This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef392e95-5697-4675-a401-25d090055bed.roa
File:                     ef392e95-5697-4675-a401-25d090055bed.roa (raw, json)
Hash identifier:          Nsu+J9MWDSENRxXSZ6oxxQNsjaSgyoh+sFhHzapwgkY=
Subject key identifier:   F2:54:C2:45:94:67:52:8F:46:36:7E:E0:C5:F3:C1:70:E0:5E:CC:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D9055F9E98A0528BA55C8319AD279EB1176B50A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef392e95-5697-4675-a401-25d090055bed.roa
Signing time:             Sun 30 Nov 2025 00:10:06 +0000
ROA not before:           Sun 30 Nov 2025 00:10:06 +0000
ROA not after:            Sat 28 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.87.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:90:55:f9:e9:8a:05:28:ba:55:c8:31:9a:d2:79:eb:11:76:b5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 30 00:10:06 2025 GMT
            Not After : Feb 28 23:59:59 2026 GMT
        Subject: serialNumber=59f6cf6da0359590e9c83306f9c68eb0aade20199e1e8eddded704a0c4894a52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:84:11:be:56:4d:72:ba:53:41:0c:dd:a5:
                    ac:37:48:29:fb:0f:63:3b:1d:aa:b1:f7:1c:6e:43:
                    ef:69:33:af:0f:8e:ae:3d:e8:90:54:65:3b:f9:4e:
                    f6:c3:8a:26:b9:5f:14:11:d9:cc:f4:a0:8d:28:27:
                    96:95:1a:fe:e0:a2:50:70:4f:1b:4a:f2:f4:65:55:
                    43:cc:fa:b0:64:97:18:91:bc:9b:84:79:e1:98:5f:
                    e4:03:56:31:48:45:7d:72:af:17:b7:c3:8f:af:48:
                    6f:dd:3c:0b:e7:2f:87:ce:0e:e4:bd:f7:4a:fe:b1:
                    8b:98:fd:84:4f:05:51:07:9d:cc:a1:3c:29:74:49:
                    6b:f7:82:30:a8:b6:e6:0d:09:ff:a3:3f:8d:4d:12:
                    70:e0:a6:d5:ea:80:db:e0:1b:7a:ef:2f:d3:55:75:
                    02:7a:af:d9:3c:e5:36:c8:31:7f:c5:7e:97:39:9f:
                    1a:e0:a4:66:26:72:77:58:ca:bc:53:45:aa:9c:59:
                    62:a9:b4:b4:a0:d4:e3:c4:d0:20:6d:1e:b0:f0:1f:
                    90:54:56:ff:7e:c9:a7:b8:45:a0:bc:9d:d5:54:b3:
                    e8:e5:92:e9:ec:b4:e9:64:c8:d9:14:ed:8f:3a:4d:
                    eb:ea:aa:d1:3a:1d:f3:84:f8:ab:96:01:7e:a4:53:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:54:C2:45:94:67:52:8F:46:36:7E:E0:C5:F3:C1:70:E0:5E:CC:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef392e95-5697-4675-a401-25d090055bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:53:3a:33:be:10:3d:3c:f1:e5:ad:74:3e:3c:72:88:0d:
         4e:09:48:eb:7d:53:6f:7a:7d:89:9b:d1:0c:0c:7e:af:1b:97:
         b3:7e:72:53:a5:81:98:a0:37:90:63:16:cb:7f:e6:8e:b2:35:
         34:84:5d:13:a4:83:e9:dc:cb:12:0d:6d:bb:c6:ad:2c:83:2f:
         6c:ba:d1:6e:9c:ec:6e:f9:35:be:d5:76:e2:71:85:94:55:23:
         cf:83:49:be:58:ac:a7:b9:30:6e:41:09:09:a7:94:6b:14:36:
         97:70:fd:1a:f2:aa:10:dc:29:37:96:ed:83:f5:64:7e:ca:87:
         0e:2c:09:74:09:c8:a8:3b:ec:70:84:fc:eb:4a:fb:77:85:c7:
         f6:a8:b7:aa:b3:58:8e:af:89:ab:6f:dc:14:d0:1e:f6:17:d1:
         b8:b9:72:81:c0:99:9e:98:d7:89:e4:53:da:b7:08:12:f7:f7:
         70:c4:15:62:bc:70:b0:5b:1a:15:2e:70:13:8f:d7:18:8f:4c:
         70:30:09:ed:e4:88:6e:50:dc:87:f7:bf:ef:7e:e6:24:df:95:
         54:21:d7:6a:a9:3a:fb:88:dd:e0:c5:c3:e7:b9:a1:cb:ce:b8:
         c8:b0:88:84:2a:ec:33:bd:3d:ef:fc:f9:b5:b4:16:e8:e3:d3:
         e6:88:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:36:53 2025 by rpki-client