This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2629315-55fc-4ccb-bd08-0655076226c5.roa
File:                     c2629315-55fc-4ccb-bd08-0655076226c5.roa (raw, json)
Hash identifier:          UyKKbtCYfOoEyoTMhGhnzKMLiMwNSgiFPvn4wUSYSNE=
Subject key identifier:   1D:A7:7C:6A:14:F4:1C:5C:32:83:CD:15:EB:92:74:22:56:B4:75:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68B7725036ABDA1DD312C26BFD0BC3AEB55F3CCB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2629315-55fc-4ccb-bd08-0655076226c5.roa
Signing time:             Sat 15 Nov 2025 00:30:12 +0000
ROA not before:           Sat 15 Nov 2025 00:30:12 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b7:72:50:36:ab:da:1d:d3:12:c2:6b:fd:0b:c3:ae:b5:5f:3c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:30:12 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=e5f508ef46497697612c67d274f20f381daec47dbc7f18f55a6526368f0f5dc0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:ee:04:cb:cf:e3:76:5e:de:83:b7:30:0d:
                    5a:37:5c:ed:7a:d6:37:ab:99:d6:3b:b4:12:db:bd:
                    97:85:16:82:44:18:1d:c7:44:de:de:86:b8:15:78:
                    9c:c2:94:92:32:62:55:1e:a5:30:66:45:0e:da:59:
                    10:2d:53:0a:1c:31:ec:64:f2:36:9f:20:69:74:75:
                    9a:32:0f:a8:cc:02:e2:d2:16:ff:2b:f7:85:af:43:
                    f0:1c:a7:7b:05:d1:bd:f3:cd:57:0a:1c:0e:cc:f1:
                    6b:e7:3c:d4:1b:0b:16:6f:81:fd:bf:86:fa:b7:6b:
                    5f:ae:20:ee:6a:2f:48:c6:a1:0e:1f:bb:e8:df:6f:
                    68:63:a7:eb:a0:83:be:75:6c:b7:0f:6e:28:5f:20:
                    a2:9d:6c:c0:7e:05:72:d5:04:0b:89:dc:09:29:28:
                    db:2a:33:1c:87:13:e7:75:f1:42:62:74:c7:39:34:
                    a0:4f:c5:de:6f:3b:23:c0:c8:ff:5f:dc:e9:2e:4d:
                    da:56:ec:99:1d:ca:da:ef:4f:fe:94:b6:c3:5e:95:
                    5f:37:28:e9:7f:45:64:4c:79:f1:65:d2:d8:1c:d2:
                    fe:56:77:9d:da:4e:c8:3a:57:f2:69:d2:7c:63:37:
                    65:4c:42:dd:06:1a:5c:b7:66:5d:91:fa:ea:1b:58:
                    97:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A7:7C:6A:14:F4:1C:5C:32:83:CD:15:EB:92:74:22:56:B4:75:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2629315-55fc-4ccb-bd08-0655076226c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:fa:2b:24:a3:e2:fd:19:b5:6e:06:cb:cd:93:da:46:dc:c4:
         0c:f2:56:fb:a3:0d:e3:d5:90:49:11:db:76:56:c9:e7:0c:fb:
         08:46:90:e1:ad:34:e4:6b:43:d5:93:74:ff:c9:cb:40:ca:d9:
         82:79:7f:ec:42:af:25:d2:f2:b1:1e:4b:b6:41:0e:9d:7d:47:
         93:aa:a1:04:5b:0c:75:48:a4:aa:a6:42:4f:33:0d:4f:e8:a2:
         2b:1f:5e:7f:d3:4b:76:e4:ca:2a:c0:7d:01:ca:d7:5c:45:3f:
         15:cc:47:92:e3:88:e5:df:dc:c6:ea:82:b3:77:55:82:b2:00:
         8c:98:53:8c:78:02:49:47:4f:40:75:47:68:56:2a:31:eb:7c:
         ef:69:2a:5b:a3:f4:51:a6:5e:d2:22:a7:dd:e4:bd:53:7c:b1:
         2d:e4:b5:44:4b:b8:c5:5e:20:11:e6:d5:42:2d:2c:61:6b:4f:
         f3:26:b0:3b:ef:43:54:45:2e:02:94:5c:61:01:f9:63:22:68:
         a7:46:c2:e4:bd:17:b3:23:f2:ac:3d:84:9c:d4:61:a9:31:18:
         f8:3e:9e:9c:bc:2c:c5:7a:c5:21:12:8b:1f:b8:97:94:77:01:
         ba:f1:d5:f3:25:b7:d1:bc:ab:7e:32:96:a3:17:cb:32:2a:40:
         43:40:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:00:26 2025 by rpki-client