This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa
File:                     c7e48273-d97f-45e2-9820-48c08d0db4f5.roa (raw, json)
Hash identifier:          R4jXMdZmbEI8NbtHlq4y8sumt2oaOFxzcFOGyBij8bA=
Subject key identifier:   37:A4:2F:B7:B7:44:D3:32:47:1E:45:EC:45:4C:AB:F0:DC:5B:0D:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6044D37C3B0D949D95582EE3840B0BF79947512E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa
Signing time:             Wed 26 Nov 2025 00:10:36 +0000
ROA not before:           Wed 26 Nov 2025 00:10:36 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:44:d3:7c:3b:0d:94:9d:95:58:2e:e3:84:0b:0b:f7:99:47:51:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:10:36 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=3f8000ace63082260833a787b043e2d6258933da7e6783e9753cb549ae5a1750, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:cf:9a:a4:5f:01:7d:eb:07:4c:f4:b3:84:
                    ae:00:23:83:11:e5:5c:42:a3:2b:a5:bc:7d:00:21:
                    ae:6f:13:13:34:0e:d1:2a:4c:bf:fc:80:4b:c9:3b:
                    da:ab:99:e7:05:36:77:7b:2d:e3:6b:59:b4:70:1e:
                    b1:69:19:db:35:b7:c6:b7:65:88:18:90:d4:80:35:
                    76:e0:e1:80:13:fa:49:15:12:da:3a:be:d5:45:e3:
                    88:e0:81:61:26:5a:90:4f:2b:e6:85:31:69:f8:4a:
                    fe:d7:be:c0:9f:26:04:27:8f:9f:f5:40:82:57:13:
                    9a:aa:02:c6:0a:9d:80:42:07:b0:9e:2e:1e:64:1f:
                    fa:e4:21:f4:9b:94:4b:38:1a:6b:98:a0:1e:3f:7e:
                    19:32:61:9c:10:70:f6:79:e4:5f:8a:a1:9b:11:81:
                    fd:d6:fb:4f:9c:2a:a0:d4:e9:a4:c5:83:4c:ff:4a:
                    2b:21:21:4e:2a:c5:60:8e:65:c2:38:1b:1c:b7:e6:
                    72:06:c4:b3:7a:8d:56:89:4e:8c:14:3f:75:1c:52:
                    ba:45:b2:b1:9f:f7:07:6d:2e:dc:44:31:55:d3:ce:
                    13:2f:b8:11:2c:ed:e3:10:6e:c5:6a:b4:a0:b9:93:
                    24:09:0f:4b:28:d8:db:9a:b3:57:dd:93:e3:36:fa:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A4:2F:B7:B7:44:D3:32:47:1E:45:EC:45:4C:AB:F0:DC:5B:0D:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8e:82:73:fa:7c:5f:e9:3d:d0:ae:3b:79:91:4a:34:55:9f:
         4e:28:0b:7d:ca:f3:1e:ae:44:0b:ef:d3:bc:26:16:e5:f7:c5:
         09:5f:9c:b7:ed:80:1e:22:31:5a:a6:86:50:8c:49:a4:e6:89:
         44:90:c3:6e:ce:d8:70:03:a9:a8:d4:26:0c:aa:b1:e9:8d:d2:
         60:9e:05:82:cc:6b:e6:d9:af:09:b8:2b:e1:bf:3d:16:62:ed:
         55:98:88:a0:ef:34:d7:e3:2e:bb:56:95:06:ca:ea:bb:aa:8e:
         76:1e:b7:24:49:85:47:1c:ef:de:93:ae:2f:0b:cc:80:05:cd:
         8b:76:16:82:13:a8:fe:a0:84:20:84:bf:0b:7d:61:60:8d:76:
         8e:08:69:d8:39:b5:08:95:1d:36:81:ab:75:29:89:d1:ae:34:
         f2:47:89:15:9b:75:fe:6b:14:d8:be:f5:83:5a:c4:29:67:83:
         65:0e:dc:ad:85:cf:9f:48:89:28:7a:dd:c5:57:7b:40:c5:57:
         5a:eb:6a:5b:2a:78:83:b6:7a:df:49:be:37:0e:88:73:b3:34:
         ce:ba:51:52:f7:cf:f1:e1:a8:7f:24:e4:0f:1a:04:af:7e:53:
         b6:d5:07:ce:a5:30:79:6a:a6:12:6d:97:dd:85:76:cd:1a:66:
         a6:11:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:09:41 2025 by rpki-client