This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e00517b8-99d8-4957-a0d5-9380af850fc2.roa
File:                     e00517b8-99d8-4957-a0d5-9380af850fc2.roa (raw, json)
Hash identifier:          Lp6LaJNjKKW6WnYiNO2FWF0qxkOjWWNgjs0/iQhGyLA=
Subject key identifier:   36:CF:BC:BF:1A:D0:B0:25:DD:EE:72:2C:41:1A:1A:D2:0C:45:A7:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20245FB36F221AF75B3B965A38E1E49560FBBAA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e00517b8-99d8-4957-a0d5-9380af850fc2.roa
Signing time:             Thu 27 Nov 2025 00:31:00 +0000
ROA not before:           Thu 27 Nov 2025 00:31:00 +0000
ROA not after:            Wed 25 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        66.7.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:24:5f:b3:6f:22:1a:f7:5b:3b:96:5a:38:e1:e4:95:60:fb:ba:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 27 00:31:00 2025 GMT
            Not After : Feb 25 23:59:59 2026 GMT
        Subject: serialNumber=0721737f94b9f065659688071ffab557b4e5a8a33540085d837735ae39864fb6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:84:ce:b2:ff:c6:20:e0:86:30:56:3e:38:
                    80:18:c3:b8:f5:18:6c:ab:be:7f:6d:b9:4d:30:99:
                    5c:3d:ef:5c:d4:d9:78:cb:3b:24:31:ac:34:eb:c2:
                    70:32:01:bf:97:af:01:c9:a6:c5:b5:80:8e:0e:e4:
                    0c:c8:2e:2b:84:05:f5:84:69:ae:d3:ff:dc:e7:9a:
                    15:19:b5:a2:dc:bd:82:bb:d6:49:eb:26:56:3f:f5:
                    bb:ec:6c:2b:76:9d:3b:66:93:c1:5e:0f:cf:14:87:
                    ab:01:9e:d1:64:f1:ae:51:bc:47:ae:e5:ea:16:2f:
                    d5:c1:cd:5b:84:b0:6a:82:b0:20:68:ad:e1:ce:27:
                    23:2b:fd:9d:87:24:2b:da:fc:5c:e8:93:c5:6b:96:
                    0b:bc:e4:42:23:8c:e5:9e:8a:5b:88:9a:48:fa:f7:
                    3a:4f:17:fa:50:f0:a3:1c:ff:12:12:52:a8:0e:7f:
                    05:34:da:8b:08:34:3c:88:ee:60:52:8b:5a:0e:3b:
                    a0:08:2a:84:d4:3f:7b:93:03:46:ca:a8:32:07:75:
                    25:70:f1:74:d8:e4:89:5e:16:4d:b7:68:48:a8:6f:
                    94:5e:a3:c1:60:af:e8:4b:38:71:23:78:33:c2:45:
                    79:dc:00:6d:42:5f:1d:b2:5c:30:ef:69:03:97:a9:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:BC:BF:1A:D0:B0:25:DD:EE:72:2C:41:1A:1A:D2:0C:45:A7:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e00517b8-99d8-4957-a0d5-9380af850fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.7.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:42:0d:b5:80:89:96:15:bf:b0:40:cc:21:28:d4:32:4e:92:
         10:f1:1d:6e:42:5c:50:fb:46:7d:81:db:49:2f:bc:61:4c:e9:
         74:a7:d1:39:39:ae:1a:78:7c:8d:c4:26:93:36:30:09:87:30:
         c4:3c:34:c8:18:3b:91:c9:61:96:64:c9:90:f7:23:8f:cf:a6:
         4d:28:e8:bc:e6:1e:2f:8c:8b:f6:60:3e:e2:93:6e:05:5a:ad:
         2a:5b:c1:56:45:fe:d6:87:73:b5:c6:f3:d9:c9:de:df:9f:9e:
         3b:b5:6c:72:83:92:93:d0:4b:70:ff:7e:c3:02:06:fa:6b:7c:
         99:03:aa:2b:3b:33:f2:c8:68:a3:5d:56:73:83:c4:fd:ad:c2:
         d5:53:b7:76:ec:5f:d0:49:2d:07:b7:d0:d4:cf:d5:a3:2a:f3:
         3a:6e:a8:ca:f0:be:39:df:df:fc:d3:20:ac:18:8f:63:40:29:
         4e:7b:82:dc:07:af:36:ed:f3:72:30:a7:72:e7:22:07:b6:47:
         79:df:42:91:9f:6a:9c:c6:40:57:29:c6:40:ca:65:39:a9:2c:
         4e:9f:85:66:3d:06:23:8b:d4:b8:ba:76:bf:9c:8e:49:7e:ca:
         48:22:f8:55:4f:e1:66:64:b0:aa:72:f8:4f:53:17:84:88:60:
         3e:85:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:10 2025 by rpki-client