This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82c740a4-f175-4ef2-8340-611ca350ff40.roa
File:                     82c740a4-f175-4ef2-8340-611ca350ff40.roa (raw, json)
Hash identifier:          WR72Bon/ZbfqopvrzgQb3ybcBQFGFMpFJz5vRUZwRMI=
Subject key identifier:   97:47:3D:B9:68:3F:97:F1:7D:94:0D:84:10:75:A2:3A:A0:81:55:CF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26FE763A0AA519029DED97D900FD6FF9AF051B95
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82c740a4-f175-4ef2-8340-611ca350ff40.roa
Signing time:             Thu 04 Dec 2025 00:40:40 +0000
ROA not before:           Thu 04 Dec 2025 00:40:40 +0000
ROA not after:            Wed 04 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.147.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fe:76:3a:0a:a5:19:02:9d:ed:97:d9:00:fd:6f:f9:af:05:1b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  4 00:40:40 2025 GMT
            Not After : Mar  4 23:59:59 2026 GMT
        Subject: serialNumber=ec094260cb910bb5122bb7a78485c1321ec6b159623aedfc2c3c48176c0dd504, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:ca:b1:12:7d:43:f7:c1:3d:4b:9d:01:05:
                    3a:1e:4a:c8:b2:f2:6e:ac:e8:57:a4:df:6c:27:89:
                    b2:45:38:f1:17:f0:21:fb:6c:24:57:c6:62:8f:9d:
                    57:a9:7f:d0:95:c1:a1:0b:a4:53:b4:aa:6b:43:4f:
                    e1:c9:3f:cb:ab:1b:95:6f:bb:c6:0c:06:09:5d:57:
                    30:cd:bb:15:06:fc:7c:64:81:45:6b:a3:14:5a:4b:
                    cb:7e:74:9c:4b:8e:e0:c7:1e:2e:2f:18:52:1f:0f:
                    18:6d:88:a5:da:ea:7c:5f:94:2c:fe:dd:75:7a:74:
                    81:bc:ca:82:6a:63:2e:0a:25:3a:2f:f2:0f:89:21:
                    df:32:94:ed:aa:40:33:7f:8c:09:2e:83:2f:26:f4:
                    4a:bb:dc:fb:28:d9:89:c0:fd:8d:c6:bc:ba:e7:d1:
                    62:d5:a9:e1:f3:f8:c9:b8:38:a6:95:9b:0c:1b:3f:
                    c4:8f:12:c5:9b:14:bd:9d:00:ef:4d:ca:fe:6e:eb:
                    f1:6c:e3:18:18:3f:32:4f:df:7f:fc:df:53:45:bb:
                    af:87:2a:2d:f9:5f:96:1e:f4:7b:a1:b1:a2:f5:a0:
                    9e:4c:31:fc:6b:40:f2:3e:21:3c:e5:bb:20:36:42:
                    f9:cf:a8:62:cd:4d:c2:38:d5:50:8c:e0:0a:eb:c7:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:47:3D:B9:68:3F:97:F1:7D:94:0D:84:10:75:A2:3A:A0:81:55:CF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82c740a4-f175-4ef2-8340-611ca350ff40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:e5:b6:d8:99:33:95:d7:38:6b:66:8d:ef:8f:79:97:48:11:
         50:35:92:7d:37:dc:fa:62:8b:a9:a9:10:3b:10:d1:00:ca:7d:
         ac:8b:ae:99:85:33:ea:54:e3:17:e5:2d:cb:8e:b5:e1:83:88:
         2f:31:b6:cb:b0:30:31:51:06:5f:40:49:16:17:4a:a4:58:4e:
         91:f0:13:40:70:a6:4a:a0:0d:5a:60:d0:16:71:49:51:d0:ff:
         57:b0:da:73:f6:70:ee:be:4d:9f:60:9a:f0:3f:bd:fc:43:96:
         b8:18:28:45:c7:48:08:e8:ba:6b:9f:b2:9c:19:b5:63:ab:80:
         42:f7:d4:79:5d:9c:a0:a1:d5:7c:94:a3:0d:30:af:ec:9c:e1:
         10:cb:c4:ed:47:73:53:aa:17:d5:7e:b1:c7:1d:ef:a6:85:3a:
         47:c4:a2:a8:21:bb:0c:4a:70:65:19:de:a1:10:4a:d2:f4:21:
         55:24:77:88:46:2e:a8:a5:dd:eb:73:b5:6e:c8:0a:7b:ca:e4:
         36:68:e4:e4:a5:6b:5a:35:f3:85:8d:6c:ed:e2:8a:4c:9e:94:
         76:bb:f0:5d:a7:19:e5:b1:d5:e9:9b:cd:6f:b8:55:2f:a7:38:
         6a:77:95:07:29:92:64:1c:21:6e:4b:83:49:eb:a0:25:0b:5a:
         26:ea:10:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:05 2025 by rpki-client