This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd965ce8-8693-4e09-9995-bf06572029fb.roa
File:                     bd965ce8-8693-4e09-9995-bf06572029fb.roa (raw, json)
Hash identifier:          Ck2TKJ2a54yq0QlETX3RY20+fFBI9XccF8kvmm72AjM=
Subject key identifier:   91:0B:FE:A8:2A:29:B2:C4:D1:86:87:99:B4:C4:D9:6C:38:D3:A4:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DE415B427011EC5637C6C974849DC56D7A13129
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd965ce8-8693-4e09-9995-bf06572029fb.roa
Signing time:             Wed 19 Nov 2025 00:01:12 +0000
ROA not before:           Wed 19 Nov 2025 00:01:12 +0000
ROA not after:            Tue 17 Feb 2026 23:59:59 +0000
asID:                     701
IP address blocks:        162.208.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e4:15:b4:27:01:1e:c5:63:7c:6c:97:48:49:dc:56:d7:a1:31:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:01:12 2025 GMT
            Not After : Feb 17 23:59:59 2026 GMT
        Subject: serialNumber=ea5bd4759733966dc8529b2b6a26c9cb393269a6b701c34e8307e91d70751a14, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:b8:37:51:bc:99:bc:25:88:d7:97:48:a4:
                    a3:ea:8a:c6:7c:1e:1b:67:37:46:74:93:f0:bf:f9:
                    70:24:30:84:f5:c4:7a:a6:f6:88:52:30:68:f8:d4:
                    cc:7c:32:ba:f2:2b:0b:a3:d3:50:c4:8b:5b:7f:96:
                    11:9f:f1:47:04:02:68:73:56:4e:03:99:e9:db:75:
                    b1:84:34:2c:72:30:46:ab:da:a6:07:f9:26:28:6e:
                    ea:4e:83:9d:89:47:22:1d:a4:82:cd:23:fa:01:86:
                    70:d3:88:33:10:6a:c2:02:be:7a:f7:3b:ae:99:6d:
                    ae:47:24:9a:87:84:fc:bc:78:01:19:13:00:45:17:
                    c3:61:4d:4e:02:97:b8:8f:f6:20:92:09:a3:bc:08:
                    f3:06:b5:90:74:f2:2e:e2:d3:e8:a1:3d:ca:1a:04:
                    af:ac:4a:d5:52:1b:37:f3:a2:0f:85:85:aa:3a:ff:
                    f1:36:a2:58:6c:5e:f8:72:eb:9d:2d:21:c2:8c:f7:
                    25:1f:93:ae:b8:49:6c:a6:67:d4:e7:58:6c:3f:c6:
                    e8:45:8f:57:c7:04:b5:0b:dd:cd:d8:f4:8b:0e:0e:
                    4c:63:76:1f:d3:f5:9e:9d:2c:f4:bd:73:94:fe:7c:
                    1b:5f:27:cc:32:fc:b2:74:8f:7b:2e:51:86:70:32:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0B:FE:A8:2A:29:B2:C4:D1:86:87:99:B4:C4:D9:6C:38:D3:A4:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd965ce8-8693-4e09-9995-bf06572029fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:d2:26:79:55:90:01:e3:5f:93:8d:db:60:a3:04:dd:ef:
         11:6c:7a:41:2c:bd:9e:41:20:2b:15:0c:30:fd:44:22:af:78:
         70:ae:f0:9e:6f:8a:c0:83:68:c6:3c:04:9e:1f:db:49:c7:71:
         3f:02:0b:e0:cb:d4:d1:5e:ca:5a:88:c3:8c:24:8a:22:95:29:
         16:02:b1:30:ae:ae:c1:46:24:ef:1a:f2:09:8a:cf:db:99:84:
         d1:bb:8a:28:e6:63:d4:49:cf:87:91:3a:96:86:7a:c4:60:61:
         92:67:b8:6a:27:e2:37:fa:22:f7:21:9b:99:f5:18:c0:f4:4f:
         67:de:19:62:06:29:09:6a:47:99:a5:1e:1c:f3:9a:5c:79:3d:
         eb:b4:78:b6:17:29:75:ce:8f:b6:eb:95:46:b9:3d:c4:da:2e:
         1e:b0:17:62:b7:3c:f8:12:e0:5d:90:60:eb:c5:6b:79:a6:47:
         12:41:c4:e2:fe:16:45:a3:39:5e:cd:7d:3e:09:e7:53:5c:e6:
         76:ff:58:78:59:84:b5:2f:58:af:90:f5:5a:01:cb:66:6a:a4:
         c1:04:54:d6:5e:85:45:05:df:0a:10:77:d0:fd:09:7c:3b:fe:
         87:d8:42:47:da:7b:46:e8:26:09:87:36:34:c2:45:cb:bc:ee:
         17:1d:26:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:56:29 2025 by rpki-client