This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e49f25e-d120-4f09-aacc-bf4995405b55.roa
File:                     8e49f25e-d120-4f09-aacc-bf4995405b55.roa (raw, json)
Hash identifier:          gn80fGrA8eMe6MxuQQdYbDARf72LHrNPXU2A56EBmVc=
Subject key identifier:   1D:2F:92:65:53:55:B2:64:11:9C:96:4B:25:FF:88:70:D6:35:96:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74941C9D2C7865035238EDCD4B74C277CEB8832C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e49f25e-d120-4f09-aacc-bf4995405b55.roa
Signing time:             Wed 26 Nov 2025 00:20:12 +0000
ROA not before:           Wed 26 Nov 2025 00:20:12 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        50.19.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:94:1c:9d:2c:78:65:03:52:38:ed:cd:4b:74:c2:77:ce:b8:83:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:20:12 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=51d470945bbe2bed061097e28dcc2228f900b908468e7fe0691db90cb464143f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:9e:c0:9c:e9:61:90:a3:8d:6b:c4:01:df:
                    7b:c7:ef:12:d3:ee:42:fc:20:e1:b8:be:fb:d7:6b:
                    ae:ec:e1:f0:6e:39:5d:e0:f2:bc:50:a3:8c:b2:69:
                    ff:f7:b5:06:63:20:23:c2:ae:f7:bf:55:38:9b:c7:
                    30:a1:50:71:78:e1:ae:96:1b:90:46:85:96:23:bc:
                    00:5a:52:05:cb:ac:54:35:60:0a:2b:ce:b8:20:e3:
                    04:02:b8:01:fa:cf:b7:59:67:f4:9d:dc:26:7f:aa:
                    c1:44:46:70:e0:c3:02:6d:25:77:d5:a8:4d:90:83:
                    34:30:d5:fc:45:fc:9e:40:ce:fb:ad:6e:86:c7:10:
                    87:74:8c:21:b3:ee:12:86:52:73:69:d9:16:a7:7d:
                    d1:9a:f6:92:7e:f0:6d:73:64:f5:ae:6c:5a:7a:88:
                    f5:2c:82:3d:83:be:b1:be:59:5b:09:c5:22:02:55:
                    ed:7a:01:c1:c4:80:15:36:48:40:6d:96:b4:fe:a9:
                    c9:23:4e:d5:f0:70:6b:a5:1c:c0:e2:2c:d1:69:01:
                    9a:d6:75:6c:d5:f3:23:9e:64:1c:1b:af:e6:e3:78:
                    db:de:95:26:93:1d:dd:49:41:f2:b9:31:2c:17:14:
                    16:dd:ce:05:0a:22:63:72:7c:75:47:0f:a1:7b:ea:
                    b2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:92:65:53:55:B2:64:11:9C:96:4B:25:FF:88:70:D6:35:96:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e49f25e-d120-4f09-aacc-bf4995405b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         16:08:b4:55:56:c4:bf:79:77:58:15:2c:3c:f5:b9:7e:30:68:
         c4:c6:a6:4b:bf:2a:88:1d:34:15:65:dd:c5:1c:6d:09:a5:1f:
         b0:23:de:d6:c2:48:e6:d7:62:d9:e2:81:9b:97:2f:fa:75:72:
         82:40:f1:a4:e2:76:fc:20:90:38:88:c7:92:60:ef:f1:dd:95:
         85:95:e9:f2:0b:ad:62:d0:c0:14:3e:98:2e:b7:26:22:d3:ae:
         dc:96:d6:33:4f:f8:50:6e:a6:d1:e6:dc:12:ec:c9:e8:c2:2d:
         b8:c5:41:ec:35:34:1d:86:45:f8:60:88:77:b2:19:4c:25:0c:
         a8:b3:de:f0:f9:9b:c0:f8:6e:e2:63:02:05:7f:b3:dc:98:b1:
         fa:0e:6d:b5:e0:8e:b0:5f:72:92:3f:2f:2e:1a:ee:1f:4e:eb:
         a2:c0:e2:8e:f2:2a:b4:0d:76:bb:93:30:fb:c8:a5:1b:ab:23:
         e2:11:7a:37:5d:8a:ac:51:63:21:25:9a:43:63:10:0e:db:b2:
         4a:f3:35:70:89:dc:bc:c1:e0:9b:02:b2:17:bb:7c:1b:dc:d8:
         ac:e1:20:28:4e:1b:8a:85:61:07:74:6a:b0:b3:57:67:d7:7e:
         bc:db:b1:93:8c:17:91:92:a4:a6:fc:42:cd:61:01:35:ea:c6:
         b2:ec:7c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:07:24 2025 by rpki-client