This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa
File:                     c53a0576-1e08-4fba-a734-2cef153c43cb.roa (raw, json)
Hash identifier:          7HH1Go2xyqdv63/cpsUCeEB4NOgXGxEO3xKIGZuiLiY=
Subject key identifier:   52:9A:40:C5:E9:EC:1A:D0:71:A1:51:5F:51:F9:76:CF:4C:20:2D:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CF160AC7B23B081972DF6BF291A82943721AD2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa
Signing time:             Thu 20 Nov 2025 00:31:29 +0000
ROA not before:           Thu 20 Nov 2025 00:31:29 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        206.133.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f1:60:ac:7b:23:b0:81:97:2d:f6:bf:29:1a:82:94:37:21:ad:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:31:29 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=35187563211667db85a17dd7d9c9f6d22a7dc1b99d7b181a757747252dc37b27, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:0f:bc:4a:ce:96:86:61:07:98:35:05:71:
                    6e:b7:d8:fb:9c:a6:a7:a7:de:f8:5b:ae:ae:b0:9c:
                    91:75:3c:8c:44:af:42:6a:5c:97:bf:1d:44:0b:41:
                    87:a8:d2:1b:e3:46:22:76:92:64:81:fe:ff:fd:bb:
                    f9:ac:31:35:ed:45:b1:42:ec:73:72:cd:9f:65:12:
                    28:73:9e:a3:90:3c:5d:a2:79:84:67:80:27:da:fc:
                    d4:b7:54:97:92:da:72:72:30:70:c3:69:ab:94:fa:
                    57:2a:f6:89:5c:7b:b3:28:6b:74:00:6b:cd:44:7b:
                    48:79:85:ac:6e:cd:41:a5:67:04:a8:92:f1:3b:89:
                    f9:f8:e3:4c:d2:d1:da:41:b8:be:81:27:d9:b7:ad:
                    6e:ad:fc:bf:48:e4:e1:1b:cf:4e:90:e0:2e:ff:d7:
                    74:09:81:99:14:f9:7b:23:e6:f0:59:40:f8:3d:6d:
                    5e:8c:7b:1d:10:97:39:1e:ad:e0:0b:71:95:14:1b:
                    94:76:be:aa:ee:28:a1:db:6d:9d:f1:cd:f6:e0:cd:
                    b4:10:e5:27:a7:cb:5b:a6:a5:2c:18:9c:31:34:57:
                    78:51:82:2a:cc:4d:bb:0b:28:8f:d2:db:69:f9:80:
                    60:db:45:b0:00:94:46:bc:62:17:96:6f:eb:42:4a:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9A:40:C5:E9:EC:1A:D0:71:A1:51:5F:51:F9:76:CF:4C:20:2D:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:d7:db:c8:8c:1e:28:2a:e5:b3:ee:90:a2:29:ca:c7:23:7b:
         10:49:71:18:6f:37:70:f9:29:20:90:2a:95:8c:74:a7:fc:58:
         c1:b5:62:a4:d8:f4:89:37:8e:bb:1a:b2:d6:ec:5c:36:ef:3e:
         cb:89:58:de:c1:c7:c3:af:f3:13:e3:61:3a:9a:9c:b1:b6:6b:
         12:f5:9d:d1:9c:76:0c:f4:fb:cf:f0:cd:48:ab:cf:27:80:24:
         44:29:a5:ef:c4:d1:81:9b:a4:4e:ae:36:54:3c:5f:ae:5e:00:
         70:ea:45:54:20:08:e6:97:d5:a9:27:38:58:bf:38:fd:b4:89:
         ee:22:8e:57:ca:5f:59:58:ef:be:62:b0:1e:71:8d:6a:ef:33:
         e6:60:2e:2c:57:db:97:ff:b1:1b:a2:44:09:9c:3a:cd:3a:5b:
         ac:97:82:0f:6b:67:35:3f:f2:12:bf:7c:b7:6b:25:7a:a5:2c:
         24:d4:67:98:65:ba:b6:ad:2e:39:ff:9c:40:7a:2a:13:85:4d:
         db:5a:a1:50:e7:b9:14:80:ef:8f:3f:c7:0b:a7:2e:4b:45:ea:
         82:2c:f6:5b:2a:bb:45:ad:24:fd:d2:b8:95:5e:4c:73:98:c2:
         7e:21:09:1b:06:74:50:c3:08:b7:f3:74:c0:66:c9:25:09:58:
         c5:b6:94:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:57:51 2025 by rpki-client