This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd253e1-a0e1-48e1-998b-6048b315d5f6.roa
File:                     8dd253e1-a0e1-48e1-998b-6048b315d5f6.roa (raw, json)
Hash identifier:          9tsPWAidc8/vdSkyPEESqG4zJqQMghcjoh4E9vngpiU=
Subject key identifier:   35:47:ED:5B:C8:D8:D8:6B:7C:3F:45:3D:C8:84:2A:F4:30:4F:1B:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02CFBDFD4638EBDAC25D6E62B237E335496DD987
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd253e1-a0e1-48e1-998b-6048b315d5f6.roa
Signing time:             Wed 26 Nov 2025 00:51:28 +0000
ROA not before:           Wed 26 Nov 2025 00:51:28 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.73.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cf:bd:fd:46:38:eb:da:c2:5d:6e:62:b2:37:e3:35:49:6d:d9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:51:28 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=5aced660391ac384b3819d90106751e0b0ebd635361c73d63c67fb8900813dce, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:07:d9:a7:fe:c5:94:a7:80:e6:f3:cb:2c:
                    37:67:69:0c:24:af:53:d5:4e:64:6b:6d:a3:62:bf:
                    1d:0a:97:87:95:53:63:e0:74:04:c2:68:2c:07:f3:
                    ee:2f:62:b5:4e:20:0e:04:21:69:d9:f8:a5:e9:17:
                    17:a5:5c:3a:81:85:f4:a3:9e:69:13:ff:83:d5:0c:
                    38:71:0b:71:5c:35:4d:c0:ca:3e:55:e0:e7:cd:b8:
                    a8:65:f5:fe:f8:b1:2c:40:5e:a1:32:08:72:e2:0a:
                    35:02:7b:f3:7f:17:4f:4d:7e:8a:30:c9:ac:fd:e1:
                    af:47:2b:7b:aa:93:77:37:25:d2:23:9c:d1:6f:0e:
                    9c:c2:37:8f:a5:88:af:0e:0f:33:00:6c:0d:c1:84:
                    4d:20:51:35:19:b1:b5:3e:c6:74:2e:9e:35:ec:7d:
                    f8:ef:78:49:32:7c:54:00:ee:2a:b7:76:f0:2c:e9:
                    d0:96:c6:fe:15:fd:b9:ec:5c:6d:a3:d7:4f:7f:08:
                    63:4b:ad:55:94:a8:ea:1a:15:1c:fc:ea:3c:bc:4d:
                    00:98:a4:b8:91:77:3d:d1:bf:1d:55:af:c0:fc:80:
                    a7:99:ba:66:15:53:39:a5:27:0f:23:7e:ec:77:58:
                    3d:2b:69:40:8a:a7:fb:e2:4a:14:ff:cb:a4:73:c3:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:47:ED:5B:C8:D8:D8:6B:7C:3F:45:3D:C8:84:2A:F4:30:4F:1B:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd253e1-a0e1-48e1-998b-6048b315d5f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:e4:90:76:84:84:83:a5:7d:e7:6f:80:a3:68:0f:d5:50:
         ef:69:f3:5d:7a:f5:7b:6b:19:f2:2e:39:0a:f7:21:19:a5:c9:
         4b:37:e7:9d:03:66:eb:b6:1c:3f:ff:44:83:d9:18:d7:2b:76:
         fa:98:8c:17:1a:5a:3d:91:28:5a:81:d2:d6:13:03:f8:42:fd:
         67:ee:01:e0:c5:47:7d:ee:62:8f:aa:bf:c7:7f:c0:cf:e1:2b:
         55:d3:5f:ae:21:8e:1f:23:f2:42:ee:14:45:5b:91:d7:44:32:
         21:06:7c:ed:51:bf:1f:c8:93:4e:ba:51:d1:0a:4f:a8:0c:81:
         4e:48:9a:66:1a:9d:92:2a:49:bf:58:f7:86:bf:f4:3a:34:7f:
         c7:ca:fb:fd:e4:39:a0:21:a5:67:2d:fd:54:e8:a7:d7:84:59:
         f2:2c:7c:ed:61:d2:ba:b5:9c:4d:2a:b0:55:c0:fb:ed:66:2c:
         fb:ae:d0:6b:6e:9d:c3:69:ba:4b:17:4b:68:50:3a:c4:09:80:
         8a:ac:83:c8:b2:6b:2e:35:20:81:4d:9d:95:e7:86:fb:e3:4a:
         5b:03:8a:55:35:1c:f0:00:f4:56:b4:c0:ae:13:55:87:0b:fe:
         93:16:79:9b:fa:9b:cc:ac:ac:29:2d:f0:84:99:24:7a:f5:33:
         89:74:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:15:36 2025 by rpki-client