This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1374a67-dfa3-499e-88a9-33619dcae730.roa
File:                     b1374a67-dfa3-499e-88a9-33619dcae730.roa (raw, json)
Hash identifier:          Z3pmVVOPQv6tBjjt8d8/ihDn2kbLXrdhEDZWwB8R58g=
Subject key identifier:   93:FA:45:FD:2E:64:66:2A:FC:CD:30:34:E9:C1:3A:E9:E8:DC:52:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E8809A3B856B9762842C1FB12D897D03D43B8B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1374a67-dfa3-499e-88a9-33619dcae730.roa
Signing time:             Tue 25 Nov 2025 00:31:43 +0000
ROA not before:           Tue 25 Nov 2025 00:31:43 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.128.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:88:09:a3:b8:56:b9:76:28:42:c1:fb:12:d8:97:d0:3d:43:b8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:31:43 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=cdbfde52958c883f442823f0fe6f713901002e27774cb1281f5e1f330b495bf5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:6a:fd:cc:1a:e4:82:ca:21:f3:64:fc:80:
                    da:d6:ad:6b:e1:f0:c9:49:8a:b8:5a:c5:20:f1:7f:
                    60:a3:a9:83:e1:93:5b:ad:fa:ec:ae:74:dd:40:1e:
                    10:50:8b:fc:53:eb:a6:0e:62:4e:77:b6:91:de:77:
                    90:e8:b3:ab:30:04:63:57:9c:74:77:01:01:49:52:
                    bd:78:42:4e:db:fe:cd:3f:25:cf:87:87:98:54:b0:
                    78:d1:2c:0c:87:fa:0f:39:0c:e2:be:f9:28:c9:cc:
                    e1:77:25:b5:46:2a:6f:ac:da:4d:df:dd:d9:32:6c:
                    1d:44:2b:d5:9e:3a:73:77:be:55:b7:cd:7b:aa:6c:
                    f9:0b:82:b1:0d:bf:b0:de:8a:33:74:1e:2b:f4:46:
                    c9:4e:06:0b:78:8f:45:da:46:29:11:23:44:20:39:
                    80:6e:0f:1b:46:9d:05:6a:d2:07:be:98:e5:b7:fe:
                    19:62:f7:11:8a:28:20:53:b3:19:cd:32:23:6f:03:
                    cc:e6:eb:6f:48:10:12:31:73:9c:93:aa:59:72:ed:
                    c0:f2:27:1d:dc:9f:fa:42:9c:c2:d7:ad:e9:12:94:
                    07:df:47:96:64:23:a9:db:02:62:e5:21:3c:55:1c:
                    5b:90:1d:eb:5f:3c:2f:7b:07:80:ed:f9:df:0d:4e:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FA:45:FD:2E:64:66:2A:FC:CD:30:34:E9:C1:3A:E9:E8:DC:52:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1374a67-dfa3-499e-88a9-33619dcae730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:d8:e1:7a:9e:f6:f2:b2:b0:b9:71:e7:57:10:b8:ee:ed:a3:
         a2:e1:4d:b4:9f:4e:4f:87:bc:e8:42:40:ff:82:aa:47:9a:0e:
         2e:60:48:56:f2:7f:d1:ac:1e:8c:1e:2c:8b:6f:ba:dd:36:b2:
         c8:d6:02:42:45:93:a9:4a:52:0a:64:2c:4a:c5:b8:5c:5b:36:
         52:23:80:5c:5f:d7:e2:92:37:1f:5e:27:06:4d:70:01:3f:d8:
         61:86:40:20:a7:22:e2:4c:eb:06:ae:43:ae:b6:22:91:8b:e9:
         c2:1a:d1:15:db:3d:69:cb:a6:45:e7:84:95:17:72:c6:8e:03:
         72:92:3a:52:00:ca:8a:9b:88:71:dc:dc:0b:3b:ea:56:e0:f9:
         bc:f0:3a:a0:ef:fc:22:8d:1c:bd:da:5a:99:74:c2:0a:9a:37:
         29:e6:b3:f7:f4:c7:99:aa:bc:97:0f:3a:48:d1:f0:a0:6c:cf:
         cc:cb:38:57:75:4c:00:46:af:55:71:85:84:09:eb:85:43:a9:
         ce:04:e7:15:0e:5f:5b:82:6d:f0:4a:80:8a:bb:14:de:b9:27:
         3a:3e:9d:0a:a4:5b:d4:1f:16:9a:bb:4c:c4:05:79:7f:d2:de:
         1a:03:db:8d:c4:98:91:d9:9d:78:00:c0:b9:19:43:2d:56:6e:
         24:0b:37:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:23:02 2025 by rpki-client