This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa
File:                     b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa (raw, json)
Hash identifier:          tVAf+R3680ZjvdIIMuvRhJAVK5+EfpjPo52kPsrqk9U=
Subject key identifier:   1F:AA:7C:53:6D:A5:50:7F:2D:78:0F:79:56:99:08:B9:25:A3:BC:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17D217B5B093C9BCF67ABD9D9F237E309CE9F9F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa
Signing time:             Sun 30 Nov 2025 00:20:06 +0000
ROA not before:           Sun 30 Nov 2025 00:20:06 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d2:17:b5:b0:93:c9:bc:f6:7a:bd:9d:9f:23:7e:30:9c:e9:f9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:20:06 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=0a4547991ada22713853f98820862d839953e194650c6c8bf6db4cdaa93a1e31, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:0a:53:62:f4:54:58:07:2e:f8:f9:8f:f0:
                    cd:e0:97:7d:86:0e:83:61:4e:5c:63:60:e4:93:cc:
                    65:8e:55:3e:78:d6:12:b5:3c:2b:58:77:cb:6c:50:
                    5d:42:11:93:8d:27:64:2a:ca:d1:33:ba:b3:8e:09:
                    23:8d:1b:cb:74:3b:29:0c:06:d3:b6:31:da:93:2e:
                    fd:a9:29:64:72:2a:25:c0:10:cc:5e:6d:14:b3:03:
                    7b:e9:b5:b0:60:70:93:d0:ab:ed:bc:a9:f9:89:83:
                    8f:05:cf:43:93:19:1f:34:c8:4c:44:1d:c0:52:55:
                    08:67:e9:30:eb:b7:b5:2b:8c:cd:2d:17:eb:f6:91:
                    df:0d:64:a9:79:e3:f1:b5:c7:12:18:44:16:75:e2:
                    93:10:24:12:9a:3f:98:d7:bc:35:ef:c3:f6:84:7f:
                    06:c6:c5:c0:bc:ad:4c:8c:64:52:2f:77:a3:56:89:
                    67:56:fc:20:60:6c:77:05:cb:92:04:86:40:35:5f:
                    29:9d:e2:ab:8a:9a:b4:ec:65:37:05:38:5a:e2:81:
                    b9:8e:e1:d2:44:8d:fb:8e:13:d0:15:3d:47:46:3d:
                    f5:a7:78:97:e3:89:d2:f2:2c:e5:3b:44:d1:d0:e9:
                    14:7e:41:82:dd:6b:66:ad:e2:fe:71:22:b1:a3:28:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AA:7C:53:6D:A5:50:7F:2D:78:0F:79:56:99:08:B9:25:A3:BC:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2a36fd0-8c46-4a97-b2e1-53d031c85428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:4d:e9:69:50:62:0e:55:38:a3:73:7c:ee:78:19:64:ae:34:
         c4:1a:ef:55:cc:9d:43:78:47:8d:ea:05:6d:a6:2b:94:d1:98:
         c7:ee:68:70:80:0e:25:79:b0:da:c3:b2:2c:d8:5d:79:4b:c5:
         f4:58:16:1e:0e:88:ad:d4:35:13:0e:82:5c:ec:99:be:ca:e4:
         db:f5:3a:27:d3:4d:dc:00:61:b9:d1:f0:9d:77:77:ed:ab:6e:
         7a:ad:2e:ad:98:d6:81:1f:85:93:43:ee:ad:c5:bd:22:62:1b:
         d0:ea:a8:30:1f:82:62:31:7a:e0:b9:a2:37:26:43:f0:33:2a:
         dd:a1:01:00:ad:c3:fa:a7:7c:24:36:51:c7:21:25:84:9e:43:
         da:9f:a8:54:10:68:79:83:12:29:51:f1:d4:00:1e:b4:4d:26:
         4c:6c:a7:cb:a9:81:74:04:42:90:a9:e6:67:37:bd:56:3a:ba:
         a2:cf:32:67:d0:12:14:0e:41:66:0f:44:5f:3d:2e:c7:33:7c:
         a3:7d:23:a1:c7:aa:66:85:bc:25:43:7f:5d:08:7a:89:c6:02:
         f6:07:56:82:0c:21:71:10:e4:b5:05:d6:90:4b:5d:e3:b0:3c:
         a4:60:0c:b3:a8:47:d3:86:bb:e9:72:96:82:25:30:e4:ad:d2:
         ed:a0:b9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:53:46 2025 by rpki-client