This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb2d3dd-174b-4c48-a1c8-3463c0c054be.roa
File:                     8bb2d3dd-174b-4c48-a1c8-3463c0c054be.roa (raw, json)
Hash identifier:          NLOfw/SFci3QkEcIWfBKaesiiVfi0pKgPjOj41TY8MA=
Subject key identifier:   AB:3E:E3:9D:33:6B:11:A7:75:94:A1:96:04:F7:C2:0D:DE:2C:90:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37D6BBC400D7A9FFF08445FA9AB5834040B16039
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb2d3dd-174b-4c48-a1c8-3463c0c054be.roa
Signing time:             Thu 20 Nov 2025 00:50:56 +0000
ROA not before:           Thu 20 Nov 2025 00:50:56 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        137.16.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d6:bb:c4:00:d7:a9:ff:f0:84:45:fa:9a:b5:83:40:40:b1:60:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:50:56 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=5f7a3595c5a95c1f3aa7e4e26a18b2592ad55d2163c68d430934b462ed466fd5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:27:01:a9:ca:2a:20:31:90:fa:fc:b6:be:
                    ed:33:ce:df:ca:13:ba:ab:5b:41:8b:6d:43:56:1f:
                    40:2a:26:f9:ff:fc:71:70:c0:0c:f2:cc:01:fc:96:
                    e2:a1:0a:d5:87:47:4b:d4:56:31:47:63:6b:61:e1:
                    0b:13:61:5c:aa:b5:17:e9:fd:62:2d:cb:3d:58:c5:
                    67:01:09:79:b6:ff:6e:34:eb:c5:9d:a5:5d:34:56:
                    d5:d0:4d:13:42:f4:02:68:c6:ce:f0:ad:cf:43:4a:
                    8f:e7:b4:1a:24:31:a9:92:ca:e9:88:46:9a:3e:4b:
                    c8:f2:5c:e1:60:bb:ca:bf:a4:5a:48:05:0c:40:89:
                    42:c5:f9:3c:51:e9:bb:5e:7d:6f:ce:8a:3b:00:14:
                    7f:14:2f:41:ed:aa:83:ec:c9:6b:72:90:e5:f3:a5:
                    8b:10:0f:32:d3:65:15:77:28:26:52:39:10:96:a3:
                    5d:ec:9f:d1:75:3d:13:84:61:11:9c:cd:b2:1f:83:
                    f0:ce:54:a0:bb:49:e6:39:58:50:ec:1c:34:f1:5b:
                    29:60:1a:99:28:0d:c5:f8:a4:15:44:cf:1d:f0:a9:
                    e2:41:5e:c6:9b:69:d0:de:20:70:22:37:1d:49:66:
                    74:82:33:53:4d:ad:bb:62:b9:21:39:25:85:24:38:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3E:E3:9D:33:6B:11:A7:75:94:A1:96:04:F7:C2:0D:DE:2C:90:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb2d3dd-174b-4c48-a1c8-3463c0c054be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:2e:33:5f:9f:a9:e7:4e:e4:d9:fb:fe:3c:47:c0:b0:84:b6:
         cc:9a:df:c1:1a:9f:86:7f:57:60:9f:3c:25:6a:78:d6:ed:b4:
         ed:1b:84:4a:dc:82:48:8b:f9:50:8c:75:79:7c:d6:76:ed:40:
         1c:ac:1c:11:6c:db:3f:a5:56:3a:b2:c5:21:f7:3d:93:91:3f:
         a5:95:83:4c:e7:df:7f:74:52:0a:58:21:18:4f:5d:88:52:a9:
         aa:35:d0:06:b3:78:8c:e8:f3:de:31:57:99:9b:c9:4c:19:b4:
         1f:19:3a:15:4e:c6:1a:d3:6c:51:5a:76:7d:6b:5e:de:4f:28:
         c6:64:50:2a:98:c9:58:4f:94:5d:9d:d1:84:09:97:2d:25:11:
         1f:da:15:8a:e9:87:e4:a6:53:35:5b:06:0d:a3:45:30:87:f2:
         a6:6e:73:db:da:14:6a:fa:e0:1b:8c:84:c6:94:5e:8d:0e:e2:
         3d:44:de:7d:b8:e1:58:aa:b1:0c:f6:1d:85:c5:8b:95:bd:39:
         eb:cb:65:a2:86:68:a8:0b:5f:36:61:4b:24:da:11:d7:9e:6f:
         32:f5:e1:28:4b:bd:db:68:99:e6:c7:75:24:a2:c3:d1:e6:83:
         79:72:83:91:8d:cc:5b:8d:55:b7:d0:1f:c8:aa:d0:02:ff:a4:
         6e:31:ac:22
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUN9a7xADXqf/whEX6mrWDQECxYDkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMDA1MDU2WhcNMjYwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZjdhMzU5NWM1YTk1YzFmM2FhN2U0ZTI2YTE4YjI1OTJh
ZDU1ZDIxNjNjNjhkNDMwOTM0YjQ2MmVkNDY2ZmQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5RicBqcoqIDGQ+vy2vu0zzt/KE7qrW0GLbUNWH0AqJvn/
/HFwwAzyzAH8luKhCtWHR0vUVjFHY2th4QsTYVyqtRfp/WItyz1YxWcBCXm2/240
68WdpV00VtXQTRNC9AJoxs7wrc9DSo/ntBokMamSyumIRpo+S8jyXOFgu8q/pFpI
BQxAiULF+TxR6btefW/OijsAFH8UL0HtqoPsyWtykOXzpYsQDzLTZRV3KCZSORCW
o13sn9F1PROEYRGczbIfg/DOVKC7SeY5WFDsHDTxWylgGpkoDcX4pBVEzx3wqeJB
XsabadDeIHAiNx1JZnSCM1NNrbtiuSE5JYUkOA5JAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUqz7jnTNrEad1lKGWBPfCDd4skJ8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhiYjJkM2RkLTE3NGItNGM0OC1hMWM4LTM0NjNjMGMwNTRiZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCJEDANBgkqhkiG9w0BAQsFAAOCAQEACy4zX5+p507k2fv+PEfAsIS2zJrf
wRqfhn9XYJ88JWp41u207RuEStyCSIv5UIx1eXzWdu1AHKwcEWzbP6VWOrLFIfc9
k5E/pZWDTOfff3RSClghGE9diFKpqjXQBrN4jOjz3jFXmZvJTBm0Hxk6FU7GGtNs
UVp2fWte3k8oxmRQKpjJWE+UXZ3RhAmXLSURH9oViumH5KZTNVsGDaNFMIfypm5z
29oUavrgG4yExpRejQ7iPUTefbjhWKqxDPYdhcWLlb0568tlooZoqAtfNmFLJNoR
155vMvXhKEu922iZ5sd1JKLD0eaDeXKDkY3MW41Vt9AfyKrQAv+kbjGsIg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:55:48 2025 by rpki-client