This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa
File:                     7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa (raw, json)
Hash identifier:          KOCI9FeyHKAb4SVjjYebRnAblQ+JetT91Unky9RfArs=
Subject key identifier:   52:A5:12:CF:04:20:7F:27:89:29:29:6A:1F:B2:7A:77:54:92:74:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       378685F4935FBE476A3E848F5C6200637DD49404
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa
Signing time:             Thu 20 Nov 2025 00:50:59 +0000
ROA not before:           Thu 20 Nov 2025 00:50:59 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:86:85:f4:93:5f:be:47:6a:3e:84:8f:5c:62:00:63:7d:d4:94:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:50:59 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=4132eaf18f2d9482fddea086b8eeea5db11867d359f1cff0a8e7aa083582ec82, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:99:3b:76:94:1f:bf:db:74:61:e6:4f:ee:d1:
                    d6:57:8c:a6:89:14:27:9d:95:86:5e:88:fb:7b:b0:
                    54:3f:bf:8b:f0:5a:1b:e2:19:dd:7a:cd:0c:c2:9e:
                    c5:26:6f:e1:54:d4:8f:2d:e3:88:ff:86:06:18:f0:
                    92:86:f4:75:e5:9b:8e:e8:56:2d:67:9a:71:d3:b5:
                    0c:57:e1:21:6a:52:4f:3d:92:cb:75:22:92:e1:e0:
                    78:32:5e:a7:3c:4c:2c:a5:d3:da:2b:35:ed:c5:8f:
                    67:ee:f6:c0:77:44:ff:5b:50:e9:8f:a6:fc:09:f7:
                    da:70:19:b8:d7:44:68:58:5d:c4:da:c3:39:bc:f0:
                    5e:8b:25:29:00:1d:24:26:5d:53:2e:5f:a5:06:14:
                    ea:bf:53:d6:64:13:b7:a1:3a:6f:a2:3e:7e:19:c1:
                    bd:16:47:6a:48:36:77:92:dc:73:ff:1a:d7:79:f0:
                    0d:bf:9a:94:2c:47:0b:dd:4e:c2:11:3e:8b:d1:44:
                    ac:e2:34:83:4b:ba:c7:8a:f3:8d:ac:df:bb:57:b2:
                    8d:21:86:b3:db:70:06:08:b8:49:25:cb:4c:ce:06:
                    77:af:36:40:58:f4:17:5a:e3:cc:0c:00:99:4b:bb:
                    db:df:28:d8:9b:36:a1:d6:67:a5:6c:71:16:ac:1c:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A5:12:CF:04:20:7F:27:89:29:29:6A:1F:B2:7A:77:54:92:74:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:61:74:c4:eb:a0:71:0d:b5:06:51:a8:b0:d5:8a:89:c8:
         96:74:25:be:db:dd:9a:69:a3:8d:cb:16:ed:b7:4f:1e:90:b7:
         4d:b2:6e:10:21:cc:41:15:aa:88:40:50:19:ad:90:c2:d2:58:
         c5:ac:93:95:f4:a3:b8:3a:f6:20:00:8c:4c:10:4e:c4:a0:9a:
         91:1f:d2:a1:3f:37:5d:2b:97:42:99:67:57:45:3c:36:3c:3f:
         53:fb:12:28:12:91:04:01:1d:05:57:42:59:84:4d:ee:a0:7e:
         de:58:48:27:33:09:b6:a2:94:88:65:34:da:03:4b:06:14:0d:
         8b:d9:2f:c8:f0:4f:13:55:a7:97:8b:00:2b:97:c6:97:c5:2f:
         42:5f:43:bd:6e:73:4a:50:94:81:b7:b4:4c:4f:36:fc:80:9f:
         29:d4:fa:fa:52:c4:81:a7:23:b7:63:7c:64:00:c9:58:23:c0:
         cc:bd:08:71:ca:cc:d3:7d:fe:1f:54:4f:46:cc:b0:aa:8c:b1:
         7b:09:2d:33:b8:b7:bc:8d:28:b7:bd:b1:76:2b:13:8e:73:da:
         03:b1:5f:50:2a:ae:da:7d:e6:ea:42:3b:ff:a4:40:03:b0:50:
         3b:92:f8:57:2f:83:bb:bd:46:3a:46:26:27:b4:52:31:2b:2b:
         78:70:a4:51
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUN4aF9JNfvkdqPoSPXGIAY33UlAQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMDA1MDU5WhcNMjYwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MTMyZWFmMThmMmQ5NDgyZmRkZWEwODZiOGVlZWE1ZGIx
MTg2N2QzNTlmMWNmZjBhOGU3YWEwODM1ODJlYzgyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSmTt2lB+/23Rh5k/u0dZXjKaJFCedlYZeiPt7sFQ/v4vw
WhviGd16zQzCnsUmb+FU1I8t44j/hgYY8JKG9HXlm47oVi1nmnHTtQxX4SFqUk89
kst1IpLh4HgyXqc8TCyl09orNe3Fj2fu9sB3RP9bUOmPpvwJ99pwGbjXRGhYXcTa
wzm88F6LJSkAHSQmXVMuX6UGFOq/U9ZkE7ehOm+iPn4Zwb0WR2pINneS3HP/Gtd5
8A2/mpQsRwvdTsIRPovRRKziNINLuseK842s37tXso0hhrPbcAYIuEkly0zOBnev
NkBY9Bda48wMAJlLu9vfKNibNqHWZ6VscRasHM/7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUqUSzwQgfyeJKSlqH7J6d1SSdOQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmMGIzODY1LTYwY2QtNGY0NS1iYjFjLWU3ZTQ3ZmFjMzhkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADRXAYwDQYJKoZIhvcNAQELBQADggEBAE3YYXTE66BxDbUGUaiw1YqJyJZ0
Jb7b3Zppo43LFu23Tx6Qt02ybhAhzEEVqohAUBmtkMLSWMWsk5X0o7g69iAAjEwQ
TsSgmpEf0qE/N10rl0KZZ1dFPDY8P1P7EigSkQQBHQVXQlmETe6gft5YSCczCbai
lIhlNNoDSwYUDYvZL8jwTxNVp5eLACuXxpfFL0JfQ71uc0pQlIG3tExPNvyAnynU
+vpSxIGnI7djfGQAyVgjwMy9CHHKzNN9/h9UT0bMsKqMsXsJLTO4t7yNKLe9sXYr
E45z2gOxX1Aqrtp95upCO/+kQAOwUDuS+Fcvg7u9RjpGJie0UjErK3hwpFE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:23:15 2025 by rpki-client