This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b291d7d3-1582-4d15-9362-848d2950798a.roa
File:                     b291d7d3-1582-4d15-9362-848d2950798a.roa (raw, json)
Hash identifier:          j7Z4U12BoOZliMVPphN+Zbb9bTCLJSqzcMqItWiQuLs=
Subject key identifier:   B8:9B:97:46:90:11:6F:57:D7:4A:03:FB:AE:DB:38:87:87:9F:86:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E4A5B44FE7B439350400A5C4A6D697C0AE4B00B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b291d7d3-1582-4d15-9362-848d2950798a.roa
Signing time:             Wed 19 Nov 2025 00:21:17 +0000
ROA not before:           Wed 19 Nov 2025 00:21:17 +0000
ROA not after:            Tue 17 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        198.148.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4a:5b:44:fe:7b:43:93:50:40:0a:5c:4a:6d:69:7c:0a:e4:b0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:21:17 2025 GMT
            Not After : Feb 17 23:59:59 2026 GMT
        Subject: serialNumber=8bb36251d689f164c3c00c737d3fda21db25738c7e250efd53094596388a8593, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:41:30:e4:e3:45:ee:ab:35:da:c5:2c:cb:
                    9f:39:f4:e8:7e:ab:5d:d8:5f:e5:85:9e:3f:f1:07:
                    f5:a0:95:b0:dc:54:cb:00:0c:2a:e1:2e:4f:8b:96:
                    1a:cd:79:02:7f:71:bf:bf:ed:7b:42:88:a9:d1:0e:
                    18:65:00:94:72:cf:2a:a2:f9:34:e2:58:d3:73:04:
                    11:46:0a:6d:b5:64:c1:9f:a1:c1:eb:ba:d1:a7:17:
                    57:82:0e:e6:63:65:f2:6a:e1:ae:d1:8a:51:34:e8:
                    3f:fb:70:93:d1:6a:70:af:bd:94:8e:a4:73:75:4f:
                    7b:a6:be:08:d1:1f:c4:5f:25:75:1f:0a:4d:6c:7b:
                    43:28:72:d1:0b:0e:63:05:21:1c:45:ca:78:9e:ea:
                    3f:f2:e9:f8:17:96:2e:94:6d:04:00:9d:b4:84:8b:
                    cd:3e:94:48:08:bd:3c:c9:c7:02:f5:53:e4:46:de:
                    b9:30:a9:2a:8f:59:a4:0c:a5:00:30:55:4b:0e:3d:
                    ee:4a:7f:15:0b:c1:c2:57:50:fc:e8:a3:ce:65:c7:
                    bd:71:ad:03:78:7f:1d:96:28:2f:76:a6:eb:50:3f:
                    de:9a:c3:35:52:5c:58:58:96:7f:d1:7b:5a:7c:bb:
                    6a:fb:9f:05:80:ae:6f:98:31:69:b7:7c:ac:c7:8a:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9B:97:46:90:11:6F:57:D7:4A:03:FB:AE:DB:38:87:87:9F:86:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b291d7d3-1582-4d15-9362-848d2950798a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:6c:99:d3:8b:3c:c2:e9:bd:38:4d:de:30:b6:ad:e1:5c:20:
         ff:59:be:c5:b6:b4:79:b1:cf:4e:df:50:2a:fd:48:82:7d:dd:
         b4:d3:23:2d:f3:05:aa:7b:1d:b3:b7:dc:60:e8:32:28:ad:e1:
         0b:6d:e4:ec:da:f1:37:5f:4a:89:33:07:38:36:87:da:8d:81:
         5f:18:b7:99:0c:b6:e4:16:b7:9f:b2:87:e7:c0:e6:72:cd:5c:
         8a:00:5d:f1:56:65:ee:9f:72:a4:dd:22:8d:c5:01:bf:a4:28:
         0d:57:c6:86:35:67:57:6b:25:6e:64:f8:c5:c9:f0:12:d1:04:
         07:0a:1e:61:e1:d8:36:48:a7:83:93:8f:4d:26:6a:ee:51:be:
         58:f2:b7:74:46:18:5c:a8:f0:cf:aa:14:af:e7:4f:79:c3:23:
         b4:83:60:1c:36:85:45:f2:b3:ed:54:27:ef:28:da:82:4d:ad:
         d1:01:dd:19:20:0c:39:75:64:05:4d:73:2c:a6:75:94:6f:c6:
         71:18:b6:0c:e1:2c:bf:c0:74:1f:5a:18:a0:23:b4:c2:c0:b2:
         a3:93:e1:6e:b9:28:41:e5:7c:98:6b:02:50:4d:c5:d3:f1:cd:
         d8:c0:1a:ff:53:c6:10:1d:d9:9c:23:ec:a3:db:bc:63:29:36:
         5e:50:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:27:55 2025 by rpki-client