This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa
File:                     bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa (raw, json)
Hash identifier:          Rhejs0zWVbyDV77etr09XWX/FIHUVUDDidGoB8eikus=
Subject key identifier:   05:49:21:DA:54:CB:42:07:ED:3D:0D:00:BF:C6:59:57:19:61:25:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3ABA63870AEF3425477271B8154C801042C93F32
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa
Signing time:             Sat 06 Dec 2025 00:50:05 +0000
ROA not before:           Sat 06 Dec 2025 00:50:05 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        110.238.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ba:63:87:0a:ef:34:25:47:72:71:b8:15:4c:80:10:42:c9:3f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 00:50:05 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=2373e18029d59c39c96e96bb5e66f6f5cf6a8f76f57d953095f5f5db0046eeec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:2a:22:2f:0a:b4:73:e1:68:3f:a4:5d:75:
                    8d:18:7c:1d:e7:dd:4f:f3:07:fd:d4:08:9e:27:5b:
                    55:e1:b1:ca:66:d1:e1:ad:fd:f7:a9:4f:bc:5d:a7:
                    50:01:03:58:bd:cb:b3:66:73:47:f2:e8:b6:93:5d:
                    93:3f:93:43:25:2c:93:85:c5:a5:2a:dc:bd:d3:cd:
                    68:df:b3:09:65:03:de:c2:8b:57:9a:4f:09:38:c3:
                    82:ff:58:5d:f5:5e:7a:a5:ce:d7:11:3b:b0:10:fd:
                    ec:6a:ed:a8:31:c4:ff:ce:28:a5:6c:e7:d0:6a:c1:
                    8b:47:7d:32:af:5f:4b:be:c5:00:f6:23:ae:2c:66:
                    f5:a8:3b:b8:4f:53:ad:af:9a:49:f8:31:fb:18:c1:
                    b4:bb:f7:2c:c6:5d:55:56:0b:ae:94:44:32:d6:fb:
                    b1:27:ba:f7:62:ad:8f:00:b7:7a:67:d2:36:f1:d0:
                    02:9c:71:c0:d6:c1:78:eb:da:e8:14:c5:73:7d:fb:
                    5d:c1:68:d5:c5:d7:ed:fd:d2:cc:28:07:85:5e:35:
                    42:e3:9c:52:60:65:c1:e7:a7:55:d8:97:c1:da:fd:
                    ab:5c:67:5e:b9:6d:89:fc:b8:cc:a7:a4:72:69:aa:
                    b1:8c:ef:00:50:af:35:f3:2f:8d:d1:8e:94:8d:22:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:49:21:DA:54:CB:42:07:ED:3D:0D:00:BF:C6:59:57:19:61:25:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.238.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:fc:a5:80:b2:34:0e:57:f2:c1:49:ca:89:77:cd:6c:c0:01:
         1f:13:75:d7:c5:fd:96:b1:36:f9:3b:bc:58:98:6a:d9:93:28:
         61:4a:8f:4c:9d:18:7d:dc:50:c9:3e:ab:fb:a9:a6:3b:9b:5a:
         e4:29:6a:c4:db:f5:76:b5:46:30:15:87:fb:81:76:b5:7f:c8:
         ab:35:cd:29:be:d7:d6:20:ca:ea:65:c2:68:76:23:04:b7:9b:
         ce:5f:54:cf:54:19:1c:6e:0a:16:cb:5c:3b:35:06:c8:98:bd:
         44:4f:31:d6:79:d8:00:b0:6c:1c:9c:da:9a:50:9c:8f:1b:7a:
         88:92:cd:38:d9:2a:b5:b6:32:8f:43:1b:83:05:2a:60:27:03:
         91:4a:ba:af:e7:e7:5f:d2:7c:99:f3:c3:34:d4:0b:da:2e:0b:
         5a:bb:50:ff:63:4f:d1:14:c8:35:fb:2a:86:bc:cf:33:95:d9:
         60:f6:27:4d:c9:42:68:3b:79:37:c9:d4:dc:87:d1:35:35:ac:
         0e:a6:bb:46:27:28:37:e7:34:01:3d:46:08:7c:b6:6a:e3:bb:
         c5:31:af:de:78:07:47:0c:ae:9b:02:91:9e:b7:ff:05:20:3b:
         6b:17:44:0d:5c:f0:2d:c8:6a:6d:68:d1:3e:c1:49:e5:73:52:
         83:fe:7b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:56:46 2025 by rpki-client