This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d368fe-1e55-4c65-884c-70b8e9458a4d.roa
File:                     83d368fe-1e55-4c65-884c-70b8e9458a4d.roa (raw, json)
Hash identifier:          Fl9DLc/kmnZqyBbLDAKK7a+SqMO/Jtml4+s4a4PZFls=
Subject key identifier:   0F:A7:99:EF:AA:08:39:FF:B7:4B:DB:CE:59:B3:12:BC:10:95:B3:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DE49D8E3771BC6BAE06372BE85B13917E4F7D95
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d368fe-1e55-4c65-884c-70b8e9458a4d.roa
Signing time:             Wed 03 Dec 2025 01:30:09 +0000
ROA not before:           Wed 03 Dec 2025 01:30:09 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e4:9d:8e:37:71:bc:6b:ae:06:37:2b:e8:5b:13:91:7e:4f:7d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:30:09 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=b9b17663e16404072a2dccc39ac6a0b1a1be52d38df25565951ffa324ef94463, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:51:de:a8:88:4b:db:ff:5a:5d:36:74:65:
                    96:25:d0:ea:ea:db:4c:0e:ec:ee:f7:58:01:43:35:
                    cf:4c:5b:ae:8c:13:d9:e4:62:a4:4e:bc:bc:e7:9b:
                    42:a8:5e:a0:88:c4:b8:af:aa:cf:ee:52:c5:a5:92:
                    4e:d6:cf:f2:76:ff:64:0d:0c:1b:08:60:a4:92:a6:
                    27:77:09:c1:56:6e:a5:61:c4:a4:bb:f2:e6:35:a4:
                    06:f6:98:0c:4b:15:33:ba:d1:99:c0:b0:a6:1b:bb:
                    4b:9a:e9:9b:97:6e:c7:d3:b2:23:3b:21:35:11:64:
                    04:38:ea:d2:97:ea:ee:38:f2:08:87:c1:66:ad:82:
                    6a:37:0a:66:4d:88:f0:da:91:0a:5e:a8:e1:59:1e:
                    fd:e2:c8:ab:5c:de:85:e0:b5:b6:1b:17:59:a5:3e:
                    a2:e3:2b:c4:5e:2b:89:bb:02:ae:0e:44:61:d1:7f:
                    1b:25:b7:84:4f:f0:11:80:56:11:42:e3:09:a9:f6:
                    fa:f0:6e:59:b1:6e:26:1a:dd:b3:75:db:04:1e:80:
                    03:2b:4d:02:69:c4:d6:78:19:18:a0:18:a5:7c:c8:
                    cd:2f:6f:9b:74:4f:83:3e:bf:b7:34:9d:78:e8:27:
                    bf:27:8e:dc:53:ea:3c:6b:7a:c5:d3:33:f9:b6:d7:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A7:99:EF:AA:08:39:FF:B7:4B:DB:CE:59:B3:12:BC:10:95:B3:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d368fe-1e55-4c65-884c-70b8e9458a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:32:cf:6a:c8:c5:a2:12:4f:f4:71:8d:35:db:34:78:4e:
         c9:44:2f:0f:f0:ae:73:8c:73:27:83:cb:11:2f:85:47:de:2a:
         a9:19:25:70:cb:90:81:28:7c:e2:e2:ba:af:8a:42:62:62:f0:
         21:fb:d5:12:64:af:5e:51:f8:63:39:22:11:bc:2f:f0:06:a2:
         38:dd:52:2e:a7:7b:3a:a6:6b:c2:e9:69:cc:f5:08:40:7e:d7:
         f2:62:33:ed:54:35:a0:86:7c:54:1d:63:a0:c6:d3:0f:52:5e:
         91:87:50:0f:db:a1:6d:d7:6f:27:6e:f2:6f:ff:34:c4:2f:b5:
         12:aa:ed:51:aa:ea:03:3f:33:b7:44:d8:db:6e:ef:64:b3:04:
         15:56:ec:56:d9:8d:2c:c3:8f:8a:5f:ef:fd:9c:49:d5:b7:a6:
         94:23:ed:6c:29:11:8b:f0:0d:b8:18:7b:d4:97:97:d5:0e:70:
         3f:03:28:f6:e8:6e:58:dd:64:b6:8b:14:66:85:9b:31:2f:7f:
         aa:b2:20:26:ef:c2:27:76:46:91:40:9f:41:cb:d9:4f:e5:85:
         ff:e8:d4:9b:e7:14:d7:eb:1d:77:c9:b6:a6:a8:eb:16:5a:5a:
         1a:fa:92:e3:cf:47:22:71:e1:e2:66:95:75:bc:1b:bd:df:a6:
         d8:e9:51:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:59:29 2025 by rpki-client