Wed 03 Dec 2025 01:10:08 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        202.174.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b0:f3:9f:b5:91:cf:12:dd:4e:90:87:76:00:b3:4a:a1:cd:13:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:10:08 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=204164fd8085c23ea6f4d0eb35ee097efb42ad9e7190d976c5047640e49e6f24, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:00:f3:5c:da:b1:b4:e4:6e:a5:19:ee:22:2d:
                    1b:04:c4:19:b3:55:84:92:ba:98:7a:6e:80:c9:81:
                    2f:d9:51:ca:0c:ca:2e:14:ad:be:02:fa:4d:24:f8:
                    fd:c5:f1:3d:e0:02:88:97:5f:3c:af:e8:92:65:ab:
                    73:1e:97:9a:cf:83:88:98:fe:80:7e:80:5b:10:70:
                    82:49:8a:69:2a:3a:10:c2:72:c5:d5:75:43:5d:d6:
                    39:ed:b5:b5:d9:b6:66:85:c0:d4:82:23:ee:9a:cc:
                    09:f0:1b:7a:ad:25:3a:9b:5e:a5:28:ed:ad:57:49:
                    91:7e:6d:2b:b5:6f:ee:5f:90:c6:27:ff:93:c9:27:
                    2d:0f:39:85:2c:4d:96:e4:dc:ff:74:96:96:c8:41:
                    d3:8e:10:a1:01:03:bb:93:60:d6:a8:23:f8:a7:b1:
                    5c:6e:6d:59:5a:56:11:a8:de:e4:b9:7a:61:31:d5:
                    3a:ae:1f:0c:2b:5b:73:69:2b:db:90:51:fd:52:87:
                    f0:f4:c1:14:31:0a:b6:8a:38:22:93:de:58:76:13:
                    dc:89:52:2e:d4:bc:6c:22:0d:d7:aa:e9:53:42:ca:
                    c9:9c:96:2e:5a:22:16:4f:eb:24:7a:2f:cd:21:4f:
                    cc:39:17:8a:c6:41:a0:de:f6:c8:30:74:a4:1b:26:
                    a1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:05:2B:52:B5:DD:F1:CD:97:AF:8B:27:62:4D:5A:9B:8A:CD:72:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e7a3c02-d133-4537-b6c6-fdda998211fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:19:6c:b7:9a:41:92:95:8f:f2:d1:86:41:86:e4:5b:a6:89:
         6b:88:af:dc:1a:d3:cb:ab:fd:5f:eb:aa:df:91:cf:f7:2e:94:
         fe:84:43:50:74:67:68:89:91:fd:1e:59:b8:9d:8d:81:a6:7b:
         ed:5b:89:42:c7:04:1c:f2:1d:77:d0:9d:36:99:b0:bc:c4:72:
         17:ff:eb:55:af:9f:80:e3:8c:f9:58:53:a3:a7:7f:0b:8e:d7:
         98:7c:2c:8c:11:84:5e:21:ec:54:3b:bc:67:2e:88:08:92:24:
         95:2d:56:8e:6a:9a:91:05:d6:37:7c:24:a2:00:8b:ad:8a:4f:
         cd:c9:07:3a:50:05:f3:87:dd:71:11:5f:7d:a1:cf:9b:b6:ec:
         22:70:84:7a:ba:38:90:7b:7f:2c:e7:ce:20:87:19:e9:67:71:
         7f:c7:77:8d:f0:a3:b0:26:67:3f:ac:dc:a7:7b:6b:f6:f6:0e:
         a6:44:f3:ed:e4:04:6e:df:20:64:55:58:bd:bc:45:1c:27:2c:
         cc:1f:8b:16:7e:bf:52:80:27:6e:a2:69:0a:fb:1d:64:65:d9:
         7b:22:bb:d5:5a:f2:97:71:31:e8:47:1c:bc:4d:ea:6b:89:b1:
         41:f9:30:a0:34:50:6a:a0:56:b4:ee:32:96:69:c0:80:ce:d3:
         21:b3:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:30:45 2025 by rpki-client