This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc6123f5-db07-4400-aad2-55f564dc6bf1.roa
File:                     dc6123f5-db07-4400-aad2-55f564dc6bf1.roa (raw, json)
Hash identifier:          9exXAEi552ugNp+XmEWrPdK/+IHy8Kttf8lfmYy+zPE=
Subject key identifier:   0D:D1:42:93:01:7D:2D:C0:90:DD:E8:FE:8D:EF:86:8E:53:8D:BB:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       72230AEEB3D1C2F51EE521FA6A0ADF305B5416DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc6123f5-db07-4400-aad2-55f564dc6bf1.roa
Signing time:             Sat 06 Dec 2025 01:40:48 +0000
ROA not before:           Sat 06 Dec 2025 01:40:48 +0000
ROA not after:            Fri 06 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        149.128.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:23:0a:ee:b3:d1:c2:f5:1e:e5:21:fa:6a:0a:df:30:5b:54:16:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  6 01:40:48 2025 GMT
            Not After : Mar  6 23:59:59 2026 GMT
        Subject: serialNumber=eb913d304b9bfe2e7b36ad63a2688ea26243f5dcc0ce1041ee82035ec353f4bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:80:87:de:59:1e:b5:fa:29:20:88:d9:69:50:
                    e4:ae:c4:45:ba:56:05:cb:6c:0c:32:c8:0c:c8:25:
                    4e:a6:33:23:46:dd:8d:10:d6:12:bd:3d:f7:3a:36:
                    73:d9:da:c0:43:42:ef:87:b5:af:b2:f0:e6:2b:f2:
                    b8:97:f2:2f:a1:05:7f:13:a5:1a:6f:34:e7:b0:84:
                    5a:b9:19:d4:35:a0:3b:76:f5:2b:a4:80:bc:b6:dc:
                    05:e8:69:43:fc:fd:6e:ca:fb:99:52:f8:17:82:4e:
                    87:d1:f4:ec:c6:4d:5d:db:92:ca:a1:cc:48:b9:b6:
                    83:5c:7c:4c:f4:f4:49:01:df:50:64:66:a0:a4:2a:
                    c0:21:d6:f6:54:f5:a0:f4:bd:05:95:46:66:2c:21:
                    a0:d5:47:25:bf:40:ab:9d:85:02:ae:b0:2d:1a:47:
                    ef:1b:a4:b9:96:cb:fb:0a:94:ff:c2:ed:27:7c:5a:
                    72:c2:43:d3:e6:5b:5e:f5:11:3d:22:fd:e5:56:54:
                    2f:a3:82:b3:50:c6:4a:b9:6e:6f:fa:1c:8d:c7:43:
                    b6:ed:cc:8c:14:ee:1d:22:f6:0c:f6:87:93:96:65:
                    6a:e0:11:09:be:eb:bb:cf:dc:3e:1a:ea:90:ca:30:
                    95:bd:8e:64:6d:eb:91:64:a5:a6:a9:ad:fb:68:5f:
                    a1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D1:42:93:01:7D:2D:C0:90:DD:E8:FE:8D:EF:86:8E:53:8D:BB:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc6123f5-db07-4400-aad2-55f564dc6bf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.128.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7f:bc:d0:08:94:08:8c:b8:2e:83:1a:fc:d8:3e:f2:bc:b6:57:
         eb:df:c8:71:10:23:5f:e6:82:7c:35:a1:e6:b5:18:75:cb:a3:
         4f:58:9e:d7:6b:95:a9:0a:5a:94:af:69:2b:67:3f:ca:ad:a6:
         05:a1:65:30:01:8d:89:85:54:3b:19:92:5e:4b:c8:51:94:19:
         67:93:01:b9:a6:46:6c:5f:84:89:e5:f6:9c:41:3a:1c:c5:b5:
         27:a0:4e:d1:fd:d0:d2:3a:a4:9f:1c:1f:37:6f:df:bf:9f:a4:
         09:89:2b:e3:89:72:3e:d2:27:0a:45:02:74:56:38:fe:6d:d8:
         34:6d:3e:af:07:3c:b1:ba:3d:53:b3:6a:41:f7:52:e4:3d:a1:
         bf:b5:5d:16:d6:4a:f0:3a:9a:7e:f4:cd:0e:e5:59:26:16:9e:
         70:d6:0a:46:82:4e:6e:d5:a6:05:ab:22:4c:9d:1b:74:e1:07:
         80:ed:7c:4e:63:aa:21:d1:7c:ed:a1:d1:85:55:22:85:f3:4a:
         f7:c3:dd:83:38:e2:a5:69:8e:bd:5a:60:4b:ea:75:fe:f2:2d:
         4a:09:f1:d9:d4:b0:96:70:d8:5b:16:75:62:84:24:2b:2b:69:
         2d:fc:84:77:8c:10:a5:48:41:56:08:32:eb:4e:bd:6d:f2:fc:
         ea:28:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:27:15 2025 by rpki-client