This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cd4340-f8db-4c6e-a844-f4a2db0f0021.roa
File:                     d2cd4340-f8db-4c6e-a844-f4a2db0f0021.roa (raw, json)
Hash identifier:          Fdnz7VAzzOM3PDGrWGiLZuL4SIm27xr5K8yjL6SnNwU=
Subject key identifier:   A2:CC:32:95:FE:C5:FC:A3:86:CA:D6:83:13:AC:C3:C7:58:5F:EC:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0AA3ED8BC3D9A16EDF310663F74B8E1C5C3DF944
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cd4340-f8db-4c6e-a844-f4a2db0f0021.roa
Signing time:             Sun 30 Nov 2025 00:20:53 +0000
ROA not before:           Sun 30 Nov 2025 00:20:53 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        203.110.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a3:ed:8b:c3:d9:a1:6e:df:31:06:63:f7:4b:8e:1c:5c:3d:f9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:20:53 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=49a79bc48ef6a0745d3e6b581473928cf18030f00a49238afec46f2c07fe6b68, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:de:dd:76:02:e4:f7:09:a4:ce:3e:df:84:
                    17:be:b5:f1:2a:7a:79:f9:cc:95:46:b7:17:14:96:
                    77:8d:9c:ac:de:7e:16:5f:f3:e6:0d:5b:87:d2:53:
                    b5:a8:27:10:ae:d4:19:c9:e9:ba:a4:b9:c9:c2:3f:
                    3d:9c:5f:3d:16:f1:86:b5:f3:52:c5:b9:f9:f0:2b:
                    b3:6d:d7:db:9a:67:b2:f4:29:75:6a:de:5a:23:13:
                    5b:b1:7f:16:e2:15:b0:10:ba:e4:70:a9:80:15:fc:
                    03:8b:4b:0d:1d:96:d9:2f:2f:87:84:71:06:9b:00:
                    f2:31:97:6f:0b:38:12:28:45:1a:6b:8a:63:91:cf:
                    d6:5c:e3:71:65:e9:45:0b:a7:60:40:29:08:74:60:
                    22:d9:d2:a7:2e:c6:fa:a2:48:8e:5b:49:a5:e9:2a:
                    2e:df:ca:47:fb:be:39:fc:2e:72:d4:67:1d:c3:ae:
                    ba:81:f4:bf:26:e8:b1:c0:bd:7c:2a:f9:c9:e3:06:
                    df:c3:ba:0e:6c:c5:81:c7:49:fe:e6:db:e9:2b:ec:
                    d4:6d:e6:81:14:d1:a2:f2:90:2d:a1:e1:a5:93:9c:
                    03:4b:7f:a1:6e:24:aa:89:ff:b1:72:d8:96:4c:aa:
                    f5:65:75:3f:fc:5c:c7:7a:e2:1c:ae:15:9f:84:7d:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CC:32:95:FE:C5:FC:A3:86:CA:D6:83:13:AC:C3:C7:58:5F:EC:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cd4340-f8db-4c6e-a844-f4a2db0f0021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:95:92:83:96:0f:96:9a:4e:6b:c8:46:7f:d5:b9:6b:98:05:
         a7:48:91:51:e4:ca:fe:4f:c6:b5:8b:e0:e5:d4:bd:34:25:22:
         e1:96:e5:d9:cb:be:b7:67:29:d6:b6:4d:f2:69:02:2a:b3:72:
         d8:80:87:83:e6:1b:29:6c:a8:0c:35:e4:60:d1:a3:e0:0d:4f:
         db:37:ee:81:e9:c7:19:70:44:70:41:3e:0d:d2:65:32:39:09:
         fa:9e:b2:13:d4:23:d5:56:a6:f6:eb:d7:0a:4c:ee:5b:51:93:
         2c:10:8b:1f:73:50:53:6d:b1:1d:a1:9d:b4:05:2f:23:ee:3a:
         90:f6:70:3c:46:94:20:96:40:f0:a1:d9:3c:d8:56:df:97:7f:
         f1:35:f0:7d:1c:a9:24:ee:56:74:0c:71:8b:0f:19:22:fa:95:
         20:93:fc:10:1e:4b:36:20:a9:1f:ed:89:5b:3e:8d:5b:e5:33:
         ad:99:56:3b:10:79:1d:be:53:b1:5e:e4:d3:8e:89:ca:49:35:
         4e:e2:74:bc:79:2e:54:e8:e7:ba:e2:cf:7e:11:ea:d4:b2:08:
         1c:74:3f:b2:44:34:95:50:64:4f:35:c4:b7:b6:5b:e9:63:e0:
         fa:fe:15:99:7d:ec:de:72:52:85:95:c8:14:4f:75:7c:6d:80:
         4a:45:10:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:54:24 2025 by rpki-client