This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8324e9e8-14c6-44fc-9b12-6fbcf6328676.roa
File:                     8324e9e8-14c6-44fc-9b12-6fbcf6328676.roa (raw, json)
Hash identifier:          bIBw4sqdxTWC6Iz908nDCzPnHBc+SWDvKYbIBBxCj7M=
Subject key identifier:   7D:69:0F:9E:39:A8:CE:42:23:57:68:A4:69:10:44:E0:FD:38:1A:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       122B78D44A9128080488DD5BE8BA937388003A13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8324e9e8-14c6-44fc-9b12-6fbcf6328676.roa
Signing time:             Sat 06 Dec 2025 02:31:16 +0000
ROA not before:           Sat 06 Dec 2025 02:31:16 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.78.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2b:78:d4:4a:91:28:08:04:88:dd:5b:e8:ba:93:73:88:00:3a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 02:31:16 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=baf6cd8680b596d252c25f441bc53021a7617f8347f4115cf6ddfda1ade7020e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d1:c1:09:83:00:08:38:eb:7d:a3:2c:93:08:
                    8c:f1:35:16:fb:82:cb:a4:07:e6:e0:5a:eb:ac:2b:
                    2f:26:8f:9b:68:7d:25:b6:61:ee:78:95:70:c6:db:
                    32:18:79:9e:07:ea:fc:a1:c2:a6:57:e2:b2:37:bd:
                    fd:ab:a2:7c:b5:db:37:f8:6c:b1:85:9f:43:05:ed:
                    bf:37:27:8d:86:57:a2:9f:4e:25:85:58:80:08:3b:
                    38:46:11:81:3d:74:08:dd:40:f5:44:ce:60:d3:21:
                    86:09:4a:6d:ee:47:d7:e5:e8:dd:63:05:22:6a:17:
                    ce:44:b9:ab:75:ff:1b:01:97:8e:3e:48:bd:3c:1f:
                    34:a2:e2:e7:37:e5:86:fb:d5:3a:d2:ff:dd:c8:2f:
                    db:1a:8d:b4:09:3f:7e:6d:e6:e8:8b:0e:90:ef:0a:
                    74:9a:80:e0:e4:55:1e:b1:39:7e:3a:d9:89:b6:5a:
                    1c:e9:36:f6:00:4b:a5:c8:36:bc:b6:a6:01:0a:dc:
                    c0:88:8f:fc:92:c4:2d:77:26:9c:92:26:16:f8:fe:
                    f6:c4:58:9a:07:da:0d:5d:e3:f5:59:76:a7:7f:3d:
                    21:93:25:0b:4b:f2:69:9b:91:67:42:3c:fe:9f:66:
                    06:7b:48:29:d4:7e:03:19:fc:db:9e:a4:92:e0:60:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:69:0F:9E:39:A8:CE:42:23:57:68:A4:69:10:44:E0:FD:38:1A:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8324e9e8-14c6-44fc-9b12-6fbcf6328676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         ad:ef:e6:eb:28:48:1a:8a:d1:b5:4f:08:80:3e:29:61:b2:15:
         9a:ad:44:50:54:7f:d4:eb:a4:8a:88:79:8a:40:e7:6d:4b:51:
         23:d1:49:39:96:f5:8b:f4:86:3f:24:f7:e1:92:70:ca:74:bf:
         ed:78:bb:bd:15:ec:6b:db:77:51:59:6e:7a:25:ee:9e:6a:8e:
         dc:6d:a3:04:b6:76:0d:cd:53:51:4a:ae:6a:72:76:a7:f7:ab:
         0c:5d:43:ad:1b:7a:97:f7:2c:64:a7:08:81:19:12:3e:d3:53:
         a5:13:c1:9a:12:d0:5b:66:ad:e7:58:83:52:25:c3:45:f4:47:
         89:00:31:e1:d5:ca:87:01:7e:6f:f1:1f:cf:90:34:54:ac:25:
         dc:58:27:5b:82:35:89:eb:63:97:c0:01:aa:43:78:aa:c1:d5:
         74:fb:5b:cf:b1:68:78:1d:de:1f:71:c5:a8:41:39:cb:a8:3a:
         27:99:98:e3:0d:90:84:5f:6b:37:64:08:5e:ec:ae:62:ea:8e:
         98:95:9a:6a:8f:d2:4d:da:b7:ac:a7:f4:1f:af:bf:cc:13:1c:
         28:00:97:7c:23:f9:f5:0c:ba:9a:8d:b6:d9:47:d5:ba:e7:02:
         f6:87:0c:51:41:f5:a3:fc:47:1f:5e:8b:07:08:52:90:10:e4:
         e0:33:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:38:27 2025 by rpki-client