This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2f6fc24-3c4a-4b3b-bdd4-89a187e6fe21.roa
File:                     d2f6fc24-3c4a-4b3b-bdd4-89a187e6fe21.roa (raw, json)
Hash identifier:          1gNseNSug6jKwEo08HG2K7jY52m/+ZKfwS6r5TosynA=
Subject key identifier:   15:E7:91:A5:D6:45:59:F4:35:39:8A:80:1A:4A:65:52:EC:D4:E6:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5AA9AB1558661CB5DE768193074673480B9D9199
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2f6fc24-3c4a-4b3b-bdd4-89a187e6fe21.roa
Signing time:             Wed 03 Dec 2025 01:31:25 +0000
ROA not before:           Wed 03 Dec 2025 01:31:25 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a9:ab:15:58:66:1c:b5:de:76:81:93:07:46:73:48:0b:9d:91:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:31:25 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=d7ac921613aa984d5c00d76d570871e697c9ff05bdd16595ec4171871072a0f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:08:f2:d5:66:eb:03:f1:5d:1f:27:c9:90:48:
                    f3:26:28:f3:ea:fd:ab:4e:a7:32:2a:14:97:cf:4d:
                    4f:ef:d6:29:32:35:fa:bd:8f:3c:57:98:af:1b:fa:
                    81:35:4b:e5:34:b0:23:f7:99:43:54:98:d8:da:5c:
                    35:b9:2b:7a:cc:27:c0:80:98:33:53:13:07:aa:ac:
                    0a:11:34:c2:53:91:12:88:fe:78:40:83:aa:0e:61:
                    33:16:ac:9b:88:94:04:c7:e2:4c:5a:74:ba:be:92:
                    2b:0a:37:6b:49:89:c7:60:df:25:5d:66:17:86:7b:
                    1f:8b:cc:d5:86:d3:0f:c3:e6:e4:7f:9a:8d:b7:16:
                    7f:fb:70:9a:fb:b0:9f:08:a9:78:7b:3a:d9:c7:2c:
                    bc:eb:1f:24:d2:12:dc:c6:be:96:e7:6c:6c:13:85:
                    47:fc:5a:81:2b:70:81:fa:50:17:4a:b8:4f:14:de:
                    43:71:94:8c:31:59:5d:12:7e:53:e0:d7:e2:66:01:
                    62:8e:75:27:7e:1e:dd:c9:49:ba:bb:b5:53:13:b8:
                    d2:a8:2d:af:f0:6f:38:56:67:94:73:63:4f:e1:0a:
                    fd:4d:84:9c:11:84:54:d6:d9:5c:2b:30:72:a1:42:
                    c1:b0:71:2d:df:eb:a1:b6:1f:dc:2f:5f:cf:da:59:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E7:91:A5:D6:45:59:F4:35:39:8A:80:1A:4A:65:52:EC:D4:E6:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2f6fc24-3c4a-4b3b-bdd4-89a187e6fe21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:11:55:6b:3e:d9:43:53:19:fd:c2:d0:7c:2d:47:4a:bd:34:
         f1:00:1d:cb:c8:ea:90:21:0d:29:f7:1d:9f:2d:1b:b8:e8:88:
         e8:41:91:8a:33:a9:c7:e7:53:a0:3b:ac:e3:7f:44:ae:20:f9:
         ab:47:38:0b:05:4e:a0:cf:9e:9b:7e:cd:9c:64:f0:c7:3c:ff:
         62:23:af:df:6f:16:5a:43:64:7b:aa:9e:f1:1d:6b:6e:ae:86:
         07:eb:54:f7:d7:f4:06:92:7b:d0:22:f0:b1:40:6e:df:e6:ca:
         0f:25:b4:d5:c7:1e:08:53:fe:95:4b:11:a9:02:7f:9b:f3:00:
         6f:3f:c2:53:fd:07:59:e2:f7:10:6a:61:02:55:33:1c:50:ef:
         6a:2f:31:6f:07:3e:12:58:5e:b8:23:3d:a3:72:af:5a:4b:f6:
         ed:9e:67:51:6d:d5:3e:d5:fa:bb:e8:a8:bd:0a:20:d4:5b:0e:
         5f:76:09:47:56:b8:4c:23:fe:c5:d4:f2:53:54:04:2f:81:ba:
         78:2b:e6:24:0c:24:27:b1:7c:d7:b4:f3:50:61:64:c4:a5:6b:
         19:58:b9:64:ad:5d:c0:e7:6f:fe:a7:f1:a8:79:c5:41:fa:5f:
         c2:03:f9:80:01:2f:a0:86:22:d0:e8:cd:6c:3f:e1:e3:6f:16:
         e4:d8:21:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:23:48 2025 by rpki-client