This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb621f3e-df31-40a8-b591-c6ac46201eb3.roa
File:                     eb621f3e-df31-40a8-b591-c6ac46201eb3.roa (raw, json)
Hash identifier:          vqzMSsL0Hx6+tgyPu6K3kfmOs5ROMCn/hpV4GqNGgs8=
Subject key identifier:   70:DE:5A:AD:CC:7F:2E:C9:77:0D:13:C5:E2:3A:A4:CE:16:C4:FB:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       454E7AD3B2D0FC16BACFACC273A3CA244AF326C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb621f3e-df31-40a8-b591-c6ac46201eb3.roa
Signing time:             Thu 20 Nov 2025 00:30:49 +0000
ROA not before:           Thu 20 Nov 2025 00:30:49 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.175.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4e:7a:d3:b2:d0:fc:16:ba:cf:ac:c2:73:a3:ca:24:4a:f3:26:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:30:49 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=1473b97b4648ecaef4629f6db79de676524ed7d4c15077aee8f3134e31e0f019, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:db:c4:6a:96:5a:a7:dd:1a:bc:9f:8c:71:
                    15:1a:80:99:41:f2:93:c2:ce:0a:e8:46:53:8f:64:
                    63:c5:ef:57:57:63:4c:93:76:10:a9:ef:2a:76:dd:
                    4e:9c:a1:c0:6b:35:6f:76:18:b5:2a:7b:d5:46:be:
                    b7:a4:03:02:07:71:dd:07:00:42:9b:70:4f:f4:58:
                    23:30:95:d1:b4:ee:07:d2:ae:81:4c:cc:86:9c:77:
                    ae:5c:8d:f9:14:07:b2:49:83:e1:36:3e:1a:f7:3c:
                    88:64:2c:80:f6:74:8e:f7:76:9c:46:7b:54:d8:05:
                    9c:de:ea:09:19:d7:c6:6f:d6:b9:5e:f7:60:d5:21:
                    c2:2a:56:84:9a:10:96:9b:2e:88:25:f6:f8:15:be:
                    25:fe:50:14:62:60:6f:15:26:58:4f:db:54:c5:3a:
                    66:71:18:61:88:20:ac:b1:18:b7:ba:a6:70:59:df:
                    a6:6c:34:cd:fe:77:18:be:da:54:ef:10:3f:21:c9:
                    38:46:d2:ef:07:71:51:3f:f5:eb:1d:f6:7b:5d:a2:
                    3e:96:1d:4a:eb:32:7f:53:ed:b3:a3:1f:c8:a6:39:
                    23:bb:4f:2c:d3:cb:9b:2e:26:28:ce:89:1f:2b:56:
                    56:95:53:00:40:10:7d:a6:e1:e8:ab:71:f8:31:93:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DE:5A:AD:CC:7F:2E:C9:77:0D:13:C5:E2:3A:A4:CE:16:C4:FB:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb621f3e-df31-40a8-b591-c6ac46201eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.175.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8b:3a:ae:95:96:4d:49:da:58:5b:b3:86:d6:7b:6b:87:ed:78:
         ab:bc:40:27:91:a1:2b:23:7c:f7:7d:ca:f9:c0:03:d6:a9:15:
         bc:a0:c7:e1:6a:f6:c8:cf:98:c5:09:0a:43:9c:e8:15:e9:02:
         88:53:5d:a1:fa:37:67:e9:6d:1c:60:de:8f:00:11:b5:66:78:
         85:f1:d4:38:1a:9c:de:0f:a3:09:3a:66:b2:73:df:6c:fb:45:
         41:c1:51:f3:9d:55:3c:26:4d:3a:79:35:d2:63:12:65:30:f1:
         96:a9:69:4f:c5:fb:c5:5c:94:a7:a7:b5:2d:d9:0f:1a:7b:87:
         e7:c4:cb:d3:c1:53:30:c8:4f:45:04:89:2f:e3:9e:cc:80:07:
         1d:ef:6d:37:b6:51:ec:8a:c5:1e:d7:e3:a1:23:a8:7f:2c:97:
         b9:b7:c2:36:20:f7:b1:1f:7a:31:77:d9:af:40:7c:79:ae:d0:
         2c:7d:04:7a:5c:3e:9b:65:6c:05:49:81:23:5a:63:0b:b4:aa:
         43:c2:7e:dd:c4:14:90:d4:eb:bb:ab:b7:c1:8d:5a:db:b8:65:
         f2:26:b1:4f:f6:6e:8c:6e:26:2a:e7:a5:c4:e8:d9:52:5a:de:
         ef:ee:0a:86:cc:c8:90:86:02:c9:fe:ea:c7:59:18:b7:d8:f2:
         bc:8c:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:56:01 2025 by rpki-client