This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b45372-6296-4c14-9868-0c159f1b5fed.roa
File:                     92b45372-6296-4c14-9868-0c159f1b5fed.roa (raw, json)
Hash identifier:          uCRIYfaUUroAXYh2dOZZLuZTHra2El/Yc0qwPMz7n50=
Subject key identifier:   FE:3C:03:49:67:51:79:91:62:A6:4E:DD:9A:BF:82:B1:B8:AD:99:0D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6865E8883FE17747C86E02B941F990F98E0FE745
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b45372-6296-4c14-9868-0c159f1b5fed.roa
Signing time:             Sun 30 Nov 2025 00:31:48 +0000
ROA not before:           Sun 30 Nov 2025 00:31:48 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.198.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:65:e8:88:3f:e1:77:47:c8:6e:02:b9:41:f9:90:f9:8e:0f:e7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:31:48 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=3f991d261dca505a5742212e95bc0c5d970df651ae4410b3dad616d501d5cf1c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:fc:0c:2c:93:25:5c:6c:21:43:65:41:7b:
                    a2:76:65:79:5b:39:47:53:1f:4e:ef:73:66:c2:62:
                    f1:3b:d3:7c:3d:60:20:52:de:05:df:5e:7b:6d:39:
                    ef:4d:06:41:23:7e:a0:e3:d6:38:99:e7:e3:b1:9a:
                    68:51:a8:0c:9a:cc:7b:fd:d1:d0:f4:b1:20:1b:13:
                    35:88:44:31:27:74:cb:28:fb:d3:4f:4d:92:b6:2a:
                    5a:fa:8b:09:ba:22:20:8b:b3:58:af:98:a4:4f:4f:
                    05:08:20:73:c1:53:3b:4e:cf:dc:ee:f6:e1:69:bb:
                    d0:4f:93:05:9e:1e:4e:09:a7:88:96:ed:d4:22:09:
                    d2:04:08:29:15:35:94:57:37:42:05:89:0f:ea:e0:
                    19:7a:32:d7:5f:e5:b3:47:0e:29:8c:6e:0d:ad:6e:
                    a7:b3:23:ae:2e:d9:c3:55:04:63:3d:56:f2:92:5d:
                    81:c6:34:11:55:f1:7c:a9:72:d5:24:39:d4:92:f3:
                    47:67:9b:4d:62:6a:8b:86:21:80:38:3c:41:de:a5:
                    3d:42:ab:2d:14:fe:7d:a1:42:3f:42:a6:e9:a3:d7:
                    d7:45:26:be:7e:5f:7b:33:99:ea:40:3b:96:c7:31:
                    c6:f9:5c:c5:f1:ae:06:c5:08:1b:a5:d0:97:e2:ee:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3C:03:49:67:51:79:91:62:A6:4E:DD:9A:BF:82:B1:B8:AD:99:0D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b45372-6296-4c14-9868-0c159f1b5fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:7e:a1:ce:37:3f:39:6a:70:56:1e:3f:77:d4:87:00:2e:cf:
         db:89:e8:ea:c2:a4:bc:6b:0f:9e:c6:69:3f:ba:4f:c0:75:2c:
         8d:bc:d0:f7:70:7e:a0:d8:aa:53:d1:1e:fe:94:66:f3:13:ac:
         62:e7:ad:67:c8:a3:39:51:05:ba:85:6b:2d:33:d6:e6:d4:fa:
         67:f2:46:2a:e4:7b:8c:2c:02:07:f8:13:34:a7:fd:ab:7d:e9:
         7e:0f:89:97:1d:54:9f:51:f2:0e:58:19:28:fb:f5:47:2b:31:
         77:a7:d4:f8:4c:0d:cc:3a:ee:79:c7:19:6f:02:9c:49:d6:7c:
         96:4a:b8:d7:77:2b:ce:e9:7b:68:be:9e:2e:84:1a:5d:de:ee:
         04:cc:6f:b2:c5:09:3c:7f:23:bc:c1:2c:d4:f0:b3:e5:ff:57:
         56:60:83:9e:9d:a3:f4:78:5d:6e:07:9c:3b:17:97:cd:da:d6:
         88:f3:91:4b:d4:57:81:43:7b:31:59:54:97:9e:f7:4d:4f:35:
         c8:bf:51:b5:4f:46:3b:2d:9a:31:fb:98:a0:9d:94:69:5a:04:
         23:2a:69:e9:61:41:5d:b4:58:0e:bf:1f:7a:61:aa:41:c4:6c:
         73:0f:2e:de:01:df:c7:b8:bc:de:0a:74:57:83:27:11:02:8b:
         e2:3f:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:03:10 2025 by rpki-client