This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e16c8de-2930-4f3b-9e16-ecc6231c6401.roa
File:                     8e16c8de-2930-4f3b-9e16-ecc6231c6401.roa (raw, json)
Hash identifier:          RsiuUUh34zDWZkKcdaH39s2gOA1Rkxvx07J4FoksGuQ=
Subject key identifier:   27:6F:50:30:06:9A:4F:1F:13:B9:06:98:F3:8C:B9:94:E8:69:97:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       673B346CBA090FFBDF7AA2C1D882C3DFC09D7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e16c8de-2930-4f3b-9e16-ecc6231c6401.roa
Signing time:             Sun 30 Nov 2025 00:10:43 +0000
ROA not before:           Sun 30 Nov 2025 00:10:43 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        207.21.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3b:34:6c:ba:09:0f:fb:df:7a:a2:c1:d8:82:c3:df:c0:9d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:10:43 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=a10f63e0d26eb606e2bc346d93c99c7da41d798b511de9449700f46937c4d8df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:91:28:e3:24:a4:63:d7:be:f4:15:fd:04:
                    c6:39:b2:cb:4b:36:27:10:1e:97:72:b4:1c:89:f8:
                    71:2a:87:a3:ed:78:44:3d:d2:13:30:dd:aa:70:72:
                    09:8b:f8:76:81:34:dc:f6:4a:40:9f:25:0f:23:3c:
                    2c:72:f9:6e:0f:29:be:ef:86:57:0b:52:d6:c3:c9:
                    f2:60:9b:99:27:d4:a4:3b:5e:8d:3b:40:cf:5f:7b:
                    a5:d9:5b:fe:8f:39:2f:2a:b3:cd:37:7f:1f:10:f5:
                    4e:09:ea:00:d5:79:ee:28:3d:7b:da:8f:10:85:8d:
                    ff:43:77:67:73:9c:c3:07:aa:01:85:99:23:b1:1b:
                    fd:81:32:27:39:1d:66:6b:92:29:9e:36:cf:60:75:
                    fb:bb:be:e1:9c:11:b3:62:c8:50:ff:06:a1:d1:ab:
                    61:48:27:07:8c:21:e2:16:52:3d:7f:6f:36:53:87:
                    6f:95:7b:a5:56:93:54:54:f7:22:da:11:f7:29:dd:
                    f1:9d:42:bb:e2:c4:84:2b:e2:20:9b:b6:73:5f:5b:
                    60:14:f1:6f:e7:84:10:60:2f:27:05:8c:db:a6:50:
                    3c:46:88:2f:8f:85:21:a2:48:1b:c9:71:56:0e:40:
                    94:43:bd:93:e5:3e:67:5d:32:e8:d0:b1:3e:4e:ac:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6F:50:30:06:9A:4F:1F:13:B9:06:98:F3:8C:B9:94:E8:69:97:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e16c8de-2930-4f3b-9e16-ecc6231c6401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.21.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:bf:6c:25:cf:f5:88:24:1c:3e:7e:82:33:72:b8:10:dc:76:
         28:d2:95:42:c8:7b:6c:38:da:da:d8:3d:d6:24:c2:1d:05:e0:
         03:39:1d:e7:fb:b9:10:80:9a:2f:cd:64:52:43:c8:ed:51:e8:
         a1:06:f4:f4:2a:04:6c:c9:ea:f2:cd:a5:b7:fe:65:a8:1a:14:
         74:26:7c:c7:26:61:12:80:09:09:d6:91:b9:e3:a7:84:ad:c9:
         09:1e:39:a2:83:48:15:f7:ac:67:09:2c:09:0d:1b:8e:3d:30:
         34:7f:5f:83:90:5d:cb:d6:1d:28:31:8f:56:1e:1d:bb:31:7d:
         2e:44:6a:1f:e3:dd:48:05:d2:18:e8:de:38:69:7f:09:06:c2:
         14:a0:21:c0:e2:c6:6c:51:4a:fb:2d:db:e8:d3:b1:5d:88:27:
         76:9b:5f:14:9d:19:64:cd:18:5b:44:92:f0:11:c9:17:96:77:
         66:73:c9:43:87:52:b9:79:62:f5:b1:13:e4:f7:17:15:b4:82:
         70:fc:56:24:d9:ce:81:45:24:45:3a:2b:f4:1d:51:a5:eb:ee:
         7c:ac:0c:78:04:9e:48:9b:b3:7f:ab:14:d4:7c:46:c3:ee:14:
         d7:0d:9c:0e:86:2c:f1:77:b0:60:be:8e:a6:e5:1d:4a:fe:cc:
         69:ee:25:90
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITZzs0bLoJD/vfeqLB2ILD38CdezANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTExMzAwMDEwNDNaFw0yNjAyMjgyMzU5NTla
MHoxSTBHBgNVBAUTQGExMGY2M2UwZDI2ZWI2MDZlMmJjMzQ2ZDkzYzk5YzdkYTQx
ZDc5OGI1MTFkZTk0NDk3MDBmNDY5MzdjNGQ4ZGYxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANzGkSjjJKRj1770Ff0Exjmyy0s2JxAel3K0HIn4cSqHo+14
RD3SEzDdqnByCYv4doE03PZKQJ8lDyM8LHL5bg8pvu+GVwtS1sPJ8mCbmSfUpDte
jTtAz197pdlb/o85LyqzzTd/HxD1TgnqANV57ig9e9qPEIWN/0N3Z3OcwweqAYWZ
I7Eb/YEyJzkdZmuSKZ42z2B1+7u+4ZwRs2LIUP8GodGrYUgnB4wh4hZSPX9vNlOH
b5V7pVaTVFT3ItoR9ynd8Z1Cu+LEhCviIJu2c19bYBTxb+eEEGAvJwWM26ZQPEaI
L4+FIaJIG8lxVg5AlEO9k+U+Z10y6NCxPk6s8WcCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBQnb1AwBppPHxO5BpjzjLmU6GmXlDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvOGUxNmM4ZGUtMjkzMC00ZjNiLTllMTYtZWNjNjIzMWM2NDAxLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAs8V4DANBgkqhkiG9w0BAQsFAAOCAQEAqL9sJc/1iCQcPn6CM3K4ENx2KNKV
Qsh7bDja2tg91iTCHQXgAzkd5/u5EICaL81kUkPI7VHooQb09CoEbMnq8s2lt/5l
qBoUdCZ8xyZhEoAJCdaRueOnhK3JCR45ooNIFfesZwksCQ0bjj0wNH9fg5Bdy9Yd
KDGPVh4duzF9LkRqH+PdSAXSGOjeOGl/CQbCFKAhwOLGbFFK+y3b6NOxXYgndptf
FJ0ZZM0YW0SS8BHJF5Z3ZnPJQ4dSuXli9bET5PcXFbSCcPxWJNnOgUUkRTor9B1R
pevufKwMeASeSJuzf6sU1HxGw+4U1w2cDoYs8XewYL6OpuUdSv7Mae4lkA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:42:44 2025 by rpki-client