This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa
File:                     c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa (raw, json)
Hash identifier:          aE3Y1oLeCrdChwIlTD5Y3mAfyn8IVtsfMYD6JrmGvhE=
Subject key identifier:   1D:29:42:7A:75:1B:70:1F:84:13:F4:EA:E9:BD:D7:DF:CA:D3:23:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       307264E8228CAD1854C2CD427BA714E875FFC100
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa
Signing time:             Wed 26 Nov 2025 00:10:08 +0000
ROA not before:           Wed 26 Nov 2025 00:10:08 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.46.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:64:e8:22:8c:ad:18:54:c2:cd:42:7b:a7:14:e8:75:ff:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:10:08 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=f4d5b34ed1ae41b151265940219da2591396dae9f42721e368262b030d5c6863, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:43:b7:1d:af:67:e5:c3:08:2c:73:32:6b:
                    90:a2:8e:1b:50:33:43:15:28:d0:3e:b5:66:92:3f:
                    89:b6:4b:6f:bb:ab:7e:62:e0:56:77:57:17:3c:10:
                    ef:86:6f:1c:27:75:33:8d:f7:0c:9f:ae:d1:6d:0e:
                    98:7e:03:4c:53:d5:ac:a9:19:5d:d2:35:bf:cd:99:
                    b5:2c:df:af:c3:93:97:15:6c:1b:92:fb:85:01:54:
                    2a:5f:bc:12:6a:f3:ad:9c:f5:6e:86:04:58:af:3b:
                    ac:69:10:af:32:7b:ad:79:f7:57:a7:d9:70:ea:da:
                    00:e0:59:d7:d9:17:0a:2e:c5:b3:ef:63:42:0a:79:
                    c3:b0:b5:0a:96:d9:a0:37:23:34:0f:57:3a:ef:6e:
                    d2:5b:3a:32:88:2e:ee:b1:47:6d:90:64:06:6a:17:
                    82:5f:e8:67:1b:79:25:d8:07:fd:f9:fe:9c:4b:61:
                    c4:16:7c:05:7a:e2:2c:c9:80:08:88:48:f6:45:0d:
                    b1:dd:bb:77:1a:9d:bb:51:e8:37:6e:1c:5b:84:19:
                    e7:63:8b:f4:6f:e9:49:a9:65:99:41:5b:35:5b:3d:
                    a7:09:ce:64:cd:e1:03:58:94:47:de:ec:ba:ee:4c:
                    4a:7f:13:f8:e3:0e:c7:bc:f3:d5:ae:e4:40:bc:47:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:29:42:7A:75:1B:70:1F:84:13:F4:EA:E9:BD:D7:DF:CA:D3:23:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bb:37:bd:de:39:5c:0d:ac:ae:8b:57:dd:92:2c:d1:ea:22:65:
         11:60:39:a2:21:2b:f6:12:66:c8:52:e4:8a:a9:40:b8:9f:07:
         8b:bc:89:5a:d8:b8:cf:e7:35:19:45:0b:1a:65:e6:bc:95:5d:
         4f:e1:28:17:4e:90:ae:6c:66:62:0f:b0:2f:39:4d:e5:ef:19:
         2b:c6:85:15:e4:d7:f6:6d:03:fa:2a:42:f5:2c:11:07:44:8d:
         9d:4f:ae:35:8d:06:9f:e9:59:88:4d:68:66:17:d0:b9:27:bf:
         5d:17:e0:e3:1d:d3:44:e9:d3:a6:6d:3f:42:42:a0:51:9f:d5:
         e8:4e:a6:69:62:df:25:cb:d0:fd:f4:b6:65:4e:4d:01:be:3d:
         8e:26:39:c3:70:3a:f8:fa:87:dc:98:f5:d6:eb:fc:f3:1e:03:
         8d:89:b8:59:e5:1e:31:08:b0:2a:e0:4b:be:0e:01:f4:8d:8b:
         87:21:99:25:ba:35:fa:7e:cc:3c:19:d3:81:9d:19:90:a5:6c:
         b6:62:09:54:97:f0:2b:08:ef:0a:ec:92:e9:c3:79:06:7d:b0:
         5e:1c:e3:60:ec:b3:32:cc:cf:7d:da:71:c9:1b:79:c4:ab:95:
         fb:fb:42:d3:85:db:45:50:57:09:ae:02:6d:25:68:a0:6b:66:
         00:45:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:19:21 2025 by rpki-client