This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eab7e435-828f-4c29-ab62-5948cfc7ba09.roa
File:                     eab7e435-828f-4c29-ab62-5948cfc7ba09.roa (raw, json)
Hash identifier:          UVVdqGCRU5qjsOHp49QkNq2ALmB8bixZY9wHZEmGkd0=
Subject key identifier:   9F:1A:FD:CD:7F:63:75:F4:1F:46:A3:FA:70:9A:19:07:6D:92:4C:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F5A452DC23173A899C3F71BEAEA151465990E1D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eab7e435-828f-4c29-ab62-5948cfc7ba09.roa
Signing time:             Wed 03 Dec 2025 01:01:01 +0000
ROA not before:           Wed 03 Dec 2025 01:01:01 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5a:45:2d:c2:31:73:a8:99:c3:f7:1b:ea:ea:15:14:65:99:0e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:01:01 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=b8605133abeb9f1beb9211737c47187ef6260201c08242de3d656ee3be9a56c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:c7:0d:2a:97:4e:9d:80:81:e7:bc:b5:44:
                    c5:42:25:2c:9f:2b:d6:6d:46:8c:17:0a:27:69:e1:
                    f8:71:13:52:26:1c:b1:c8:af:99:44:fe:a5:a6:28:
                    b0:7e:32:5a:ad:12:97:e9:dd:25:13:3c:3c:ca:22:
                    ee:33:05:0c:aa:04:e2:2f:7d:30:4d:11:72:64:76:
                    b2:e4:50:68:64:8d:c4:73:0f:d2:7d:66:16:77:d1:
                    31:70:f0:20:dc:bb:73:39:e3:2d:7d:91:a9:30:77:
                    4c:1d:6e:3b:02:9e:ac:85:06:73:4f:04:29:51:46:
                    ec:30:cd:9e:66:62:ae:07:4e:d0:96:d6:cc:1d:14:
                    ba:f3:ef:54:ea:c1:3a:5f:01:c3:8b:76:de:77:83:
                    0a:45:15:5b:34:ea:b5:1b:e3:69:20:04:5d:81:45:
                    16:47:ba:71:e4:87:17:20:11:c6:42:b5:60:85:ee:
                    ef:44:53:6c:f9:46:a6:95:cc:37:ea:60:5f:b3:ec:
                    32:3a:fd:c9:6c:86:97:2b:3b:8e:05:76:04:d9:da:
                    cd:8c:de:87:dc:11:f2:6d:fd:8a:90:a4:ad:08:ab:
                    74:96:53:59:31:23:8e:c8:99:dc:1c:34:a0:79:b2:
                    6c:19:7e:99:c5:56:af:5d:f5:1f:43:bd:4b:16:20:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1A:FD:CD:7F:63:75:F4:1F:46:A3:FA:70:9A:19:07:6D:92:4C:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eab7e435-828f-4c29-ab62-5948cfc7ba09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:b8:18:be:8c:b4:ac:6e:67:13:3e:05:fb:6d:d9:09:42:53:
         2c:39:77:79:b7:03:65:3d:f5:7b:6b:43:06:03:8b:50:36:7d:
         c2:42:0c:cb:fc:b3:66:de:bb:7b:3c:6f:2e:61:f3:6e:fe:d9:
         30:fb:f2:2d:ab:1e:21:89:df:25:bf:b9:16:89:bd:18:44:95:
         cb:33:de:e7:15:f5:c8:48:d9:b6:1e:77:87:b2:76:5b:de:b7:
         92:86:fd:54:8e:79:dc:5e:ba:84:58:de:ea:c4:34:35:a3:45:
         b4:c3:33:15:6c:72:ae:59:39:68:e0:e6:39:35:d9:49:4b:f5:
         84:6f:e4:7d:dd:d1:61:67:72:11:c4:9a:9f:8d:73:0a:05:5b:
         2e:70:a9:05:5e:b1:92:b2:0e:d1:5b:82:94:13:02:c8:fd:89:
         0f:51:14:4d:6b:bd:de:a6:27:1c:3c:47:1d:1c:3a:13:2a:7a:
         54:8a:13:e7:e2:28:ce:5e:5c:a6:fc:90:e3:9b:37:67:49:a8:
         d9:7d:ed:6f:45:99:4b:4b:b3:27:da:61:7b:af:aa:3e:be:60:
         66:2c:c6:4d:67:e4:47:2f:8d:34:e7:64:df:43:13:a2:a0:c1:
         62:b5:50:70:13:08:b8:4c:ae:d5:8e:61:d1:5b:98:b3:2b:76:
         e3:fc:da:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:05:35 2025 by rpki-client