This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81bbc108-6e0e-4154-8358-243d50986ccb.roa
File:                     81bbc108-6e0e-4154-8358-243d50986ccb.roa (raw, json)
Hash identifier:          kH45QEvfznusERbsVP0+hymSpPw2zgonlctg1iZTn1I=
Subject key identifier:   37:3B:04:BF:08:29:6D:38:CD:3F:BF:20:DD:8B:86:5A:3E:9C:77:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08676A8300D3422BA7856EC91D28697B62D8D217
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81bbc108-6e0e-4154-8358-243d50986ccb.roa
Signing time:             Wed 03 Dec 2025 01:40:45 +0000
ROA not before:           Wed 03 Dec 2025 01:40:45 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:67:6a:83:00:d3:42:2b:a7:85:6e:c9:1d:28:69:7b:62:d8:d2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:40:45 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=bf3b1e4f82f5a48d6688fdf982a141d28e2642cb4c0e304beaf59852d55cd017, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0f:90:12:46:3f:40:dc:48:96:7b:3f:67:c7:
                    71:f0:b4:0b:22:fe:57:f4:f1:51:74:2e:88:c9:f4:
                    2e:9f:1f:83:8e:13:bd:0e:3b:f0:d5:c5:11:aa:1f:
                    51:d3:ff:5a:cf:2c:99:11:b0:4f:8e:59:5e:a6:ef:
                    a8:d6:f3:b5:ee:9f:95:09:9d:f0:de:50:cc:f4:aa:
                    f1:68:85:b4:3c:90:2f:f2:ae:b8:c4:d9:2f:a2:4f:
                    68:78:11:4c:db:23:a1:3c:c5:26:a6:03:15:12:37:
                    94:f7:0d:1e:7f:ba:2c:58:f1:58:66:ba:6b:a2:a4:
                    cf:2e:92:8a:06:94:32:ed:c8:fc:67:b6:82:07:d1:
                    a3:82:98:e3:49:d9:64:51:46:36:7d:7c:5a:08:57:
                    f7:cf:1f:76:3f:e7:eb:ab:49:db:10:a6:a8:02:97:
                    f0:e0:e1:b6:54:99:5d:3f:09:80:48:02:3c:43:47:
                    88:8b:57:e0:55:20:6c:06:c8:55:40:70:b8:0d:d4:
                    49:dd:c0:00:61:f2:e7:df:cb:b7:29:e2:d1:26:34:
                    20:39:5a:14:8e:0d:bd:36:06:2a:8d:d3:20:57:af:
                    0d:61:18:f5:09:d9:b2:35:1b:99:27:b7:96:18:52:
                    ab:41:e5:bf:06:96:17:9d:ee:7b:c1:59:bd:a7:fa:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3B:04:BF:08:29:6D:38:CD:3F:BF:20:DD:8B:86:5A:3E:9C:77:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81bbc108-6e0e-4154-8358-243d50986ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:24:f6:ef:d5:26:a8:72:40:bb:af:fa:ab:4a:1e:4d:9b:97:
         dc:c5:6b:c5:6c:82:76:a4:0e:c8:f1:e3:8b:69:a7:9f:26:10:
         40:11:7d:e9:28:85:70:fa:b0:26:10:f7:a5:49:e8:2d:1a:e7:
         20:c9:af:1a:2e:70:65:75:60:01:3f:57:2c:b1:8f:6f:80:b4:
         a1:0f:5b:a0:55:63:a0:36:4f:4e:17:1f:ad:55:7f:5b:8a:5e:
         a4:26:e3:73:70:b6:29:28:55:eb:ba:64:c2:ee:a9:4b:77:9c:
         7a:be:b2:d5:af:74:b6:d9:5f:28:ad:e2:4f:bf:77:d4:cc:b0:
         35:ad:ad:90:dc:3a:4f:ca:de:13:4c:6a:00:fb:16:e0:a1:65:
         96:5c:b8:af:99:45:e5:aa:4d:1d:19:fe:82:98:2d:70:36:4d:
         4d:14:e4:df:b4:5a:22:72:3b:3f:da:85:d3:0f:86:17:40:9c:
         dc:81:0c:e1:13:a3:ec:07:67:1e:39:06:3e:ea:fc:90:23:92:
         6a:ad:3f:2a:b5:9a:b9:c4:71:31:20:03:d4:e4:76:2f:15:01:
         fd:00:b9:c3:38:23:75:b0:c5:52:f9:ad:18:d5:b9:42:05:60:
         2f:e6:b6:68:cb:8e:97:a1:25:7d:74:93:57:34:cc:48:0c:e6:
         83:4b:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:50:45 2025 by rpki-client