This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8991f83e-ff4c-4d8b-9498-4f1f3ce1b454.roa
File:                     8991f83e-ff4c-4d8b-9498-4f1f3ce1b454.roa (raw, json)
Hash identifier:          8wcwO3o5EGR0x4Il1iUzRRJrnJULV+NYsJ4fo0CwQ+Y=
Subject key identifier:   99:1E:C8:38:88:1C:23:0C:D3:47:E2:8C:21:D6:F7:82:1A:2E:B6:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F2640C9FA4280DE3968FD9A011173B89961E743
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8991f83e-ff4c-4d8b-9498-4f1f3ce1b454.roa
Signing time:             Thu 20 Nov 2025 01:00:06 +0000
ROA not before:           Thu 20 Nov 2025 01:00:06 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.21.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:26:40:c9:fa:42:80:de:39:68:fd:9a:01:11:73:b8:99:61:e7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 01:00:06 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=217a8e2d9e25d32cfbf9eb905fca33055534985c53e7cb3acf07d8bcadbb7b6e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:be:e7:44:bd:f0:3c:7a:4d:57:48:ee:70:
                    7b:1e:71:88:5b:7b:ef:aa:1a:32:da:41:2e:98:d6:
                    7c:02:b1:8b:ce:fb:1a:b7:dd:a6:52:f1:7c:fa:27:
                    ab:c6:3a:5e:21:7b:70:1f:12:2a:74:14:6f:bb:e4:
                    3d:e9:55:cf:83:b4:d4:32:90:d6:1c:b6:c1:15:42:
                    4d:df:99:26:2e:d2:7e:e1:c6:bc:29:5a:a3:b0:3b:
                    6b:06:a5:1b:d0:78:bf:2d:ba:24:d5:05:81:34:b2:
                    5d:b8:14:2b:f6:99:77:0a:19:ac:e8:9b:44:9f:15:
                    25:0d:a0:ac:23:f0:16:f7:d8:26:7d:86:07:14:ca:
                    92:74:f8:45:9d:67:ce:a4:87:4f:41:4c:a7:56:f0:
                    c0:92:9c:24:66:57:c4:9f:91:8a:a9:7c:66:02:77:
                    d5:d9:68:bd:c2:eb:f4:aa:7e:0f:07:6f:aa:b3:93:
                    59:c3:5b:c9:b1:06:6f:a6:f2:0a:66:8b:cd:82:0d:
                    86:ec:64:bc:dc:9b:5a:1f:0c:86:9e:cc:c6:4f:d7:
                    54:82:dd:28:39:2d:8a:80:9a:51:88:09:7b:b5:b6:
                    a0:cb:fc:39:2b:32:a6:a2:ed:4c:5e:62:1b:5e:b8:
                    a4:ec:3b:06:d3:e3:16:4f:c4:1f:91:97:57:b0:9e:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1E:C8:38:88:1C:23:0C:D3:47:E2:8C:21:D6:F7:82:1A:2E:B6:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8991f83e-ff4c-4d8b-9498-4f1f3ce1b454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:2b:61:14:8e:11:b9:97:0e:39:41:1c:d0:50:f3:ca:0c:
         63:95:d2:ce:dc:ba:ed:a4:35:f3:db:81:23:22:1a:83:4b:4e:
         0e:f0:3e:bf:00:c4:6d:55:6c:3e:84:dd:6e:1f:3d:4b:1f:4d:
         db:d4:5d:25:e3:a6:8a:82:97:ef:13:b7:63:fc:97:6c:2e:2b:
         1d:ac:41:37:6d:02:b0:e3:42:b6:2b:d4:17:a5:12:fb:b0:85:
         bc:ec:eb:14:75:c0:e7:22:60:51:9f:0a:eb:26:c0:9a:43:21:
         d9:95:c5:c4:c5:fe:6b:aa:d9:ff:13:a6:03:21:92:1b:7a:88:
         40:c5:92:83:e7:8a:04:ec:77:49:31:80:53:cc:83:e4:65:6e:
         2d:76:f1:ce:fb:f4:e9:11:f2:f3:c1:cd:85:42:27:86:c3:bf:
         ed:2c:60:f7:3a:2d:46:4e:c7:a7:84:44:f6:4a:45:ba:91:27:
         34:9d:5f:1a:af:8e:3e:d2:a0:d2:03:62:54:b3:50:71:d3:d2:
         0d:cc:e0:3e:24:67:78:dc:2c:b4:4d:1b:36:16:13:8c:0b:4b:
         8a:8e:95:85:1f:8a:52:cb:80:d7:18:8e:53:04:77:d3:3b:2c:
         8d:c3:f2:35:7c:13:d7:4f:9d:29:c0:19:a1:37:4b:9c:46:62:
         24:e5:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:13:45 2025 by rpki-client