This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d624a675-d68c-42f8-90ee-c0a2313d8e05.roa
File:                     d624a675-d68c-42f8-90ee-c0a2313d8e05.roa (raw, json)
Hash identifier:          JMnyScFpeTmRQYs0xLfZJSC2N7+tgE6fJOdOuSGe7m4=
Subject key identifier:   22:2C:78:C4:46:9B:BE:58:5F:D1:15:53:7E:D0:79:48:E0:24:06:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70267A5F068E0CA7B98659076047EDBB3D0197FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d624a675-d68c-42f8-90ee-c0a2313d8e05.roa
Signing time:             Sun 30 Nov 2025 00:20:35 +0000
ROA not before:           Sun 30 Nov 2025 00:20:35 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.33.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:26:7a:5f:06:8e:0c:a7:b9:86:59:07:60:47:ed:bb:3d:01:97:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:20:35 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=892ee799f74539afb5ea5a907c6b1e721aa0da89e415cc7b2ff0f6c21be00858, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:c4:9b:3c:d7:fc:a4:93:32:03:4a:7a:80:
                    41:fe:11:1f:47:40:aa:3b:0d:64:b8:c5:97:2e:63:
                    72:37:58:97:71:c5:53:f5:7f:5a:83:71:b3:2b:8d:
                    9a:c1:99:03:a6:c1:45:69:96:69:b9:ef:9a:51:11:
                    de:d3:cb:61:79:06:e0:89:be:53:c5:70:20:85:cc:
                    6a:de:fa:e9:cf:41:91:e3:33:c3:d3:1e:dc:57:95:
                    17:0d:c5:e5:a5:3e:21:79:2b:a6:1c:6a:2c:61:f2:
                    2c:88:b7:1b:75:9a:90:a6:46:af:a6:5a:e1:93:74:
                    e1:dc:c9:b0:8a:f5:c6:9a:7b:44:9b:1a:40:c0:d5:
                    e3:53:7e:7d:ea:18:01:6c:e8:b3:1e:0f:76:13:99:
                    2e:57:5a:51:d9:4a:09:a6:c6:e8:67:42:fc:1c:54:
                    02:07:65:10:c0:18:a3:49:33:9d:2c:6f:45:58:d4:
                    23:6c:94:30:ea:88:f4:dd:0a:02:2b:0f:b4:cd:a4:
                    f4:57:4d:b5:a8:c4:6a:08:16:55:f4:cf:6c:0d:b3:
                    7c:61:6c:57:52:d0:a0:d6:81:dc:e8:88:98:47:ba:
                    67:79:f7:b8:01:0a:72:6e:5c:4c:64:a1:14:da:f2:
                    e0:ce:d6:e2:12:e8:ae:e2:39:84:36:ce:5e:51:3f:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2C:78:C4:46:9B:BE:58:5F:D1:15:53:7E:D0:79:48:E0:24:06:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d624a675-d68c-42f8-90ee-c0a2313d8e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.33.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:e6:bc:af:25:97:f3:f9:8b:c7:a3:37:9a:89:f4:e2:19:a5:
         84:6d:82:06:96:7f:86:87:63:79:c0:0d:1e:52:05:ff:c9:11:
         e2:34:07:dd:86:00:c5:a2:16:37:63:3e:31:8c:41:3c:b7:95:
         77:25:8f:3d:31:76:ef:ba:44:2f:6c:a8:9c:06:d8:05:5c:d7:
         9a:c3:80:b5:48:de:a0:66:91:1d:c2:fd:16:78:77:c3:83:e9:
         0c:fe:a4:cf:ec:5d:3c:8d:1d:28:e5:42:60:43:9d:ab:9e:8d:
         9f:4b:12:3b:39:6c:5c:c4:b2:2d:2b:d1:be:07:79:78:9d:03:
         10:49:8c:8b:68:07:a0:c6:64:90:1a:01:3f:d7:ce:f9:26:3d:
         3e:f6:75:8f:3c:cc:f8:3d:f8:97:7c:f7:60:e8:29:6d:7a:d6:
         42:b3:fa:27:c8:86:bd:b2:e5:92:12:3b:6d:ee:f9:03:d1:45:
         0e:5b:6c:ff:be:d8:d3:e8:41:f3:ba:dd:29:dd:c8:d8:91:3e:
         f5:f9:7b:34:a2:94:97:0b:41:7d:ee:89:b2:43:26:b3:e4:0f:
         cb:e5:7d:f5:09:9e:89:1e:58:2e:33:69:34:f8:63:6e:37:df:
         3e:c0:e6:69:ca:c4:34:4e:1f:53:fe:a5:72:bb:d7:44:b6:42:
         cd:22:e5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:58:15 2025 by rpki-client