This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa
File:                     8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa (raw, json)
Hash identifier:          grubdeinVtRL5q5pUksjIrEIHLjDD+rSmfgqzNv1Scg=
Subject key identifier:   53:52:87:DC:CB:EF:B8:70:6C:7D:61:52:40:86:92:AC:79:B7:D4:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18395EFF6E843ACE0C3AC5304FE301C8F9E6D6E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa
Signing time:             Wed 19 Nov 2025 00:00:07 +0000
ROA not before:           Wed 19 Nov 2025 00:00:07 +0000
ROA not after:            Tue 17 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        20.129.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:39:5e:ff:6e:84:3a:ce:0c:3a:c5:30:4f:e3:01:c8:f9:e6:d6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:00:07 2025 GMT
            Not After : Feb 17 23:59:59 2026 GMT
        Subject: serialNumber=11d7a24025ccab7f74a7c9501384359bf0afc30558c6e824c2253a40dcc30fd0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:23:c7:94:12:7c:24:39:d6:65:4d:05:82:2d:
                    0b:34:52:25:f9:ba:b2:16:a7:e7:83:12:dd:57:43:
                    71:19:48:1d:22:28:8c:31:3e:8d:a4:fd:91:2a:85:
                    50:07:79:ee:84:76:15:6e:33:77:fe:1d:ec:d2:76:
                    ae:72:7e:90:29:90:61:ef:79:5e:7a:04:78:ad:21:
                    78:ae:78:1c:99:fc:48:0c:3b:11:41:71:27:6b:77:
                    66:f7:8a:4d:ff:b4:eb:3c:6f:b4:b1:a7:4f:fc:2e:
                    b2:5f:be:73:42:12:9b:58:ef:98:32:a7:c2:9e:33:
                    c8:4d:bd:98:20:2b:5b:ad:06:4a:8d:ae:37:8d:d6:
                    ba:a3:af:05:8e:93:90:12:ea:c7:e2:3f:dc:61:85:
                    46:3c:50:28:05:6c:55:4f:ff:fb:6c:67:5a:d6:c3:
                    81:8e:21:90:b5:29:3c:df:bb:43:1d:95:4d:21:62:
                    b6:e8:89:5c:a0:6e:97:2d:bd:9d:15:6c:9e:32:9f:
                    94:04:5f:d8:c1:5c:e0:c3:28:d3:88:cb:25:3e:a6:
                    bd:79:42:2e:e5:62:c8:2e:dd:22:f1:a4:54:20:02:
                    b8:1c:2d:23:9f:c9:c9:91:75:5a:78:04:99:6f:41:
                    63:ce:27:74:47:da:7a:9c:5c:d8:79:31:e3:d4:43:
                    8f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:87:DC:CB:EF:B8:70:6C:7D:61:52:40:86:92:AC:79:B7:D4:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:69:17:f1:7d:2f:35:e6:41:db:c3:5e:e3:96:1b:99:10:ad:
         1a:ec:a1:39:c4:3b:93:46:87:0b:2c:a2:79:98:11:62:81:dc:
         a8:a1:e0:9e:8b:3a:3b:ab:c8:8b:8a:06:4b:d6:ac:e8:52:d5:
         2e:57:86:89:93:ef:29:58:4d:f5:4f:bd:a0:46:e8:36:9a:06:
         e4:7e:00:2c:88:26:0e:7a:92:fd:06:18:bc:d7:d0:02:82:d2:
         8c:2b:93:b8:ed:94:aa:ff:8a:9c:38:dc:1c:9b:cc:01:80:cd:
         19:a2:d4:8c:ce:91:2f:6d:61:c4:bc:a9:c1:9f:41:1c:21:ad:
         f9:04:ae:f9:e6:04:5f:bd:29:2b:c7:14:9a:5b:96:11:2f:7e:
         21:23:86:aa:72:07:c8:83:a2:8e:89:5a:36:c8:92:26:ab:68:
         ee:09:26:cc:9c:5b:ba:11:8b:d9:ba:a4:35:57:89:81:b5:3a:
         98:a2:02:25:ae:f6:4a:c2:b4:52:dd:01:5b:13:19:71:13:c2:
         24:d5:80:de:10:81:ea:62:0b:b9:6b:cd:64:cb:1f:b6:d8:f5:
         44:b3:15:cd:bd:9a:72:1e:08:21:2f:15:ce:e0:76:88:39:df:
         da:15:b0:ca:49:cd:7f:b9:c6:d2:08:50:1f:b1:45:59:b2:68:
         af:59:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:18 2025 by rpki-client