This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86d6889b-737a-4896-8557-d00a26c7561c.roa
File:                     86d6889b-737a-4896-8557-d00a26c7561c.roa (raw, json)
Hash identifier:          lipu/GPDIsHLvrbEdFhblILmPY86OM3qBjZaYFe2xP0=
Subject key identifier:   1B:61:2F:6A:90:E3:1D:42:B3:E4:F2:01:0B:9A:00:98:A0:98:27:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DF642B0CB81F636E22C2DCA487AFFC3EDDD1BD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86d6889b-737a-4896-8557-d00a26c7561c.roa
Signing time:             Wed 03 Dec 2025 01:31:50 +0000
ROA not before:           Wed 03 Dec 2025 01:31:50 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f6:42:b0:cb:81:f6:36:e2:2c:2d:ca:48:7a:ff:c3:ed:dd:1b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:31:50 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=f783c0c6abe022df07b27c9c80ea4358b9a78144fe6a18e486693d45dc4f7fd6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ec:65:77:7b:57:91:e8:1f:a1:7b:15:4a:5a:
                    91:f9:48:c8:cd:08:f0:d7:b3:90:c3:a4:2e:41:cf:
                    72:2b:44:29:51:03:7e:ae:df:98:48:80:b0:32:05:
                    ae:70:c9:66:a7:5d:c7:8a:96:3f:19:22:c5:a8:8a:
                    dd:d7:c1:58:f3:08:f4:e9:21:ce:be:28:17:e9:a5:
                    b6:20:3a:cb:d1:b7:03:2f:34:cf:43:bc:bb:3a:27:
                    15:5b:19:61:14:1d:02:d9:1b:cc:6d:c8:93:0d:27:
                    cf:6b:2d:ab:be:92:4a:43:e2:35:82:c3:55:15:1f:
                    50:db:f2:dc:da:e0:11:5f:b0:cb:93:3e:15:98:df:
                    fa:42:29:d8:20:be:1f:5f:a5:c2:15:05:d4:e4:7f:
                    20:31:ba:bf:2d:0f:f2:c7:fa:a2:06:bb:5f:da:5b:
                    42:5e:11:6d:11:40:84:87:80:1e:d0:93:1b:c8:20:
                    18:3e:3e:a2:5d:9b:16:66:0f:35:32:20:db:f5:01:
                    4e:64:4a:2a:7d:66:7f:5a:bc:ea:b3:58:78:2b:b4:
                    2e:7f:13:08:ac:d7:2f:0e:03:2b:4e:08:5c:23:38:
                    f8:25:30:7d:60:08:4e:3a:78:8b:88:cc:90:61:95:
                    24:52:56:f5:c9:66:9f:9e:bf:1a:8d:5d:a4:de:e2:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:61:2F:6A:90:E3:1D:42:B3:E4:F2:01:0B:9A:00:98:A0:98:27:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86d6889b-737a-4896-8557-d00a26c7561c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:fc:64:54:55:db:fa:7a:6a:bb:70:57:2c:21:e5:03:7e:e2:
         95:22:09:e1:5d:f9:28:dc:47:90:5a:8f:79:47:91:de:50:08:
         d2:69:20:22:6a:2f:a5:35:db:a3:a1:5b:70:8c:92:9b:30:3b:
         c8:6f:a6:14:6b:5c:ec:85:ea:79:01:ec:4f:ad:a3:51:1c:28:
         bf:ac:9f:b3:9e:43:99:82:f7:ca:6c:61:ea:82:bc:50:1b:19:
         2d:bc:f7:ed:c2:17:c5:dc:45:4d:44:c0:b0:82:6b:89:9f:f6:
         9d:69:a0:15:1e:76:9f:14:fa:cf:17:94:bc:b6:be:fc:ef:aa:
         48:68:c4:93:33:9b:2c:14:6e:ff:ff:6d:b3:9a:41:60:f7:37:
         9a:85:8a:b1:87:62:7e:6a:b2:b0:8f:8b:cb:11:fb:82:5a:70:
         d1:57:08:52:e1:24:32:f7:21:77:01:bd:f4:01:ee:fb:12:31:
         cf:ac:0d:fa:2f:98:be:ac:e2:f9:73:16:d8:10:c1:0b:0f:f3:
         74:71:73:8d:90:3b:e4:5c:cc:96:99:d0:94:14:76:09:30:b8:
         21:cd:14:cf:ea:f5:75:bc:15:fd:90:3d:a1:4a:0c:6c:b2:17:
         30:8b:2a:e7:8a:07:fb:47:35:0b:24:be:fc:5e:9e:b3:d3:4f:
         88:2f:16:bb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbfZCsMuB9jbiLC3KSHr/w+3dG9MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDEzMTUwWhcNMjYwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNzgzYzBjNmFiZTAyMmRmMDdiMjdjOWM4MGVhNDM1OGI5
YTc4MTQ0ZmU2YTE4ZTQ4NjY5M2Q0NWRjNGY3ZmQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDg7GV3e1eR6B+hexVKWpH5SMjNCPDXs5DDpC5Bz3IrRClR
A36u35hIgLAyBa5wyWanXceKlj8ZIsWoit3XwVjzCPTpIc6+KBfppbYgOsvRtwMv
NM9DvLs6JxVbGWEUHQLZG8xtyJMNJ89rLau+kkpD4jWCw1UVH1Db8tza4BFfsMuT
PhWY3/pCKdggvh9fpcIVBdTkfyAxur8tD/LH+qIGu1/aW0JeEW0RQISHgB7QkxvI
IBg+PqJdmxZmDzUyINv1AU5kSip9Zn9avOqzWHgrtC5/Ewis1y8OAytOCFwjOPgl
MH1gCE46eIuIzJBhlSRSVvXJZp+evxqNXaTe4tHDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUG2EvapDjHUKz5PIBC5oAmKCYJzwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg2ZDY4ODliLTczN2EtNDg5Ni04NTU3LWQwMGEyNmM3NTYxYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmF0wDQYJKoZIhvcNAQELBQADggEBAFj8ZFRV2/p6artwVywh5QN+4pUi
CeFd+SjcR5Baj3lHkd5QCNJpICJqL6U126OhW3CMkpswO8hvphRrXOyF6nkB7E+t
o1EcKL+sn7OeQ5mC98psYeqCvFAbGS289+3CF8XcRU1EwLCCa4mf9p1poBUedp8U
+s8XlLy2vvzvqkhoxJMzmywUbv//bbOaQWD3N5qFirGHYn5qsrCPi8sR+4JacNFX
CFLhJDL3IXcBvfQB7vsSMc+sDfovmL6s4vlzFtgQwQsP83Rxc42QO+RczJaZ0JQU
dgkwuCHNFM/q9XW8Ff2QPaFKDGyyFzCLKueKB/tHNQskvvxenrPTT4gvFrs=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:02:22 2025 by rpki-client