This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95fb205d-987d-4fa2-b75a-8819afe4b558.roa
File:                     95fb205d-987d-4fa2-b75a-8819afe4b558.roa (raw, json)
Hash identifier:          n20imy/+Nkg9TJPZbdNopxbgE59iCxg+c98KRiyFgyE=
Subject key identifier:   BD:9B:56:FA:11:B8:A8:F7:24:4D:F2:E0:7F:5B:4B:E9:4C:7C:AD:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05D2D280820E53699D0B86222FEB20C2B7BA0875
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95fb205d-987d-4fa2-b75a-8819afe4b558.roa
Signing time:             Sat 29 Nov 2025 00:10:04 +0000
ROA not before:           Sat 29 Nov 2025 00:10:04 +0000
ROA not after:            Fri 27 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.22.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d2:d2:80:82:0e:53:69:9d:0b:86:22:2f:eb:20:c2:b7:ba:08:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 29 00:10:04 2025 GMT
            Not After : Feb 27 23:59:59 2026 GMT
        Subject: serialNumber=ebcde36da3e1061458c091912bf7b51111c9971f6fa0a3df8a4d33701f296368, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8c:b7:24:8e:40:bd:f6:71:40:c1:01:50:b4:
                    e4:2d:06:9a:f9:9e:ee:ed:76:06:b7:fa:05:e2:5d:
                    6d:ca:b5:ff:36:2e:5b:55:08:1f:0e:1f:82:8b:cb:
                    e3:1a:5f:be:66:91:cd:c2:a5:0f:17:f0:56:70:44:
                    35:9a:85:2a:72:5e:fd:77:58:9e:ce:b7:0b:57:fd:
                    6d:6c:7f:95:ac:3c:8d:71:c9:f1:de:88:6f:15:d7:
                    3f:0e:ba:53:8c:0d:d0:ae:b5:1a:93:5e:b1:ee:ea:
                    44:71:8a:c0:a7:55:ae:58:7c:2c:22:e8:a0:4e:6a:
                    c1:cb:0e:b8:5e:73:c2:11:30:9a:f2:70:0b:80:39:
                    23:2b:da:35:d3:a7:a4:5c:18:5f:d2:11:d7:c8:02:
                    e4:28:52:1b:12:6f:b9:37:54:1a:9f:72:ed:a0:0e:
                    65:09:2d:4e:93:4c:2f:2c:92:aa:79:cc:53:fa:72:
                    b0:10:20:7a:c0:da:0a:93:0e:c0:a2:f4:f1:7d:8e:
                    f4:4f:ec:60:8b:73:cc:ae:0b:a6:e2:f4:de:86:70:
                    eb:83:e5:88:f7:83:4c:80:36:13:b5:6f:54:d6:a2:
                    64:b6:2d:8c:53:1d:c1:dc:b6:a6:0d:27:16:a3:0e:
                    c9:e0:55:bd:b9:76:2e:f0:e0:61:e0:03:e3:9b:4b:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9B:56:FA:11:B8:A8:F7:24:4D:F2:E0:7F:5B:4B:E9:4C:7C:AD:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95fb205d-987d-4fa2-b75a-8819afe4b558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.22.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         34:5d:0f:7f:6c:3d:ec:7c:5c:5b:03:65:31:68:c0:cd:0c:f8:
         47:c2:6f:d7:e6:5f:da:4e:e4:6c:da:b4:b2:26:96:6a:e7:22:
         e7:7e:92:6a:9c:19:bd:6a:c5:bc:b4:71:b0:b7:88:a5:e0:5b:
         a7:4e:b9:05:3a:38:4b:30:37:42:ad:e8:e1:0d:68:c7:89:28:
         e7:62:1f:3f:11:2c:98:f3:b7:1f:bf:b2:ad:80:51:6b:f5:e6:
         bb:91:12:c9:d8:ca:1d:e2:19:ac:ec:0c:67:2f:fd:b6:03:14:
         b8:78:f0:1e:d7:fc:0b:5f:cd:2a:f5:e6:b0:84:49:dc:38:9a:
         1b:6c:f9:b5:6b:38:1c:7a:d7:fb:ee:17:46:c3:0f:91:15:f4:
         82:c2:47:5a:7b:82:66:a9:8c:62:26:b7:cd:d0:1c:6c:63:28:
         24:48:ff:74:85:12:45:a9:1c:d6:78:4e:ff:e4:53:f8:de:81:
         29:dd:de:b9:61:52:8b:eb:fa:68:00:6a:78:71:63:c6:a0:e9:
         24:22:88:d4:b1:87:b9:99:59:54:9d:43:5d:1d:3e:1d:f3:a8:
         52:d9:99:6f:c2:71:15:06:b9:09:0e:e0:48:81:24:f4:52:ad:
         b4:13:bc:ac:93:73:80:db:f4:88:9e:12:9b:5a:95:8f:57:fb:
         05:b3:fe:6a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBdLSgIIOU2mdC4YiL+sgwre6CHUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI5MDAxMDA0WhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYmNkZTM2ZGEzZTEwNjE0NThjMDkxOTEyYmY3YjUxMTEx
Yzk5NzFmNmZhMGEzZGY4YTRkMzM3MDFmMjk2MzY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnjLckjkC99nFAwQFQtOQtBpr5nu7tdga3+gXiXW3Ktf82
LltVCB8OH4KLy+MaX75mkc3CpQ8X8FZwRDWahSpyXv13WJ7OtwtX/W1sf5WsPI1x
yfHeiG8V1z8OulOMDdCutRqTXrHu6kRxisCnVa5YfCwi6KBOasHLDrhec8IRMJry
cAuAOSMr2jXTp6RcGF/SEdfIAuQoUhsSb7k3VBqfcu2gDmUJLU6TTC8skqp5zFP6
crAQIHrA2gqTDsCi9PF9jvRP7GCLc8yuC6bi9N6GcOuD5Yj3g0yANhO1b1TWomS2
LYxTHcHctqYNJxajDsngVb25di7w4GHgA+ObSzXBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvZtW+hG4qPckTfLgf1tL6Ux8rRgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk1ZmIyMDVkLTk4N2QtNGZhMi1iNzVhLTg4MTlhZmU0YjU1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZFFsAwDQYJKoZIhvcNAQELBQADggEBADRdD39sPex8XFsDZTFowM0M+EfC
b9fmX9pO5GzatLImlmrnIud+kmqcGb1qxby0cbC3iKXgW6dOuQU6OEswN0Kt6OEN
aMeJKOdiHz8RLJjztx+/sq2AUWv15ruREsnYyh3iGazsDGcv/bYDFLh48B7X/Atf
zSr15rCESdw4mhts+bVrOBx61/vuF0bDD5EV9ILCR1p7gmapjGImt83QHGxjKCRI
/3SFEkWpHNZ4Tv/kU/jegSnd3rlhUovr+mgAanhxY8ag6SQiiNSxh7mZWVSdQ10d
Ph3zqFLZmW/CcRUGuQkO4EiBJPRSrbQTvKyTc4Db9IieEptalY9X+wWz/mo=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:26 2025 by rpki-client