This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f74638a-762e-43c7-bb3c-67b9ee019a0d.roa
File:                     9f74638a-762e-43c7-bb3c-67b9ee019a0d.roa (raw, json)
Hash identifier:          irX8tIq48GBE4Grofdf55SA9rH4XtD+4bmD16iir6Ys=
Subject key identifier:   5B:D2:D7:86:A5:28:0D:31:C6:B0:39:B0:DE:61:F9:38:26:9F:8A:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       383B2F447982E8DFF928DC391117D8BF84FCB6F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f74638a-762e-43c7-bb3c-67b9ee019a0d.roa
Signing time:             Thu 20 Nov 2025 00:11:12 +0000
ROA not before:           Thu 20 Nov 2025 00:11:12 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3b:2f:44:79:82:e8:df:f9:28:dc:39:11:17:d8:bf:84:fc:b6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:11:12 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=4aff383132564d404c74ef928628b3e536daacbc5fc0d4d7ec93242798d2b291, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:14:c1:34:e0:f6:36:b9:4e:d4:92:48:1b:
                    14:5f:f2:f9:5c:a6:43:3b:e2:0f:c0:d9:5c:02:82:
                    5d:a0:51:fd:55:22:dd:9b:7c:6b:ef:10:19:1e:3f:
                    ca:c7:7a:ca:5c:6e:98:f9:50:4f:3f:fb:ff:25:8f:
                    69:bb:a7:79:d9:5e:fe:0a:c7:9a:00:a0:13:5d:d3:
                    50:2a:a7:0f:0c:19:f4:8e:69:42:a2:3e:24:3b:fa:
                    6e:e6:a8:e1:f8:b2:ad:91:96:9a:02:d2:32:0a:22:
                    70:d5:0f:08:e5:d7:20:bb:9e:fa:82:1c:1e:31:e9:
                    68:2f:5e:9d:b3:83:9d:c9:a8:da:38:54:bd:c5:36:
                    e9:d2:4d:71:03:68:75:ec:1d:cd:8e:8e:81:ad:af:
                    de:f4:8f:9c:b6:b3:0c:00:de:42:29:8c:d8:3c:23:
                    26:e1:84:83:23:3d:5c:6e:75:7b:d1:a1:90:29:e2:
                    39:4f:5c:59:13:72:d9:1e:e0:1e:0e:1d:0f:69:53:
                    da:bf:2d:b2:16:eb:6b:51:d4:31:bc:fa:df:32:04:
                    77:65:ce:30:fd:ea:77:a0:8d:a1:c8:21:1a:af:e9:
                    9c:c5:5b:66:25:ab:7e:f1:5b:2e:22:01:5d:65:bd:
                    bc:dc:3c:fa:f0:dc:92:74:b4:11:70:df:af:66:b5:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D2:D7:86:A5:28:0D:31:C6:B0:39:B0:DE:61:F9:38:26:9F:8A:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f74638a-762e-43c7-bb3c-67b9ee019a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:26:6a:d0:5a:8d:d4:85:75:a2:81:80:47:d0:9c:28:24:02:
         bb:4f:66:92:54:6d:e8:7f:9d:c2:07:49:79:6e:44:3a:17:0a:
         f8:a3:e7:25:ed:fa:4e:94:90:82:4b:62:d0:89:7c:e3:0a:7d:
         96:68:b5:c6:63:34:8e:1b:a1:8b:10:8e:0e:e2:e0:09:6a:06:
         dd:e1:ad:9d:32:03:bc:6a:8f:f2:bc:02:f6:4a:92:34:b9:54:
         1c:d8:f7:b8:ae:9d:f9:b5:ca:74:61:b8:8a:d1:db:5d:14:89:
         e0:f9:b4:f3:a0:a7:7c:a9:85:9e:9c:f2:9c:46:1b:14:c9:f6:
         6e:e3:c5:a9:b9:71:c1:8a:bd:3f:ed:0b:eb:b4:6b:c0:5b:7a:
         87:94:44:82:72:42:f4:98:19:77:e5:6f:17:4d:2f:ba:28:bc:
         bd:b4:fa:59:71:6f:1e:ae:68:0e:8d:20:5c:68:56:9f:64:27:
         a8:45:87:24:fc:d4:b1:c7:e7:e3:44:89:bb:71:2d:19:7a:73:
         1b:56:57:a0:57:46:ca:eb:ad:d8:28:71:d3:b8:24:6b:8c:fd:
         b1:d2:78:43:b6:28:55:e7:33:c2:ab:7e:a7:21:8d:eb:37:87:
         d8:46:53:db:d9:14:eb:8d:6c:01:c6:eb:eb:48:d8:1c:49:61:
         14:2c:b8:bd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUODsvRHmC6N/5KNw5ERfYv4T8tvAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMDAxMTEyWhcNMjYwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YWZmMzgzMTMyNTY0ZDQwNGM3NGVmOTI4NjI4YjNlNTM2
ZGFhY2JjNWZjMGQ0ZDdlYzkzMjQyNzk4ZDJiMjkxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDT7RTBNOD2NrlO1JJIGxRf8vlcpkM74g/A2VwCgl2gUf1V
It2bfGvvEBkeP8rHespcbpj5UE8/+/8lj2m7p3nZXv4Kx5oAoBNd01Aqpw8MGfSO
aUKiPiQ7+m7mqOH4sq2RlpoC0jIKInDVDwjl1yC7nvqCHB4x6WgvXp2zg53JqNo4
VL3FNunSTXEDaHXsHc2OjoGtr970j5y2swwA3kIpjNg8IybhhIMjPVxudXvRoZAp
4jlPXFkTctke4B4OHQ9pU9q/LbIW62tR1DG8+t8yBHdlzjD96negjaHIIRqv6ZzF
W2Ylq37xWy4iAV1lvbzcPPrw3JJ0tBFw369mtbQNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUW9LXhqUoDTHGsDmw3mH5OCafivUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlmNzQ2MzhhLTc2MmUtNDNjNy1iYjNjLTY3YjllZTAxOWEwZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANgADAwDQYJKoZIhvcNAQELBQADggEBAGEmatBajdSFdaKBgEfQnCgkArtP
ZpJUbeh/ncIHSXluRDoXCvij5yXt+k6UkIJLYtCJfOMKfZZotcZjNI4boYsQjg7i
4AlqBt3hrZ0yA7xqj/K8AvZKkjS5VBzY97iunfm1ynRhuIrR210UieD5tPOgp3yp
hZ6c8pxGGxTJ9m7jxam5ccGKvT/tC+u0a8BbeoeURIJyQvSYGXflbxdNL7oovL20
+llxbx6uaA6NIFxoVp9kJ6hFhyT81LHH5+NEibtxLRl6cxtWV6BXRsrrrdgocdO4
JGuM/bHSeEO2KFXnM8Krfqchjes3h9hGU9vZFOuNbAHG6+tI2BxJYRQsuL0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:55:50 2025 by rpki-client