This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a61a66a7-34b3-4920-9f38-a8811609b6a9.roa
File:                     a61a66a7-34b3-4920-9f38-a8811609b6a9.roa (raw, json)
Hash identifier:          D9Ej/GxssQn2aRXhCeEweC+8BYVninMbRPFXMgHwzcM=
Subject key identifier:   72:FB:37:A8:CC:5A:EE:19:C9:0C:D2:4B:EA:55:84:62:58:8A:E4:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22F625BAABADECA59009D594422EA74CE0069C64
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a61a66a7-34b3-4920-9f38-a8811609b6a9.roa
Signing time:             Sun 23 Nov 2025 00:30:12 +0000
ROA not before:           Sun 23 Nov 2025 00:30:12 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f6:25:ba:ab:ad:ec:a5:90:09:d5:94:42:2e:a7:4c:e0:06:9c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 00:30:12 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=532cb2d1d39609bffcf17975c6caedea1e4353d6440df315c58b96242b76f24c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fc:fd:04:e1:b0:10:de:07:47:27:13:55:95:
                    a4:8a:c4:51:6e:9f:4c:87:68:76:8f:ee:cd:99:36:
                    19:4d:b0:03:7b:3e:3e:45:b5:b6:66:11:ae:1a:df:
                    38:41:03:c4:35:e8:f5:1b:7b:95:18:ed:79:78:13:
                    e2:14:9c:20:85:d1:9d:e5:fd:60:d5:b4:2a:ed:08:
                    3c:90:a9:df:01:eb:9c:21:9c:65:13:f2:e6:ed:f5:
                    34:96:08:59:7a:e6:a8:e6:f8:ca:80:83:73:c4:ff:
                    13:87:70:27:3e:26:b7:a1:14:aa:ff:1c:05:5c:1b:
                    ac:85:57:52:df:11:0b:8b:4a:24:ef:1a:7d:7f:2c:
                    1c:91:11:de:df:da:02:05:00:94:79:4c:f4:3b:f6:
                    28:b2:e6:e8:de:9c:1a:4a:de:32:ee:72:7c:5f:3f:
                    a0:ef:f7:6a:cc:e3:36:24:b7:f0:34:8e:de:f1:e0:
                    bd:c7:12:14:60:ef:6c:0b:18:ed:b2:0a:fc:89:3d:
                    49:2a:97:d9:72:48:cd:f5:e5:12:13:bc:4b:ab:62:
                    12:9e:27:4b:68:4d:88:15:84:83:ee:50:ee:91:6c:
                    70:f4:6c:3d:7b:75:4c:e8:d1:13:1c:fb:25:d2:cf:
                    a5:0a:c5:b4:dc:50:57:b4:d8:82:ef:dc:6b:0e:2e:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FB:37:A8:CC:5A:EE:19:C9:0C:D2:4B:EA:55:84:62:58:8A:E4:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a61a66a7-34b3-4920-9f38-a8811609b6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:5b:ff:0d:a7:55:2b:15:52:a0:29:36:d7:42:ff:0b:26:
         64:96:c6:db:35:5f:54:30:f5:9c:83:78:4e:e3:37:6a:08:75:
         eb:0c:c2:5a:5a:1f:15:5d:82:09:7b:a7:34:a3:f0:94:32:4b:
         24:f7:19:5c:35:a6:0d:f1:9b:7b:95:d7:ff:55:d6:1c:44:2f:
         7f:8e:53:47:48:a0:48:11:7c:95:a2:82:6c:32:90:54:9a:b2:
         b0:9d:d3:a6:6c:dd:cc:68:b1:b9:3d:49:12:2d:d1:3b:6c:1c:
         79:71:a3:46:2e:ad:ff:29:3f:08:b6:55:9a:57:9d:bb:74:7e:
         88:b8:41:2d:98:23:a7:bf:ca:16:c8:c9:63:2a:b8:cd:c9:13:
         42:6c:02:50:38:52:62:e6:a8:8b:07:d7:54:70:23:98:d6:78:
         8e:d3:48:64:b1:ac:f2:9b:16:b6:cc:91:2b:ce:e0:97:38:86:
         72:cc:67:49:a4:3a:34:9f:38:2e:96:2e:9a:41:f6:08:7a:af:
         b0:7a:b8:cd:0f:65:44:ce:b6:a0:e6:bb:b1:92:f7:44:22:04:
         6e:a7:da:40:b1:f0:a5:76:ef:d4:5e:8e:83:33:cb:d7:d0:7c:
         b3:22:c4:9d:2b:eb:5f:8d:84:d0:bf:4c:59:2e:35:89:e5:0a:
         62:9d:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:34 2025 by rpki-client