This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa
File:                     dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa (raw, json)
Hash identifier:          DP8fpCKxxEk4owqbdxwkm1/4qekdSdLoOJlCmkrNRis=
Subject key identifier:   3E:B3:51:F9:89:D2:90:00:9C:24:EA:E0:69:73:2A:69:45:77:EE:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DB67520E20A138AAF0A8F53E0651A7EDB00DB2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa
Signing time:             Sat 22 Nov 2025 00:00:49 +0000
ROA not before:           Sat 22 Nov 2025 00:00:49 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.83.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b6:75:20:e2:0a:13:8a:af:0a:8f:53:e0:65:1a:7e:db:00:db:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:49 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=6fa35429437ff590505c20ba0f41c568ef8f08a8ece40b945681d45358b672a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:71:80:cb:e6:41:7f:1d:9e:4b:ba:dd:1a:
                    82:2d:a3:49:df:87:7b:73:47:5c:13:18:f2:7f:e1:
                    08:20:26:ba:48:82:65:eb:50:9d:84:e6:c5:f1:d5:
                    87:9c:48:3c:bb:0b:ea:d0:2d:79:9b:03:4b:96:bc:
                    68:1d:8b:df:56:e8:4e:88:36:90:af:72:57:74:16:
                    b6:38:12:cb:62:87:88:15:c2:ce:58:60:45:c3:8d:
                    a1:d0:0e:d4:50:3f:ae:66:a8:9e:9b:b0:70:6d:03:
                    ea:77:27:da:3c:1a:b6:35:c1:43:31:85:07:d2:f9:
                    63:f6:4c:9d:11:00:77:b5:65:24:d1:17:01:5e:63:
                    2e:96:c4:82:19:ac:4f:cd:00:93:3f:a9:6d:16:dd:
                    6d:7f:2d:84:49:e4:ec:84:80:04:bf:0e:09:1e:4a:
                    ec:ed:e4:07:34:3f:6c:e9:9d:47:a1:6d:22:42:97:
                    dc:92:66:a4:ce:b8:7d:36:e9:d0:3d:e3:0c:89:dc:
                    4f:9d:f3:06:4b:8c:34:a3:49:6c:a8:64:ed:60:22:
                    52:bc:bf:fb:70:0e:ab:2d:ef:7b:e9:28:c0:a7:0a:
                    7d:86:09:2f:38:91:d9:53:ff:51:c1:f9:91:e8:87:
                    ce:f5:16:7d:e0:32:f2:45:21:2b:3c:fc:32:2d:c8:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B3:51:F9:89:D2:90:00:9C:24:EA:E0:69:73:2A:69:45:77:EE:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:3f:22:44:7e:36:62:01:78:81:6b:0b:b5:c7:1e:1a:19:ed:
         63:1b:50:14:9b:9b:9c:c1:d5:b0:3a:82:d3:c6:7a:7d:f8:7d:
         44:7e:54:96:e1:16:d6:c5:8b:e9:32:22:b8:9b:64:5f:2c:e6:
         be:95:44:cf:ce:1e:ac:c1:ab:4d:fc:b6:81:b2:9d:74:82:11:
         62:8f:3b:10:31:e8:fc:8b:08:ef:11:1a:64:50:b8:4f:fd:89:
         be:96:d3:f2:a4:e9:a0:21:bb:94:82:98:5b:88:3a:21:97:d4:
         7f:6c:05:3e:35:55:2d:23:3f:ce:a6:e3:ee:91:5a:63:45:ce:
         0d:bc:8d:cf:4a:6f:09:5d:8a:44:6f:a9:98:5b:5f:94:21:99:
         fd:e5:94:e4:4f:cb:92:d6:85:a7:d9:06:f8:a1:07:ba:9c:a9:
         dd:c9:02:a9:be:a0:ac:e8:7e:7e:1c:86:0c:c0:eb:f9:2e:76:
         18:c5:32:7d:85:fe:ce:bb:67:78:cc:4c:02:48:b2:09:c1:c5:
         2f:10:22:7c:4b:bc:1f:41:63:53:29:3f:e1:a9:15:c9:e7:33:
         30:6f:da:4d:3d:4e:78:51:85:f0:1c:79:76:46:7c:31:ba:2e:
         f5:c9:1a:dc:27:2e:ba:3e:1d:74:aa:11:50:5c:db:f6:69:4a:
         7f:9b:46:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:22:40 2025 by rpki-client