This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e18da5a-f870-44ce-b5d0-8665afe2c5c7.roa
File:                     8e18da5a-f870-44ce-b5d0-8665afe2c5c7.roa (raw, json)
Hash identifier:          gX2Z7PZL+SxadSFZnpQC2pws45bBwnBihRWkBA4oOto=
Subject key identifier:   1E:48:E9:7E:5C:B5:2C:9B:E8:AF:02:11:AB:36:41:52:EE:CC:24:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47181F894FD198B2A262933A6730313C199FFECF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e18da5a-f870-44ce-b5d0-8665afe2c5c7.roa
Signing time:             Sat 15 Nov 2025 00:31:01 +0000
ROA not before:           Sat 15 Nov 2025 00:31:01 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        167.243.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:18:1f:89:4f:d1:98:b2:a2:62:93:3a:67:30:31:3c:19:9f:fe:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:31:01 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=d66cbf2fdae834fc4fca94c0ca3ab6117901b42a275853d1e3eb87f9a473edfb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:e7:59:4b:35:9c:31:9e:70:72:66:22:50:8b:
                    51:9e:94:ad:8a:2e:97:f0:45:41:e2:37:14:99:8a:
                    a0:76:67:d9:e3:aa:7a:3d:17:54:e9:e6:52:43:45:
                    0e:82:a1:8d:10:85:c5:96:58:8d:37:85:d4:88:38:
                    53:85:25:d7:54:61:d5:c4:2e:be:65:9d:f7:55:e7:
                    f5:fb:8d:da:11:b7:92:88:2b:ed:a1:f4:85:37:7e:
                    41:d2:43:75:2e:ac:68:f1:ee:85:06:8f:48:f8:b2:
                    5c:bd:31:cd:ec:f7:83:94:e9:c3:4d:44:5d:4e:e5:
                    a6:b4:4f:48:0e:2c:4b:09:1b:71:4b:cc:f5:fd:e7:
                    f7:ed:36:1d:34:37:39:d6:7b:b1:ab:a6:ae:5d:9d:
                    8e:21:b8:3c:a8:36:c7:57:b0:9b:1e:b1:01:62:6f:
                    71:76:a7:76:8f:d3:4d:36:d7:b1:b8:bf:39:5c:52:
                    ea:7b:74:e3:a9:f8:ee:f6:3a:d5:b5:f5:29:4f:96:
                    7f:fb:81:61:c5:2c:d5:f9:7c:90:78:96:1e:95:2d:
                    07:99:88:dd:dc:3d:19:d6:41:a5:de:fe:0b:20:0b:
                    80:93:19:f6:b1:7d:68:c5:90:21:ce:07:a4:11:54:
                    39:07:3c:75:a3:59:40:8c:6c:21:d2:59:90:9c:ca:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:48:E9:7E:5C:B5:2C:9B:E8:AF:02:11:AB:36:41:52:EE:CC:24:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e18da5a-f870-44ce-b5d0-8665afe2c5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bf:f0:e4:06:51:06:30:d4:f5:d8:57:52:0c:b3:74:b3:d4:c2:
         2f:e0:a2:68:1a:3c:1e:64:91:19:6f:03:20:3a:b3:e8:6c:00:
         26:21:ef:9e:3a:f7:30:b9:e5:67:43:f2:c2:ab:8f:3a:b3:22:
         18:5a:9d:ad:37:b0:c8:67:e1:d4:05:df:c4:8f:3b:e4:34:df:
         86:7b:f4:03:86:61:79:5d:f2:6c:1f:aa:36:8c:ee:89:3f:2f:
         ac:7d:ac:77:1c:96:42:44:8d:26:54:69:63:99:46:b2:e3:d1:
         f7:4a:fa:b1:06:2d:eb:95:68:e7:e3:de:11:46:87:63:b5:d9:
         f3:7b:5b:1c:38:5f:17:ac:88:b6:46:15:26:06:b0:9b:9e:41:
         fe:7e:55:bd:c3:dc:cb:a0:0d:e8:28:93:da:00:b6:ae:cd:8e:
         f7:4b:b0:42:2c:fc:e0:a6:5f:07:fe:b8:6a:9d:92:aa:ae:ec:
         f1:f4:88:ad:b0:59:88:e7:66:94:e3:4e:f1:a8:43:d0:dd:c4:
         b7:51:77:26:83:0d:4b:4c:50:f3:4e:19:8c:9b:5e:27:28:10:
         87:e2:e3:3c:00:d0:7f:46:df:94:18:3e:2d:cc:45:57:a9:e9:
         d9:21:14:1f:ee:a3:00:b8:54:91:55:c9:e8:8a:42:c8:7f:bb:
         4a:0e:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:54:58 2025 by rpki-client