This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f7c31-6468-4794-addf-4e261bbd9e31.roa
File:                     9f6f7c31-6468-4794-addf-4e261bbd9e31.roa (raw, json)
Hash identifier:          6rW1ZNx45g3zBMSF0KE6juLzEgXzhE3P9DOu4r6ZcSo=
Subject key identifier:   DD:42:15:A8:CE:31:B7:7A:F4:E1:F1:8B:43:DB:1E:BE:A3:18:11:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45F8D40179D013083C07F6A978FAB542FB4F3792
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f7c31-6468-4794-addf-4e261bbd9e31.roa
Signing time:             Thu 20 Nov 2025 00:30:14 +0000
ROA not before:           Thu 20 Nov 2025 00:30:14 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f8:d4:01:79:d0:13:08:3c:07:f6:a9:78:fa:b5:42:fb:4f:37:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:30:14 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=dd3271177c6bc2d075f64b3859dbae05fc7f35c8277ae89cfd159cf0200b8161, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:a0:68:78:5f:ce:95:06:7c:77:1f:49:c4:
                    42:72:b2:f8:4e:f0:8c:44:c1:4c:0a:e4:b5:3a:d4:
                    f8:6e:ac:be:fb:fd:dc:b7:c1:96:db:ab:68:93:06:
                    59:38:ea:9d:6c:50:9a:b5:f9:0e:44:f2:aa:b7:49:
                    43:48:06:c8:96:3b:f7:28:87:d2:b3:dc:53:9b:12:
                    4e:0b:ab:88:cf:13:64:56:1c:a2:a2:e8:f6:3d:0e:
                    48:96:d5:f8:c3:16:f5:d6:ff:d6:91:74:ae:38:1b:
                    91:c0:71:d5:d9:06:5b:3d:b9:e7:49:9f:f2:3d:79:
                    46:ce:58:c5:c7:3a:8c:60:16:a5:e3:08:c2:a1:52:
                    44:21:01:c5:05:48:bc:3f:11:60:b5:44:4b:f8:ec:
                    22:a2:10:19:6f:be:92:cb:7f:06:28:d3:1b:4f:a4:
                    6b:7c:c8:6a:9e:34:f6:93:80:92:1b:fb:cd:aa:06:
                    31:aa:bd:7e:4f:62:6a:9a:8b:9b:a4:bf:bc:8f:04:
                    d0:e5:31:4c:b9:0e:99:c5:90:e2:40:8c:16:eb:6f:
                    71:62:6c:a4:a2:75:d4:fc:df:7e:67:de:77:a4:c8:
                    8a:cf:8b:57:dd:09:9a:d5:59:1d:b0:b1:46:b0:68:
                    f1:a8:8c:56:4c:94:3e:4c:b8:61:48:c9:65:ca:b2:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:42:15:A8:CE:31:B7:7A:F4:E1:F1:8B:43:DB:1E:BE:A3:18:11:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f7c31-6468-4794-addf-4e261bbd9e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:65:77:30:71:a8:c4:69:88:c5:f0:89:70:42:65:80:f6:b6:
         ae:0b:68:13:ff:4a:67:56:61:2e:2d:22:88:bc:bc:a2:7b:80:
         57:64:ab:78:24:9f:7f:3d:78:5f:ea:3f:24:e6:97:33:26:59:
         fb:50:04:dc:d1:ae:88:df:1a:76:0b:a8:45:06:24:3d:2e:1a:
         a7:a2:f7:89:1d:de:3a:ff:5f:2b:38:12:eb:16:95:e5:05:df:
         be:4b:3b:ac:3f:84:44:eb:68:0c:71:5d:10:1d:96:1c:19:78:
         cd:d4:30:38:b3:1a:1a:ce:0c:40:0f:d3:12:c2:24:c4:43:47:
         22:62:d9:e4:2d:98:8c:24:e8:77:fd:40:f3:d4:9b:99:8c:a0:
         68:94:01:5a:ab:f8:5b:d8:f2:68:2e:f2:f7:8a:24:12:dc:66:
         cf:09:7c:6d:8d:21:1d:94:18:ea:5e:4b:a0:6f:55:4f:c8:fb:
         c4:7f:4d:2e:ec:ab:0c:61:89:ce:84:b6:e2:81:f9:df:2a:aa:
         97:31:b3:83:18:ec:7e:2f:52:f9:18:99:50:37:b9:f1:18:5a:
         10:43:d8:3e:74:b2:4a:95:1c:8c:88:66:7c:16:7a:87:a7:6b:
         d2:75:ca:b8:ff:04:33:49:5e:c0:79:9d:30:3b:f8:7b:60:05:
         41:ed:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:19:46 2025 by rpki-client