This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9bed88e-ba7e-476a-9e34-f5b84e223702.roa
File:                     e9bed88e-ba7e-476a-9e34-f5b84e223702.roa (raw, json)
Hash identifier:          q/vnB+aRSnCYPlU5yy4ViJURyCcNUmpB6NeTLIsLh1c=
Subject key identifier:   38:17:9B:16:C2:50:1D:0E:38:AA:68:DF:D6:5E:5F:9D:64:09:54:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       583A682694D37BBEC1B96C21D5D5CF6F95C9669C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9bed88e-ba7e-476a-9e34-f5b84e223702.roa
Signing time:             Wed 03 Dec 2025 00:50:41 +0000
ROA not before:           Wed 03 Dec 2025 00:50:41 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3a:68:26:94:d3:7b:be:c1:b9:6c:21:d5:d5:cf:6f:95:c9:66:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 00:50:41 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=17ed81b0ab5388b899434a9fed310f3c2c58ef6d40186203011c0fbd44b02c4d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:11:96:42:ab:b3:5b:7b:9a:54:54:f8:a5:
                    da:8b:fc:23:5d:89:95:85:0b:23:f6:bf:62:72:d1:
                    06:b4:d4:98:f9:8b:dd:71:b8:92:a8:02:9c:9e:5f:
                    65:a9:67:a6:a1:f3:a7:4f:84:34:7a:17:01:2d:f2:
                    c7:6e:fb:23:ba:8f:4a:b0:08:fd:14:21:50:2a:e9:
                    59:49:de:c5:dc:14:c1:e3:61:aa:12:e1:ba:71:98:
                    38:bc:78:e9:a4:ab:ac:b5:0e:28:62:cd:b5:01:a6:
                    07:14:cf:33:ea:fc:82:6d:10:80:04:be:44:44:92:
                    63:d4:e1:b4:44:95:96:37:b3:12:32:fc:66:fe:a8:
                    e6:98:e4:b4:60:9a:3e:5a:24:ef:fe:4d:41:b4:75:
                    bc:d0:54:86:b2:e8:e9:e1:c5:ae:04:87:cd:f0:ec:
                    93:da:80:e8:55:bd:f1:b4:17:81:fc:6e:82:4a:91:
                    02:2c:87:84:b3:56:82:ea:6c:7a:04:a3:66:1d:8f:
                    6d:8a:1c:0a:7e:85:8f:aa:05:95:dd:81:92:cc:20:
                    4a:41:44:b1:58:71:8b:26:59:70:9a:d2:08:3a:4c:
                    97:e7:9a:65:83:16:35:06:96:d2:7b:fb:30:8a:8e:
                    34:bd:0c:8b:30:04:d9:9f:cf:c7:08:d4:36:e8:6c:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:9B:16:C2:50:1D:0E:38:AA:68:DF:D6:5E:5F:9D:64:09:54:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9bed88e-ba7e-476a-9e34-f5b84e223702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:e6:be:17:68:75:8b:c7:a0:f5:26:81:c7:4b:ae:82:14:d5:
         8a:05:d4:62:a9:9b:b4:75:84:11:98:88:96:6b:17:b3:67:4f:
         88:72:db:91:76:55:00:a0:da:29:a2:bc:bc:22:d0:8d:bb:0a:
         e2:d2:2a:69:ff:63:00:5f:59:7d:df:5f:e4:05:d0:07:d5:cf:
         73:24:bc:e4:6f:0d:94:47:95:7e:2e:9f:6b:54:16:57:ce:fc:
         b6:7a:1c:9b:88:4e:44:c4:97:54:eb:90:26:c9:74:bc:45:8d:
         df:cb:e6:7c:83:5d:22:43:31:e4:0c:15:ef:b8:e0:11:4b:be:
         4b:60:4a:e1:48:0d:7e:03:58:ab:0b:dc:82:1b:06:e8:3b:6a:
         b1:ce:50:9d:dc:05:dc:48:e4:c2:42:a3:6a:08:3c:e9:e7:da:
         5b:0d:d3:73:a6:6e:ba:8f:e5:64:fc:16:cf:77:cd:14:73:3f:
         0b:3c:da:42:f1:ac:0f:10:0f:35:86:b7:64:9e:3a:3d:63:3b:
         b0:0a:f9:b5:c3:5b:e4:34:b0:6e:92:d3:46:3f:10:21:cc:22:
         60:56:ad:36:a8:02:e7:fb:c9:6e:c5:53:96:bf:0d:ab:d2:af:
         be:0d:00:24:b3:2d:d1:56:4e:29:ee:f7:02:ff:d4:d1:bf:f2:
         12:42:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:01:01 2025 by rpki-client