This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bad53057-3cbb-48a2-aec2-3c8d86813e27.roa
File:                     bad53057-3cbb-48a2-aec2-3c8d86813e27.roa (raw, json)
Hash identifier:          VSET0tXfhmyXYGMVcqHDtYLYUAcX+O/zfLFSlX9nr9s=
Subject key identifier:   08:BC:20:1F:35:EC:0D:FA:38:05:32:A3:AB:73:97:B3:1F:79:00:28
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50E0D61E071A065CDB21AF61151B189D07936D79
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bad53057-3cbb-48a2-aec2-3c8d86813e27.roa
Signing time:             Wed 03 Dec 2025 01:41:10 +0000
ROA not before:           Wed 03 Dec 2025 01:41:10 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e0:d6:1e:07:1a:06:5c:db:21:af:61:15:1b:18:9d:07:93:6d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:41:10 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=cc6ddb8c1d5848ba64ab7730c4858037b21acc61c1178a580b013dbdc8f1b76a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:b0:37:53:0d:c0:5c:e7:10:e7:7b:f2:24:
                    ca:00:b5:a9:71:5f:86:64:4b:94:b2:bb:4e:f0:f1:
                    e2:84:2e:16:2e:8c:f8:59:1e:13:1f:25:ce:ed:40:
                    18:f6:fa:3c:44:9c:4c:fd:c7:ff:93:ed:8b:bf:0d:
                    39:36:f8:34:9b:fe:59:06:2e:b2:2c:1a:93:df:7f:
                    bc:05:89:8f:e1:f8:8a:3f:b3:19:50:9f:c0:33:89:
                    1a:c8:96:1a:67:82:d4:8f:43:b7:ae:9c:f0:8d:a5:
                    c9:99:49:2a:1d:36:6f:6e:ec:73:b3:9c:83:36:81:
                    34:b6:f8:da:e8:cd:2f:3b:f8:17:46:33:68:54:70:
                    02:a0:33:1c:62:cf:ce:f3:0e:a7:52:27:d7:88:85:
                    eb:cd:81:44:c5:e9:d8:7b:0a:b5:c4:68:f6:4f:3d:
                    84:c8:df:2d:a8:62:e8:0e:01:6d:9d:dc:9c:57:3a:
                    b4:8d:27:98:8f:8c:a2:15:7f:6f:e5:79:c8:7f:f2:
                    0c:ec:9e:79:1a:d0:8b:bc:df:65:59:f0:15:f3:34:
                    f5:60:32:71:67:19:86:ca:15:c9:07:59:49:8e:25:
                    e0:94:e5:99:cb:f4:89:d9:f4:54:ce:9f:a9:62:d3:
                    d1:b4:9a:e2:c6:7f:86:b9:45:20:fd:a5:fb:20:54:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BC:20:1F:35:EC:0D:FA:38:05:32:A3:AB:73:97:B3:1F:79:00:28
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bad53057-3cbb-48a2-aec2-3c8d86813e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:15:8f:df:80:37:98:0b:18:c4:ad:83:a6:7d:73:c9:aa:4d:
         7c:61:d9:8a:2a:ae:66:3c:41:e9:72:6b:53:75:a9:2b:19:f5:
         76:d9:c8:d7:c1:ba:39:db:80:73:84:f2:56:1f:72:28:76:da:
         16:15:a0:24:af:19:7f:2b:b7:b4:4a:b3:5c:64:68:6f:81:65:
         21:0b:f2:2c:88:3f:be:66:b6:c6:e4:7d:bc:09:e4:4b:97:12:
         e2:31:51:9c:94:d5:02:f7:c3:61:64:b7:3b:ee:1f:6a:9f:cf:
         23:d8:07:01:ea:6e:17:ae:66:51:ef:a6:92:d5:ae:a2:94:8e:
         16:0e:2e:32:26:0c:b6:38:c9:40:0e:10:4e:ac:35:b6:63:51:
         7b:d8:65:7e:49:c9:90:23:34:5b:4b:da:a4:77:17:4a:f5:52:
         7e:86:ad:ef:04:68:1d:06:83:22:37:ed:ec:1d:5e:cb:d5:a7:
         f3:4e:78:74:a1:bf:cb:8d:da:ba:5c:b7:b4:ec:71:14:39:52:
         8e:46:28:64:2a:0b:1a:18:9c:80:52:00:c6:82:84:fe:0c:8e:
         39:18:02:22:66:e2:2f:30:74:25:76:e6:9c:db:6f:c6:ef:12:
         35:0e:00:69:7a:9e:03:2b:bf:6a:20:9a:0f:e7:72:bb:79:02:
         19:0b:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:54:20 2025 by rpki-client