This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa
File:                     aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa (raw, json)
Hash identifier:          3hJLuM1LT9Q1XO6d8hmEp3pZhyDcss8KqFuouVE7gvY=
Subject key identifier:   59:79:EC:F3:20:E9:08:76:0D:EC:5F:59:90:9B:3B:36:D9:C0:FB:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7567F40D9CCA91BB9A2E9F741FDB3951A8F7CE61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa
Signing time:             Wed 26 Nov 2025 01:00:06 +0000
ROA not before:           Wed 26 Nov 2025 01:00:06 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.51.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:67:f4:0d:9c:ca:91:bb:9a:2e:9f:74:1f:db:39:51:a8:f7:ce:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 01:00:06 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=446ecab011ca6abebe52ab9417d6484396fcbdb91ac19f17e6943d4e83d670e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9b:40:4a:2f:c6:97:06:de:e6:07:3e:dd:a0:
                    a6:85:07:9a:a8:1e:eb:8c:16:aa:de:a2:3d:cf:39:
                    b1:ba:02:33:4c:fa:24:e6:52:51:12:de:aa:3c:24:
                    b0:d7:16:9f:64:fb:c3:0c:52:d0:c7:f3:f0:71:60:
                    d4:40:5c:0b:d4:1f:63:c2:e9:4f:ef:77:cc:f0:66:
                    3e:39:23:43:41:df:2f:0a:03:78:47:35:cc:cb:f2:
                    42:2e:43:d5:d1:60:c6:01:25:b8:25:8e:7d:00:d8:
                    70:88:2e:15:86:50:66:12:a4:07:5b:92:70:e5:87:
                    66:57:5a:8a:3b:d7:0c:b4:47:a1:46:ac:d4:0d:44:
                    f0:e0:70:54:68:56:0f:b2:da:42:a3:45:12:2e:31:
                    30:e8:ed:7f:3d:d4:c2:d5:d2:00:72:6f:b5:fa:89:
                    05:35:83:ee:4e:7a:b2:c0:1b:27:4a:66:eb:1b:2d:
                    7b:1d:9f:3c:58:d8:8f:ed:04:3c:ce:88:e0:a2:aa:
                    1e:3b:16:93:b1:cd:9a:f4:d1:f0:ea:cc:95:4b:d5:
                    f9:59:a4:25:74:ca:eb:85:90:b2:ed:da:68:af:ea:
                    8a:2b:c6:e5:44:47:9f:17:b8:90:ad:bd:9e:d8:f4:
                    7d:d1:21:b9:0c:ce:1b:18:8f:74:d2:b4:60:22:eb:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:79:EC:F3:20:E9:08:76:0D:EC:5F:59:90:9B:3B:36:D9:C0:FB:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cf:f9:4c:13:8d:98:8c:4b:a1:01:67:bb:3f:c7:7d:0a:94:ff:
         19:da:49:c9:6b:f2:53:0e:82:e6:35:03:97:f6:b4:82:ca:e1:
         d9:34:74:f5:24:4c:58:06:5d:a9:36:ce:5c:65:82:3a:ce:70:
         29:f3:d3:3c:50:cf:0f:bd:d3:7a:03:67:47:98:c7:e4:47:29:
         b7:c8:d2:db:f1:54:c8:57:28:fd:02:b2:ae:5c:6c:c6:ee:85:
         98:c7:d7:c7:d4:b2:2c:92:2e:4b:1c:bf:ac:03:4d:69:1e:8c:
         05:35:85:f2:7a:6c:09:c6:7a:75:e6:45:1a:23:46:bb:37:20:
         20:05:6b:1c:64:78:80:e4:e5:b4:c9:eb:f8:b0:28:34:40:c2:
         44:85:12:86:5e:a2:77:c1:01:a1:8d:1a:c9:1f:7b:80:f4:ed:
         ac:89:df:b7:5f:92:8c:fe:77:14:da:9c:ab:b6:35:f5:77:7e:
         fc:9e:16:9b:62:71:2d:61:1b:d6:30:e2:e6:d2:da:a7:60:e7:
         2d:a6:80:99:b5:e7:86:c9:1d:e4:8a:f2:35:d0:9e:63:c9:82:
         24:90:e3:e6:9c:19:1c:06:ad:cd:78:f0:96:74:6f:74:85:ef:
         75:1c:4a:cf:db:30:a9:a5:6a:37:38:46:2b:e6:3a:a2:34:b6:
         04:c5:e3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:55:40 2025 by rpki-client