This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa
File:                     e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa (raw, json)
Hash identifier:          vfAjPZsmcqTSyriPMZX604Qv8EIpM5YFLXp9bPxJZEc=
Subject key identifier:   3E:57:98:BE:A8:35:B3:8B:01:ED:25:B6:77:37:BF:36:99:40:7D:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       257F12223FA2D8B7EC9FAED43C9126844B13DB7D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa
Signing time:             Wed 03 Dec 2025 01:20:52 +0000
ROA not before:           Wed 03 Dec 2025 01:20:52 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7f:12:22:3f:a2:d8:b7:ec:9f:ae:d4:3c:91:26:84:4b:13:db:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:20:52 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=b5eeaec44e0afe3b34a99825e26a688ba157199a74bb2897000e6f7131eac9f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fb:a7:62:54:b1:94:e8:7b:55:77:5a:f1:19:
                    2f:59:18:31:52:80:43:7d:92:43:29:1b:41:e6:6d:
                    01:be:b3:30:1d:7a:51:8b:7f:d6:8f:57:de:aa:20:
                    8e:82:38:8e:29:56:fe:e3:d1:a2:73:ab:2a:91:b6:
                    57:85:ca:e8:59:33:fb:a9:ee:ad:71:44:47:bf:39:
                    10:d3:48:c3:b8:e4:3a:46:0b:de:29:71:f9:e0:11:
                    79:02:fe:e1:76:9e:39:37:87:d8:01:f2:7b:81:f7:
                    d4:b2:f8:6f:6b:0e:f8:56:5f:8c:5a:80:d5:8c:55:
                    1e:d0:33:f5:0c:f6:be:68:d9:28:ce:7c:52:d5:10:
                    86:3d:a8:52:c3:f5:98:5f:b8:fe:a3:8f:df:8c:f1:
                    50:65:f0:62:18:04:07:e8:df:3b:52:83:2a:86:15:
                    56:15:78:fe:c4:3e:de:60:40:fb:c8:34:f6:39:eb:
                    69:4d:0d:45:80:41:8a:6d:1d:bd:7c:41:c0:33:c4:
                    0d:b8:05:5f:95:54:9b:b5:39:a9:75:8a:4c:06:f2:
                    3f:59:b6:e7:86:db:70:4a:0f:f4:e8:10:c2:96:39:
                    0e:92:13:c4:90:7f:ee:c7:71:11:c3:56:7e:3e:a5:
                    80:77:e7:3a:82:ed:24:6f:3d:e2:fe:ed:78:f2:d1:
                    27:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:57:98:BE:A8:35:B3:8B:01:ED:25:B6:77:37:BF:36:99:40:7D:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:7f:9e:2b:9c:df:22:60:5a:16:f3:fd:5e:18:b3:fb:2d:
         83:b3:46:fc:0f:04:c2:e6:e2:fa:6a:42:bf:db:38:c8:6f:b3:
         8e:19:33:32:0d:2c:6a:9a:a8:fd:7e:e5:f1:1b:a8:56:9c:da:
         98:7b:c0:b8:57:af:f7:98:29:d7:ec:cc:9c:dd:2e:7d:02:e8:
         d5:4c:ea:b2:b2:68:5f:0d:22:dc:58:11:fb:fb:1a:92:95:f9:
         5e:35:21:02:67:39:a0:07:65:96:c2:84:00:41:40:c1:49:05:
         90:bf:92:58:ea:01:de:d0:c0:37:30:51:70:69:a5:24:fc:e5:
         fb:ba:31:66:4f:41:8b:70:69:54:1c:18:f0:0a:96:a2:02:c7:
         aa:0f:87:00:13:68:c1:d1:e4:93:bd:b9:4e:11:e0:ad:94:44:
         be:6a:b7:84:d7:89:4b:ce:48:df:36:fe:54:26:eb:b2:be:59:
         00:3d:9e:66:f0:50:f9:24:30:19:52:1f:07:27:01:09:6d:ed:
         20:df:f0:dd:42:b2:e3:9e:53:79:35:b5:23:3f:ac:0b:01:a0:
         82:2b:8b:5c:80:e8:3b:82:01:5b:de:43:85:ca:ad:af:b2:16:
         c8:36:32:0a:ab:a4:67:81:9a:2e:05:4e:2a:7b:ac:bf:7a:cc:
         12:5f:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:12:29 2025 by rpki-client