This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a186b9ce-cf89-48ae-98d7-c0eea860aa24.roa
File:                     a186b9ce-cf89-48ae-98d7-c0eea860aa24.roa (raw, json)
Hash identifier:          fLuoR2xOGbnZvsABKr4L5MpFa5Bfj+LEGo0vpEGlqjk=
Subject key identifier:   CA:75:63:EB:1C:4D:F3:57:5E:85:82:F4:51:23:B6:AB:00:DC:95:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D71A090D7C8DF73C4A46F7A33F31784C6855A77
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a186b9ce-cf89-48ae-98d7-c0eea860aa24.roa
Signing time:             Wed 03 Dec 2025 01:40:15 +0000
ROA not before:           Wed 03 Dec 2025 01:40:15 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:71:a0:90:d7:c8:df:73:c4:a4:6f:7a:33:f3:17:84:c6:85:5a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:40:15 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=b32db7b7ccdd86670561fb535df7696fdf3b5e5ab68c6882681e814502608307, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:9f:17:c0:67:3f:b0:05:85:1b:90:db:0d:
                    6c:0e:0c:5e:98:e4:29:ba:9c:19:f0:69:34:3d:6c:
                    0e:ae:41:25:4f:ec:9c:ef:41:6e:2f:8e:31:70:9f:
                    4b:5e:04:16:90:53:aa:08:2d:0c:10:95:40:17:14:
                    c8:7e:8d:45:d5:98:74:c9:12:a6:fa:f9:98:5f:10:
                    04:00:a7:68:05:3d:5a:bf:ba:25:d3:43:23:c1:46:
                    bb:d0:e1:91:73:79:9a:67:a0:fd:d5:86:1b:80:ea:
                    8d:c8:ae:fd:1d:6e:35:d1:9e:73:60:58:50:27:ba:
                    00:a8:1d:5a:2b:b0:c6:8d:ab:81:11:3f:0b:9d:f2:
                    60:a5:1c:58:27:fa:06:9f:3f:12:cc:dd:5c:5e:f5:
                    92:29:06:af:08:0f:eb:4a:91:02:f8:64:81:9f:f7:
                    32:55:ba:70:4b:39:2c:0f:8d:2e:f6:67:5d:a0:c7:
                    b1:0e:09:52:b6:d4:ee:b4:79:fb:ec:6a:ce:03:73:
                    13:d7:0f:81:06:19:15:23:04:bf:69:4a:f9:38:76:
                    fa:b4:82:da:9a:52:f0:8e:db:e3:c6:48:fb:9e:15:
                    12:78:5f:14:a6:ae:90:f0:0e:78:c7:b3:45:82:e0:
                    11:71:6f:b6:b6:58:bc:71:49:ec:b5:1d:c0:d9:7f:
                    d3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:63:EB:1C:4D:F3:57:5E:85:82:F4:51:23:B6:AB:00:DC:95:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a186b9ce-cf89-48ae-98d7-c0eea860aa24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:7f:2b:b5:46:96:d7:9a:9d:4a:ea:d8:57:5f:06:b3:12:f4:
         56:8f:b2:08:72:e6:24:0a:5c:ab:65:c7:fe:8c:74:3d:6f:5f:
         d8:f5:d1:ed:ea:6f:b0:9d:15:f3:50:6b:62:86:4e:60:fc:fb:
         8e:7e:ee:85:be:bd:21:a6:12:f3:43:3c:df:6f:f1:eb:94:c2:
         9a:2e:eb:ee:0a:21:b7:83:8a:ce:3c:49:0f:45:c1:3e:e6:f3:
         87:9e:dd:8d:0e:61:13:3f:b3:2e:63:2a:d7:1c:ac:69:25:b1:
         c7:1f:c8:81:33:f3:c3:a3:69:7d:09:7c:32:e6:2a:0b:dc:4c:
         7b:b2:fb:91:5c:1a:18:0f:33:0e:26:2b:00:01:fb:49:9e:38:
         fa:e2:f0:8d:7f:c3:0b:dc:e1:cd:ed:04:ef:26:23:8a:61:ba:
         0b:02:ee:91:db:5f:ae:eb:65:4b:51:82:c6:a2:f8:5b:01:51:
         36:53:2f:40:c5:f1:d0:97:06:67:8e:cb:0f:35:25:25:bb:3f:
         44:81:19:53:43:cc:87:65:cd:1a:2d:13:bc:b4:3b:cf:52:47:
         fa:2d:c4:c4:4d:1a:fe:f6:90:a5:ff:24:05:d3:3d:d3:99:a1:
         e7:22:77:49:af:52:bb:1d:eb:54:46:f7:77:a5:4a:de:ef:b0:
         91:de:68:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:59:41 2025 by rpki-client