This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940bd107-87a1-467d-a6ff-57aca7389c67.roa
File:                     940bd107-87a1-467d-a6ff-57aca7389c67.roa (raw, json)
Hash identifier:          tB7vC5eCuW8Mjo+BK1Z3BsYXTyjLs8v+W8Y4e597KBM=
Subject key identifier:   8A:27:FA:F2:8A:82:A2:6F:32:DB:64:D0:C9:C4:31:AA:21:0C:69:88
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6086B2AD3FE18132C2D2642C67873C9616946A20
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940bd107-87a1-467d-a6ff-57aca7389c67.roa
Signing time:             Wed 26 Nov 2025 00:52:06 +0000
ROA not before:           Wed 26 Nov 2025 00:52:06 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.225.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:86:b2:ad:3f:e1:81:32:c2:d2:64:2c:67:87:3c:96:16:94:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:52:06 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=b7baafe10f530b7bc6e99ba0e5c6a14eeb7cd28b6cfd19d17380e31c2bf00802, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:1e:d3:84:2e:a2:93:13:a5:4e:b3:ff:6f:
                    fc:a8:cc:ab:35:b7:50:71:a3:c5:1e:48:35:ec:17:
                    87:c3:5b:cf:be:32:7e:58:76:f5:4c:74:7e:d6:45:
                    a3:f3:67:d1:6d:a3:0d:2f:f9:ed:5d:c8:75:d2:0e:
                    3d:3f:26:3e:3b:41:16:ed:c5:4f:0e:e2:85:a8:7a:
                    81:dc:a2:80:44:d1:3e:ae:78:29:fa:7e:d6:7f:4a:
                    ef:0b:fb:b4:d6:9c:d8:fb:1b:18:ed:09:d3:33:6b:
                    71:99:4d:b6:f8:ef:95:e4:3d:97:7a:b5:5b:5c:80:
                    55:4e:7d:69:f4:57:a6:50:3f:fc:9c:0a:4d:d2:23:
                    19:92:22:b9:6c:b8:a3:07:ef:c2:cf:79:c3:e1:c0:
                    d1:49:6f:ab:23:54:cf:62:26:1b:a2:ea:40:02:66:
                    18:fe:ec:96:67:9f:62:33:ea:68:51:07:1a:f9:61:
                    fb:fc:a3:e1:f9:c7:83:4c:0d:27:4e:57:f6:80:f2:
                    13:6e:1e:6a:38:16:aa:eb:b7:6c:b9:7f:32:f0:e1:
                    a0:87:6a:a4:29:97:a9:60:27:19:f0:cc:9c:b6:18:
                    69:93:6c:78:37:40:11:d8:da:c0:ce:9c:01:ce:c0:
                    d3:fd:0c:9d:18:fd:f6:df:c7:12:f7:b4:6c:77:c4:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:27:FA:F2:8A:82:A2:6F:32:DB:64:D0:C9:C4:31:AA:21:0C:69:88
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940bd107-87a1-467d-a6ff-57aca7389c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cf:ce:de:53:b6:5d:ec:6e:3a:47:b2:0d:b8:71:1a:75:3d:2a:
         1e:b1:e0:11:29:24:f5:f9:99:a0:b1:c6:19:27:3e:9e:20:d6:
         f9:76:9d:9b:0a:2f:01:54:2f:31:9e:49:76:5e:fd:ee:b5:1f:
         7e:be:1c:65:bc:aa:d0:33:e2:24:1e:7c:eb:b6:92:ef:d4:ea:
         47:ae:19:eb:c2:22:0b:cf:d1:6d:ca:42:dc:f6:84:41:62:bb:
         10:49:d5:76:d7:db:93:b0:bf:a4:b9:e3:fb:f0:66:86:47:a9:
         5c:fc:ed:99:8b:a9:aa:52:5e:73:84:2d:15:c5:3d:e0:73:94:
         00:85:26:57:6c:09:ec:b6:15:42:63:9c:9a:c2:47:3f:4b:a5:
         26:11:d4:a7:73:11:69:d2:7d:d1:0e:92:1f:02:e3:c6:06:f5:
         43:11:a7:00:12:2c:e1:43:e6:8e:f0:e1:60:da:86:66:77:e5:
         f4:93:6d:7a:d8:78:b9:67:0c:5a:97:92:49:6f:dd:61:ef:54:
         ba:9d:a8:81:2d:45:ba:f1:5f:21:f7:d2:7d:60:22:8f:77:2c:
         db:ef:b4:27:11:04:d7:72:e3:a3:71:4e:48:a4:85:d0:aa:46:
         1e:67:0e:d4:ad:4f:a9:6e:ed:74:67:b7:36:e3:fc:97:e3:a0:
         0b:e1:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:37:23 2025 by rpki-client