This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ece882-658c-4358-bbe1-874d6cd93cfb.roa
File:                     c7ece882-658c-4358-bbe1-874d6cd93cfb.roa (raw, json)
Hash identifier:          8Of6Cn2JnwSGMaOeX1ebKnvJxezVK3MEBnPGF/iFNuo=
Subject key identifier:   0B:7F:A4:92:21:86:AD:F9:0E:22:86:05:1C:A9:77:75:9E:03:D2:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F33F82AFB8A273B2359FD7907FF565A4324D11A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ece882-658c-4358-bbe1-874d6cd93cfb.roa
Signing time:             Thu 27 Nov 2025 00:20:52 +0000
ROA not before:           Thu 27 Nov 2025 00:20:52 +0000
ROA not after:            Wed 25 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.233.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:33:f8:2a:fb:8a:27:3b:23:59:fd:79:07:ff:56:5a:43:24:d1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 27 00:20:52 2025 GMT
            Not After : Feb 25 23:59:59 2026 GMT
        Subject: serialNumber=7c5ea1e29c369a9b3bd8b74e85d41a53c1f2fe9b35b240b661eccdc449798300, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:8a:bf:fa:66:83:f8:fa:48:da:04:ba:27:
                    16:21:05:b0:8a:6d:9f:4b:ef:42:ef:81:e4:39:d3:
                    bd:0a:7c:40:99:a5:ec:c8:95:a9:a5:22:cb:a8:2f:
                    ed:37:58:7d:cd:b6:62:2c:b7:3f:b0:05:2a:26:4c:
                    74:35:fa:6e:a4:b2:f8:25:e3:db:60:d5:69:52:39:
                    02:00:65:be:00:eb:f6:11:0e:24:64:89:3e:a4:7d:
                    2b:ee:35:97:65:70:2e:85:1f:8c:fd:c0:2e:72:8d:
                    f2:51:21:6f:3f:70:10:fb:15:15:dc:41:f5:52:b8:
                    5a:9b:34:c3:78:a1:e6:06:d0:e2:ee:c0:85:45:79:
                    ad:c6:4e:b2:2a:bf:28:62:4c:b5:1e:36:3f:4a:cb:
                    df:e9:97:e7:c6:69:13:48:0a:5f:9f:ce:06:89:b5:
                    68:50:1b:c2:28:e8:07:59:31:d2:8b:01:58:f5:4f:
                    86:92:35:af:45:32:95:70:63:e4:2b:f9:7a:ad:c2:
                    10:84:b5:29:26:f1:60:b0:59:ba:84:d1:91:b5:bb:
                    12:37:0c:49:91:19:eb:4d:91:72:db:c4:b6:13:a5:
                    6b:bf:4e:a1:70:e8:ea:7b:80:3d:d6:92:5a:a6:7f:
                    6f:b6:bf:f7:f0:6b:f8:e7:d4:75:30:f6:85:ab:89:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7F:A4:92:21:86:AD:F9:0E:22:86:05:1C:A9:77:75:9E:03:D2:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ece882-658c-4358-bbe1-874d6cd93cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d4:1e:76:7c:41:b0:21:90:e3:08:9b:68:2d:9f:65:3d:d8:a3:
         c6:7f:d1:6e:f6:64:c4:b6:4b:64:11:1e:48:92:5e:48:98:10:
         74:ca:35:39:3e:da:b8:18:ba:73:03:81:67:93:64:a0:d3:c1:
         1a:cd:56:a3:af:8d:89:de:8b:1a:60:80:b9:91:31:07:cf:d3:
         35:31:a6:a0:f6:3b:30:ef:ab:31:e4:d4:4f:a5:99:99:f6:35:
         ef:b6:43:ab:05:ab:69:eb:d1:14:59:43:af:cb:ec:e8:c5:e5:
         56:6c:40:a4:15:fd:d9:6a:72:05:1e:b7:0c:91:be:97:15:d7:
         f5:94:85:d4:1e:23:7e:68:82:21:a2:b5:08:e8:f3:f6:c0:11:
         66:fb:ad:a6:8a:20:7f:cd:94:5f:b4:2c:2b:7e:3a:b5:4a:79:
         22:3a:d6:de:9f:a8:39:92:1e:9b:bf:98:87:5e:a9:77:22:be:
         03:e0:b9:b7:c1:c0:9a:1b:49:17:5a:72:82:dd:c3:55:90:96:
         1e:9e:8d:70:f7:75:b5:1f:df:52:68:ec:16:24:c1:2e:87:3a:
         a3:e0:e4:56:4e:46:dd:40:11:d6:6d:9d:00:be:5c:26:4c:e2:
         20:23:67:b9:d9:f1:9c:56:08:85:4a:c7:00:fd:eb:e2:c1:b4:
         09:e7:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:59:13 2025 by rpki-client