This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a03388a6-f98b-483f-be5c-f922dc3fe5cc.roa
File:                     a03388a6-f98b-483f-be5c-f922dc3fe5cc.roa (raw, json)
Hash identifier:          jzaAp9A2z4u8Td5qe+ILludO/jHY33Lyr21Z4h/j154=
Subject key identifier:   D0:02:0E:8A:56:0C:47:7A:83:58:FB:72:F6:E4:40:D2:AD:7D:8E:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68779400A3138FCB2C4B913B3967E023E4639E09
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a03388a6-f98b-483f-be5c-f922dc3fe5cc.roa
Signing time:             Sat 22 Nov 2025 00:20:32 +0000
ROA not before:           Sat 22 Nov 2025 00:20:32 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        67.210.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:77:94:00:a3:13:8f:cb:2c:4b:91:3b:39:67:e0:23:e4:63:9e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:20:32 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=44c8abb5d49e12072d1d75b07e52c47c5402d4da4e663bc70a00ac908b6d96ef, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:85:33:4c:2d:39:de:5b:a7:00:63:fa:99:
                    70:06:9a:d5:ab:6a:84:86:81:9c:4c:90:dd:98:e1:
                    99:74:54:e8:de:1b:9b:77:75:a7:09:f0:79:a7:e5:
                    ce:01:85:a4:5f:cc:14:62:f6:75:96:2f:ce:33:0f:
                    53:64:b8:06:92:d8:8f:82:35:5c:56:97:42:78:30:
                    46:ba:7f:0b:06:6a:8f:e8:d1:c7:37:6e:aa:59:99:
                    ea:15:fb:9f:b6:ba:71:29:e5:90:aa:e7:57:49:ef:
                    18:09:1b:c1:ff:74:0c:58:00:c0:5c:e2:18:d0:5b:
                    c5:47:24:5d:f8:ce:09:83:a7:e7:ad:35:8f:bb:4e:
                    0c:0a:52:1b:37:54:b0:55:bd:0f:4b:66:12:36:27:
                    c3:bb:f1:81:92:c5:b9:f2:28:47:8c:23:48:a8:dd:
                    db:50:26:fb:ea:1f:87:da:eb:62:e6:e6:53:97:c1:
                    b1:ce:d7:2c:a2:45:69:1b:b6:c4:c1:58:9e:b2:50:
                    d2:91:85:9e:0a:bb:c7:f4:d6:c0:04:dd:c6:5f:eb:
                    db:b3:b9:81:09:ee:6b:16:2b:26:ec:a8:26:6a:5d:
                    40:10:5f:e4:93:01:1d:b7:0e:d7:57:7b:33:e7:63:
                    18:56:0b:ec:d2:1b:57:90:22:79:6d:e7:61:b6:d2:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:02:0E:8A:56:0C:47:7A:83:58:FB:72:F6:E4:40:D2:AD:7D:8E:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a03388a6-f98b-483f-be5c-f922dc3fe5cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:dc:4b:ad:9e:7d:26:4d:63:16:77:87:f0:d8:5c:5d:32:
         6b:32:0f:f3:f9:75:bf:c0:01:72:cf:e8:4a:5d:36:9e:d9:65:
         a4:34:18:14:bc:ba:ee:7c:6b:f9:d1:36:92:f3:82:a5:15:b1:
         64:bb:85:d2:f3:e3:fd:1d:30:72:73:d4:91:3d:0d:0f:06:d0:
         6f:ee:f4:36:81:1c:6e:7e:d1:01:68:16:fb:32:71:13:78:e5:
         cb:7b:e5:91:df:dc:1a:33:65:a4:57:86:cb:6f:32:b6:c0:e4:
         7e:0e:a2:2b:8d:ca:2f:73:58:13:a5:bb:51:c4:ad:0c:61:f7:
         ac:81:61:14:62:b3:4d:70:4a:77:e9:df:9b:4f:ed:01:20:57:
         7b:44:21:1a:f8:3f:be:f0:0a:a9:87:cb:9c:af:83:92:00:b6:
         10:35:4b:2a:a5:0e:37:37:fe:e3:c1:32:82:3b:46:f9:85:c8:
         d0:dc:38:5b:2e:c4:aa:ff:1a:66:a9:45:e0:79:f4:dc:9c:f0:
         64:0d:b5:46:cc:80:4a:20:37:6b:bb:21:1b:36:b8:9e:c8:9c:
         c9:8d:99:b0:60:e5:9c:9e:b3:77:47:a5:4f:33:82:27:9b:cc:
         f3:e4:45:7f:53:60:3b:86:b3:c5:ce:72:87:44:bd:88:95:87:
         0f:15:d8:4c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaHeUAKMTj8ssS5E7OWfgI+RjngkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDAyMDMyWhcNMjYwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NGM4YWJiNWQ0OWUxMjA3MmQxZDc1YjA3ZTUyYzQ3YzU0
MDJkNGRhNGU2NjNiYzcwYTAwYWM5MDhiNmQ5NmVmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDa2IUzTC053lunAGP6mXAGmtWraoSGgZxMkN2Y4Zl0VOje
G5t3dacJ8Hmn5c4BhaRfzBRi9nWWL84zD1NkuAaS2I+CNVxWl0J4MEa6fwsGao/o
0cc3bqpZmeoV+5+2unEp5ZCq51dJ7xgJG8H/dAxYAMBc4hjQW8VHJF34zgmDp+et
NY+7TgwKUhs3VLBVvQ9LZhI2J8O78YGSxbnyKEeMI0io3dtQJvvqH4fa62Lm5lOX
wbHO1yyiRWkbtsTBWJ6yUNKRhZ4Ku8f01sAE3cZf69uzuYEJ7msWKybsqCZqXUAQ
X+STAR23DtdXezPnYxhWC+zSG1eQInlt52G20pClAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0AIOilYMR3qDWPty9uRA0q19jmMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EwMzM4OGE2LWY5OGItNDgzZi1iZTVjLWY5MjJkYzNmZTVjYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARD0kAwDQYJKoZIhvcNAQELBQADggEBAEGc3Eutnn0mTWMWd4fw2FxdMmsy
D/P5db/AAXLP6EpdNp7ZZaQ0GBS8uu58a/nRNpLzgqUVsWS7hdLz4/0dMHJz1JE9
DQ8G0G/u9DaBHG5+0QFoFvsycRN45ct75ZHf3BozZaRXhstvMrbA5H4OoiuNyi9z
WBOlu1HErQxh96yBYRRis01wSnfp35tP7QEgV3tEIRr4P77wCqmHy5yvg5IAthA1
SyqlDjc3/uPBMoI7RvmFyNDcOFsuxKr/GmapReB59Nyc8GQNtUbMgEogN2u7IRs2
uJ7InMmNmbBg5Zyes3dHpU8zgiebzPPkRX9TYDuGs8XOcodEvYiVhw8V2Ew=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:56:53 2025 by rpki-client