This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa
File:                     a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa (raw, json)
Hash identifier:          XSvL02qdnOYzugubCmNyKokk1u5oU1NvKG1iH/nTNpk=
Subject key identifier:   DB:2D:68:10:D6:91:D9:09:22:F0:A9:DA:2E:B2:E3:3F:B6:81:5F:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4037689F561FDC67B64411BE2E0F2780EC6885C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa
Signing time:             Sun 30 Nov 2025 00:11:13 +0000
ROA not before:           Sun 30 Nov 2025 00:11:13 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.246.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:37:68:9f:56:1f:dc:67:b6:44:11:be:2e:0f:27:80:ec:68:85:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:11:13 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=4991388f639b6bc985980f029efc88c347b2675dd8fe2e08e8b27542fcda7350, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:de:7a:83:30:3d:53:99:07:0d:7f:ef:a6:
                    80:2b:c9:06:42:34:4c:8b:3e:e8:ea:c1:99:fd:3a:
                    4e:08:9d:71:f7:00:55:86:89:eb:f7:02:82:a3:5b:
                    a6:27:0b:56:f7:5c:50:e6:fb:86:c9:b0:d8:6c:5a:
                    f4:2e:ab:a5:20:32:51:b9:e4:6f:76:30:06:fc:9d:
                    c7:78:9c:94:10:50:38:38:d1:d0:6e:e3:5a:0c:7e:
                    24:93:da:ce:ce:2f:b3:de:59:30:92:dd:08:90:67:
                    96:c5:48:0d:e5:51:01:a4:19:d8:64:10:1b:f8:b0:
                    b0:53:19:b1:63:d1:7e:67:2b:74:d5:d2:d0:f6:a2:
                    82:9a:05:1d:f4:79:42:0a:27:39:cc:ac:86:bf:3b:
                    8d:6e:1f:0b:ed:79:c1:7d:52:8a:a7:3d:6f:81:d9:
                    48:ce:71:7b:f1:31:f3:73:6b:dd:5d:8a:d9:b1:da:
                    d2:62:21:73:21:16:b5:3d:35:f4:fd:b8:0d:38:1e:
                    44:de:c9:5b:be:43:2d:34:04:16:a1:f4:0e:0b:9f:
                    f9:f8:c4:af:f0:94:ac:52:5b:09:91:5f:9f:99:37:
                    2b:3b:5b:51:98:60:fd:38:2e:19:e3:75:5a:c9:e8:
                    9e:d9:aa:d4:e0:2e:0b:d7:57:64:4b:ac:a3:40:4f:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2D:68:10:D6:91:D9:09:22:F0:A9:DA:2E:B2:E3:3F:B6:81:5F:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:0b:70:63:7b:9b:31:1b:0c:5c:c2:fa:cf:c6:8d:99:0d:e3:
         35:51:23:b3:4c:98:28:ab:b5:cd:ca:e0:b3:b4:81:ab:78:cc:
         05:b6:c5:64:88:2d:3a:64:00:a8:0e:a1:48:65:a2:0e:44:aa:
         a0:6c:8e:a1:6f:b4:3f:89:ae:48:5f:f2:c2:da:e8:ad:e0:02:
         aa:c0:31:12:e3:15:8d:b4:90:37:bc:bb:67:77:17:ed:ff:c9:
         e5:8d:57:8d:24:73:96:ef:95:38:62:19:09:99:9d:1d:bf:9b:
         c7:9b:dc:98:c1:8b:a4:32:bd:e0:1b:c9:73:ec:ba:dc:64:f7:
         04:12:28:4c:49:4a:ca:4c:e6:04:b9:97:f6:26:c4:db:82:e9:
         58:33:47:97:a2:fb:64:82:69:35:ed:da:96:e3:8f:23:ab:df:
         d9:49:25:55:bf:42:dd:58:1c:40:01:e2:0d:49:e7:7f:9e:ec:
         5f:d5:e6:7e:d0:fe:df:32:12:f1:25:50:0e:16:fd:68:ca:73:
         41:ab:5b:8b:92:25:a0:36:e4:cc:54:39:64:bf:13:fd:8d:14:
         d9:03:66:03:68:8e:1d:23:1a:cc:a3:1f:ce:46:d8:62:a4:ff:
         b7:19:7a:30:c8:0e:d0:27:24:c7:ff:93:8b:84:22:74:37:04:
         95:22:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:11:59 2025 by rpki-client