This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0ee04ef-30f3-45d8-9b67-a5e3a5e27c75.roa
File:                     a0ee04ef-30f3-45d8-9b67-a5e3a5e27c75.roa (raw, json)
Hash identifier:          gg0GmOmVvhkMyqSYmFlw2XpOd7reYI+DfukFCqbExq0=
Subject key identifier:   D3:20:E1:4A:0A:1D:21:36:C9:13:0D:05:39:5B:C3:9C:64:5B:D0:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57CAF0C80CEC20C5F55AB29ABCE46F024865DEAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0ee04ef-30f3-45d8-9b67-a5e3a5e27c75.roa
Signing time:             Sun 30 Nov 2025 00:21:27 +0000
ROA not before:           Sun 30 Nov 2025 00:21:27 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.136.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ca:f0:c8:0c:ec:20:c5:f5:5a:b2:9a:bc:e4:6f:02:48:65:de:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:21:27 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=b7b0de83a98993af728bacaff61c65766602837e89eaee7bb4b82b69dbd79d8c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:e5:7b:6e:56:57:11:28:33:57:96:2d:d6:
                    51:86:69:54:07:a9:ca:bc:68:df:35:02:92:f4:08:
                    62:dc:6d:86:c2:74:4c:c2:b7:77:d0:b2:63:05:80:
                    3b:94:4f:9b:2f:3a:0f:c1:3c:08:f0:e0:83:e3:8c:
                    f0:15:f1:7b:19:ae:99:e0:91:6f:3f:86:c4:45:36:
                    10:4b:0e:c5:cd:8e:1a:01:6e:2a:e9:ec:b5:e7:c7:
                    db:8c:a5:7f:f0:de:e9:d9:30:ae:f6:27:bf:0f:43:
                    45:b1:ab:62:cc:7c:e6:bc:04:1d:fc:0a:0b:f3:29:
                    bf:c7:47:74:f3:10:e5:2b:17:c9:d8:24:93:d8:c9:
                    30:7b:d8:8b:9d:13:ec:09:5b:7a:91:73:d4:e4:31:
                    13:1a:9c:ac:fa:e5:85:e9:0b:2f:d4:6f:86:91:a9:
                    b4:0d:68:aa:e5:0f:17:42:d7:1f:57:cd:81:fc:35:
                    ae:07:99:d4:11:5e:3f:12:55:eb:d2:73:f9:2d:d8:
                    0e:a7:44:b0:7c:af:07:b7:ea:f0:45:9f:59:6f:22:
                    87:ca:cb:ce:a1:9a:ee:09:40:3a:01:ef:47:b5:bd:
                    3e:a7:11:13:bc:b7:89:06:08:33:b8:2f:7b:43:49:
                    ac:ab:fa:d5:1b:82:32:55:11:2d:e1:2d:4b:cd:a3:
                    80:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:20:E1:4A:0A:1D:21:36:C9:13:0D:05:39:5B:C3:9C:64:5B:D0:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0ee04ef-30f3-45d8-9b67-a5e3a5e27c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:be:14:57:88:3a:f6:44:e1:9d:b1:50:20:77:f0:fe:07:ec:
         50:37:44:af:6e:c1:d5:be:da:83:c2:08:f1:c3:50:4f:e1:89:
         89:21:f3:36:30:0e:a6:2f:b6:8e:69:18:2f:8f:ef:02:29:4a:
         f4:5d:a1:ce:c2:75:99:47:89:4c:03:29:b4:02:26:60:c9:cd:
         81:27:e3:cb:cf:bd:29:84:81:80:d2:3b:f9:94:a2:e8:7c:e6:
         97:ad:fb:e0:f8:1d:0f:21:6a:fc:1b:ea:d6:28:5f:88:6d:29:
         4f:4a:fb:87:e1:45:b1:da:7f:c1:ec:8e:87:fb:4c:ad:4d:60:
         0f:ea:af:3b:17:7d:70:9c:0f:7c:c3:e1:f9:05:a2:8a:b3:04:
         7a:c3:e4:b2:c5:8c:b8:04:58:88:94:2f:f3:ca:ed:60:91:de:
         fd:5b:77:7a:f7:b8:72:19:15:ac:3f:a9:6a:09:3e:75:93:bc:
         56:f8:2c:4c:70:23:73:a8:e6:03:4f:a3:6f:f3:9d:52:48:16:
         29:35:2a:df:a7:95:5c:35:06:56:0e:7a:be:e9:50:63:87:8e:
         45:d5:25:c3:79:a1:65:ab:34:eb:09:7c:9e:6e:73:b9:af:08:
         44:e9:57:0b:c2:e7:3c:5b:04:f1:0a:f6:02:ca:f1:8c:cc:2c:
         be:d8:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:37:14 2025 by rpki-client