This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87f1ee11-665b-4a13-9a9b-e7c35fe88493.roa
File:                     87f1ee11-665b-4a13-9a9b-e7c35fe88493.roa (raw, json)
Hash identifier:          XCAmtFkASwwKqxkEHP3eFce6z6rqMVipba17vJyuw0A=
Subject key identifier:   AF:37:75:BC:DC:F3:BF:D7:84:79:BE:A0:CA:66:77:5B:71:AE:2D:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68AB57376F6ED09206E38CEE1D62562617024F30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87f1ee11-665b-4a13-9a9b-e7c35fe88493.roa
Signing time:             Sat 15 Nov 2025 00:10:40 +0000
ROA not before:           Sat 15 Nov 2025 00:10:40 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ab:57:37:6f:6e:d0:92:06:e3:8c:ee:1d:62:56:26:17:02:4f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:10:40 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=0a9640fdd0e1cf9b6a67b980cdac1cbfd360b56bc826adeff46fc22cb39ad4eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:79:66:1e:a3:5e:99:38:ca:50:94:d3:e9:
                    b1:af:b6:64:35:cf:c3:3c:47:db:7c:6a:e0:90:e3:
                    84:1d:fa:23:55:8b:f7:73:0f:50:ee:b5:31:a1:0c:
                    37:4d:06:a2:fb:87:c5:9a:b6:6b:32:af:ad:db:3a:
                    5d:5a:2b:b5:13:26:1b:9f:c9:58:d5:27:ed:4e:56:
                    f6:e1:43:d5:b1:8c:c1:05:88:3b:0a:44:96:04:da:
                    f1:7d:1d:29:c0:0d:f7:4d:50:30:22:a5:76:90:e3:
                    36:ba:65:5f:ff:1d:04:af:29:7a:f9:62:16:d9:4b:
                    5e:e2:fb:85:cb:92:9d:28:7a:90:ee:7f:d3:5c:69:
                    26:94:a9:a3:13:e7:80:db:e8:72:40:cd:d6:dc:f3:
                    d4:51:9c:9e:f5:a9:95:2b:a6:b5:f7:ff:72:fc:2d:
                    2b:b8:38:d8:9c:ec:fe:98:94:86:61:b0:14:18:25:
                    bc:9f:bf:9d:f9:a0:5b:ee:ab:e1:70:36:7f:ec:c0:
                    b4:77:28:1d:7f:26:08:68:60:c5:fc:62:47:1b:38:
                    80:2a:3d:fd:b6:f6:41:92:06:d0:c2:7b:bf:21:6e:
                    5d:7e:25:79:9f:2a:ba:d5:7e:97:45:a2:cd:5d:92:
                    6f:0f:5d:fb:2c:27:5e:88:8e:d4:fa:6c:b8:f6:c9:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:37:75:BC:DC:F3:BF:D7:84:79:BE:A0:CA:66:77:5B:71:AE:2D:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87f1ee11-665b-4a13-9a9b-e7c35fe88493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:c1:17:eb:ce:6e:d2:8a:af:bf:50:15:fe:4f:a9:b4:31:62:
         f2:7b:e5:0b:9a:03:8a:b2:3e:81:7f:6c:5a:0f:e7:d6:4c:86:
         61:97:b9:8e:57:e9:d1:36:d5:59:28:d2:68:eb:83:52:53:d3:
         93:48:6b:3c:89:2a:79:72:cb:64:d3:65:ab:fc:47:73:93:fb:
         a8:ca:75:7e:e6:ff:df:5c:94:84:8c:e9:39:b5:86:58:7c:ef:
         7a:5a:07:a6:e6:98:54:36:01:04:82:5d:f0:1c:3b:1f:41:a1:
         6f:fc:d5:18:6e:23:a2:95:5f:d6:8b:5c:3b:56:3b:99:43:9c:
         e8:fe:26:a1:d9:91:5d:cd:50:50:6e:4c:4f:43:09:b1:0c:dd:
         26:7d:29:6d:5a:ac:e7:cf:3c:ff:9b:2d:d1:ff:4c:63:0f:ba:
         a2:39:5c:58:76:61:3b:e6:da:11:b4:8b:c7:46:0e:ca:be:fd:
         29:55:18:a8:45:78:de:56:b3:68:88:0b:80:bc:95:69:7a:31:
         4b:df:50:90:28:09:df:f7:77:62:01:a6:d0:b4:74:77:6c:96:
         25:09:89:33:9e:94:d3:7f:5f:8f:b7:10:81:0a:49:3d:85:16:
         47:e8:58:5f:8a:00:e7:89:f1:ad:58:6e:f1:1d:28:7c:e9:74:
         96:57:27:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:51:49 2025 by rpki-client