This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96d8b514-71dd-4086-a11c-a6267345030c.roa
File:                     96d8b514-71dd-4086-a11c-a6267345030c.roa (raw, json)
Hash identifier:          d3twYRHCDCqt9/E1VW7BjjrmrUd/AM5NoBWtJbbLYsI=
Subject key identifier:   CD:11:30:22:5D:8C:34:A3:49:08:D9:70:07:C6:7C:8E:00:12:D6:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47FCB6F22AC339ECD80C03D5957BB08A8D0B2714
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96d8b514-71dd-4086-a11c-a6267345030c.roa
Signing time:             Wed 26 Nov 2025 00:51:26 +0000
ROA not before:           Wed 26 Nov 2025 00:51:26 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        56.137.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fc:b6:f2:2a:c3:39:ec:d8:0c:03:d5:95:7b:b0:8a:8d:0b:27:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:51:26 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=86175d9476e598245ff1b599ccbd4275030af61f77d044a3f600301596fc4851, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:2c:cb:28:ca:4c:8e:f6:ef:70:ed:ea:3a:
                    ca:c4:0a:2b:66:d9:21:dc:cf:80:1a:03:d6:e4:65:
                    88:c5:ef:53:fb:ce:8e:ff:1b:b5:c7:5b:e0:72:eb:
                    a2:e0:bb:33:f8:91:a1:67:a9:4d:02:c6:3e:6b:3b:
                    56:dd:c3:b9:78:e3:e1:55:c9:4d:3c:d0:16:78:43:
                    97:ed:ae:4a:81:c7:34:36:84:81:50:d6:6a:c5:1b:
                    f2:c5:ba:96:89:9d:22:90:da:ef:9c:16:3d:35:ea:
                    d4:df:32:c6:cb:1c:db:32:29:3f:0d:8f:af:4b:80:
                    6a:18:1e:db:57:cf:14:31:0f:31:10:85:3a:f8:72:
                    7a:b4:f8:5b:6d:fe:24:b8:bc:f4:60:fe:3e:ac:ff:
                    e7:1c:36:2f:a1:53:47:82:0a:14:6f:ad:ac:73:d2:
                    0a:6f:4a:53:d6:62:02:80:e1:b1:db:b1:4c:fb:c0:
                    71:98:b0:02:5b:28:e6:5c:ee:2d:da:94:ed:83:bb:
                    b9:08:53:64:9d:16:ac:4e:0d:67:3f:a0:d5:da:ff:
                    85:33:af:14:eb:72:a1:68:9b:02:ea:00:05:4b:17:
                    2d:d6:1a:71:0f:b2:d0:1b:e1:80:b8:5e:46:cc:41:
                    93:d4:88:21:aa:54:5f:0c:c1:98:0f:41:d5:e8:18:
                    6e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:11:30:22:5D:8C:34:A3:49:08:D9:70:07:C6:7C:8E:00:12:D6:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96d8b514-71dd-4086-a11c-a6267345030c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.137.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:23:81:f6:78:be:4d:c3:4f:70:04:3f:d8:84:28:1f:d4:
         e2:3d:28:7d:82:2f:13:c2:03:62:3b:ed:72:25:66:82:1f:7b:
         16:19:c6:c3:7c:1a:32:a1:5f:24:ab:8a:95:fb:de:21:00:f3:
         4d:bf:f1:2c:4f:65:09:f2:f0:fd:e5:b0:12:b4:ac:cf:87:16:
         a3:78:98:7e:16:0e:42:68:96:50:74:be:58:23:de:06:a8:98:
         21:ba:18:e1:62:e6:c3:62:14:f4:51:e0:ef:d6:98:61:30:b0:
         2a:96:c8:f8:c7:9c:53:e2:df:bb:a6:55:9b:f4:d5:3f:72:b0:
         04:07:b5:5a:54:1c:0c:db:0d:1d:db:80:70:f9:67:45:22:da:
         1e:c9:65:f6:e7:83:3f:59:1a:bb:30:bf:fa:b0:f2:4f:a4:39:
         2c:63:ac:7a:cf:21:7e:43:75:d3:8b:0d:ae:a4:99:07:e4:fc:
         53:8f:12:4d:cf:b3:4f:27:ca:d6:50:c8:da:27:32:90:6c:f8:
         1c:0f:a1:4e:23:2a:0c:b1:bf:11:02:3c:3b:f3:e9:98:33:e1:
         2c:76:bc:4f:b7:55:aa:36:65:53:97:71:67:26:5b:7b:59:26:
         36:01:9d:6b:c7:47:e8:6c:cd:f5:5b:e5:93:e3:fa:2b:f8:75:
         ae:e9:cd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:55:58 2025 by rpki-client