This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbc8700e-e39c-46ed-b212-3e8897a5b36d.roa
File:                     dbc8700e-e39c-46ed-b212-3e8897a5b36d.roa (raw, json)
Hash identifier:          Hc9pZxq8XUT5PCv8rtdUGqLL20I8/ORw/uniPW8A448=
Subject key identifier:   8A:84:94:29:64:1D:75:95:7E:2A:22:FD:EC:99:EC:63:59:7F:54:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E12ACC14C0E28ABC3D78F682A8DDAF7BE5F6FF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbc8700e-e39c-46ed-b212-3e8897a5b36d.roa
Signing time:             Thu 20 Nov 2025 00:40:08 +0000
ROA not before:           Thu 20 Nov 2025 00:40:08 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        207.223.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:12:ac:c1:4c:0e:28:ab:c3:d7:8f:68:2a:8d:da:f7:be:5f:6f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:40:08 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=0f9705e445194f07586a9c7bbc2afee133ad34af8d48adce9fc07269f60eec0a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:b3:85:5e:9f:28:d9:a3:41:f5:32:b7:63:
                    a0:d4:4a:10:0d:d1:23:76:c1:f0:0c:cd:31:6d:64:
                    70:54:54:1e:f9:6f:7a:dd:dd:76:af:7d:c2:6a:6c:
                    7b:4d:74:45:72:76:39:b9:9c:a4:39:ad:6e:46:b4:
                    0a:9d:7d:aa:0e:50:29:2d:e8:aa:a8:ce:ee:04:97:
                    15:1c:db:54:7d:b4:2c:01:95:cb:5b:33:ec:9c:3b:
                    61:f9:c1:82:22:da:af:11:25:74:9f:be:aa:00:62:
                    25:83:06:e5:70:cf:0a:11:9d:bf:63:f7:af:41:11:
                    37:75:cf:36:d4:c6:2b:bc:35:1c:fc:a8:84:0c:55:
                    03:be:d0:cb:4f:b5:53:c5:fe:2e:6c:76:65:50:da:
                    b2:52:44:16:72:c7:c5:20:6a:44:6c:28:67:ab:01:
                    49:3d:f6:5d:ae:b5:11:66:73:22:d9:1c:19:97:2c:
                    d1:60:48:3c:06:ec:b3:df:bf:5d:06:91:a6:5f:f4:
                    18:bf:db:1c:86:59:1b:52:e4:38:54:52:51:75:39:
                    2b:4c:6d:50:3a:14:3a:8e:9e:2b:c4:da:6b:f9:55:
                    5e:6a:e7:d3:47:b2:0b:42:35:17:3d:5b:97:93:90:
                    5e:ab:2c:17:b0:39:b0:9e:65:c6:8a:12:1b:05:60:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:84:94:29:64:1D:75:95:7E:2A:22:FD:EC:99:EC:63:59:7F:54:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbc8700e-e39c-46ed-b212-3e8897a5b36d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.223.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:b1:8a:39:d5:5a:62:30:a9:89:5e:61:d5:d0:77:25:d1:
         da:6a:72:46:2d:68:95:de:cd:63:53:b7:85:b1:24:98:e3:f6:
         63:79:5c:ab:a9:d5:54:16:e8:d6:15:2d:d3:0b:6d:75:ca:8c:
         95:f1:2a:b7:c5:58:98:5b:8c:df:b3:47:cb:b3:0f:7f:bd:f0:
         96:4b:2e:7d:cf:08:40:28:c4:d0:38:ab:1d:73:a8:38:a2:f6:
         73:97:ae:27:e2:89:25:00:d0:48:7f:a2:18:2d:f5:de:24:4f:
         01:fc:2e:fb:0f:10:b0:7e:13:35:0a:a8:7d:f1:9d:1d:12:7b:
         82:64:69:90:0b:47:75:42:3f:ff:cb:8b:1c:48:85:c8:46:20:
         f1:7d:79:8f:81:a3:09:bd:3f:91:53:d1:1c:d8:62:69:67:32:
         28:1b:d6:83:f1:c4:30:35:f3:11:ee:56:ca:dd:80:71:7a:ea:
         77:3b:2a:78:70:38:17:7c:03:fd:eb:6d:0d:97:ec:35:2e:12:
         cd:20:85:08:22:6a:0a:a0:06:64:3d:d3:f2:ad:2b:8b:32:77:
         33:a6:7d:cc:01:cc:d0:5f:20:bc:66:5d:f1:99:42:59:e6:60:
         2d:01:3d:ec:2d:ff:c7:c3:7b:52:69:0f:7c:02:c3:b9:03:30:
         f1:07:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:58:58 2025 by rpki-client