This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f500c-a228-4cca-a78b-c7f72e0b9e74.roa
File:                     9f6f500c-a228-4cca-a78b-c7f72e0b9e74.roa (raw, json)
Hash identifier:          E0qdQfq5KkLWBeHSl3MCkdSXhCxsuA7Nrs14vlR1Utw=
Subject key identifier:   B4:E3:30:F0:DC:15:02:98:40:B1:F1:F6:F2:92:A3:60:75:E6:76:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       445AA1F2808743D00EB61924154A774EDF07C34F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f500c-a228-4cca-a78b-c7f72e0b9e74.roa
Signing time:             Thu 27 Nov 2025 00:11:46 +0000
ROA not before:           Thu 27 Nov 2025 00:11:46 +0000
ROA not after:            Wed 25 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.187.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5a:a1:f2:80:87:43:d0:0e:b6:19:24:15:4a:77:4e:df:07:c3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 27 00:11:46 2025 GMT
            Not After : Feb 25 23:59:59 2026 GMT
        Subject: serialNumber=922b172a207fbd7a5a7d1787bc83726fbe8c44892322e5ccf0587ee9235f574c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:63:31:51:db:58:46:4f:3f:05:3f:5b:b4:
                    e2:f9:1a:1b:cc:8c:59:16:87:a8:6f:29:4a:54:0c:
                    b0:b6:5e:41:63:73:59:e4:f2:5a:63:48:3f:b6:2c:
                    cd:15:23:38:1e:53:f1:22:01:4b:25:94:52:db:2f:
                    9d:18:5a:b5:30:6c:6f:3c:e2:5c:bf:46:bc:bc:50:
                    f8:11:eb:de:ba:de:12:71:15:3e:42:0a:bb:0d:65:
                    8c:c1:27:5d:01:84:1e:9a:ed:2c:f3:85:8c:18:47:
                    81:fc:49:26:b3:bb:e4:39:1e:f5:b2:4e:2f:05:17:
                    68:5a:a6:5b:25:ec:6e:46:39:c2:c9:7f:ea:66:19:
                    4c:f4:1b:9c:d9:a8:3c:9f:fb:ad:71:56:e2:a5:4f:
                    bb:dc:5d:5c:46:df:f1:bf:ee:b6:52:5e:d8:e5:e4:
                    d9:38:13:98:f0:f4:25:5f:fe:a7:ff:e7:fe:45:97:
                    64:cf:38:b9:76:23:15:c0:cb:d1:1a:5a:9b:07:61:
                    b3:6c:8a:16:b0:d7:09:72:c0:c0:c5:93:ec:8f:d9:
                    b3:d4:d5:11:93:05:40:81:1c:d9:e3:fe:76:2f:6b:
                    ff:83:c6:f2:55:78:9b:a6:53:03:fb:76:f8:d0:e8:
                    e2:91:0f:1f:67:e0:0d:a3:78:88:51:08:6e:71:71:
                    da:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E3:30:F0:DC:15:02:98:40:B1:F1:F6:F2:92:A3:60:75:E6:76:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f500c-a228-4cca-a78b-c7f72e0b9e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.187.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c4:9d:56:ac:db:75:8d:2d:b5:1e:92:8f:fc:e6:f9:40:4e:d3:
         21:5d:49:8a:f1:c1:69:e6:67:af:c9:33:07:1c:c2:00:62:64:
         5b:d5:4a:10:7d:5a:cd:92:c1:23:fd:b3:a0:22:2e:d0:2f:ac:
         ba:7e:3e:8d:83:40:15:56:6d:a4:ad:8d:4a:fb:9b:af:d2:ef:
         00:ca:eb:e6:b6:b9:ea:21:f8:c0:68:fc:50:3b:8a:fc:60:5a:
         e6:59:60:3c:5c:be:3d:73:6f:42:06:c6:06:f1:ff:2c:09:2d:
         f5:62:d4:d7:43:89:84:32:b3:b4:75:a5:9a:39:2b:ec:a5:53:
         e6:dc:50:03:92:e4:e1:fe:31:92:8b:7e:15:6c:95:0f:26:35:
         59:f8:8d:aa:78:2a:13:5b:37:e2:b3:00:cb:f6:42:a0:90:85:
         e5:cd:1a:5c:1a:bf:0b:ac:35:cd:73:23:1a:2e:75:8a:77:4e:
         5e:c1:3d:5b:86:10:fc:2c:0b:95:49:3d:a7:55:95:33:c6:0f:
         82:d9:fd:ac:ad:34:c3:1d:fd:f8:69:72:1e:4c:54:96:59:74:
         81:12:b9:33:d7:3d:a0:eb:17:86:77:74:fa:15:00:37:3a:76:
         cb:b4:45:3a:1c:80:6e:bb:54:2b:f2:21:87:06:f7:15:eb:3f:
         b0:0b:19:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:55:24 2025 by rpki-client