This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f15603e2-1081-4c05-adfa-05ce585182e4.roa
File:                     f15603e2-1081-4c05-adfa-05ce585182e4.roa (raw, json)
Hash identifier:          QSwPDOLiIudmEwoAqsrazQaEmwHtUZpEGvRCIGvvEDU=
Subject key identifier:   2D:EA:B5:DC:A6:7B:4A:7B:3F:46:F8:4A:87:CD:BD:AB:AF:A8:07:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A2A9F48EE59A17E6D05946B1B68570B8A4D7DF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f15603e2-1081-4c05-adfa-05ce585182e4.roa
Signing time:             Wed 26 Nov 2025 00:52:04 +0000
ROA not before:           Wed 26 Nov 2025 00:52:04 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2a:9f:48:ee:59:a1:7e:6d:05:94:6b:1b:68:57:0b:8a:4d:7d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 26 00:52:04 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=751369b5e681e2c88bd029c304f12b2a0afe1ee19d5773ecf4d377f0709cfb3e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:69:37:ac:b5:57:f4:72:dc:62:ee:35:ce:
                    e1:ac:d6:4c:21:75:24:66:07:4e:ab:e9:e8:1f:9c:
                    40:62:7c:f3:de:b2:2c:01:26:e3:d6:63:ff:ba:26:
                    50:62:f9:ca:8d:c8:fb:37:9b:63:2e:88:22:cf:c0:
                    b3:a2:07:13:65:b7:73:3d:59:23:c3:70:cb:20:80:
                    65:d6:25:86:dc:ca:92:9a:7c:61:f6:21:fc:7d:f4:
                    1d:86:7d:67:c5:97:3b:15:a9:ba:8f:54:bb:0a:30:
                    43:8b:f2:16:32:14:fd:8e:3a:87:89:53:27:f7:24:
                    f2:a0:1a:13:c9:da:db:54:e6:f1:1a:ad:e9:72:c5:
                    b2:c4:0c:9c:9e:59:d6:6c:10:7f:16:c4:33:c1:ef:
                    52:c9:db:1c:d1:de:c2:44:6b:bf:4d:6a:02:36:ed:
                    84:aa:f8:00:81:9b:cf:8b:e6:50:89:18:1c:0c:2b:
                    81:f4:f9:af:32:68:dd:46:fe:ed:68:9d:08:87:37:
                    25:44:ab:95:2b:30:ac:0f:f1:be:d8:7a:29:d8:9f:
                    1e:48:00:17:67:de:7b:53:04:f5:a2:72:47:84:10:
                    2c:eb:96:68:57:06:e1:fe:e6:be:64:4e:0e:56:3c:
                    87:e7:68:cd:6a:85:14:6e:5f:25:fa:31:cd:13:9f:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EA:B5:DC:A6:7B:4A:7B:3F:46:F8:4A:87:CD:BD:AB:AF:A8:07:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f15603e2-1081-4c05-adfa-05ce585182e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:b7:63:5e:79:9e:d3:f2:95:90:f8:53:7a:1a:b8:89:7b:47:
         20:79:e4:eb:61:8f:cb:eb:b7:b9:c6:7b:3e:b1:13:45:5c:a6:
         74:1e:6a:21:64:9d:4e:cb:e6:1f:e4:d0:6d:86:6d:a5:72:a3:
         33:a2:92:48:52:b8:d5:dd:a6:af:73:c3:67:0b:64:d9:66:dd:
         4e:fa:d0:94:88:9a:36:ef:d0:f1:7f:e9:d9:ce:ff:d1:0f:33:
         ed:47:94:1e:73:4e:3b:69:c9:41:89:12:5e:67:fc:92:98:ce:
         c8:e5:c5:40:b8:16:28:4d:d9:16:b3:3c:23:a6:4a:f9:e8:1d:
         fe:3f:ac:84:a4:90:73:c2:2e:e3:ea:23:f4:06:bf:ef:6d:86:
         e3:b1:58:fe:55:86:c2:2c:e0:2d:ad:f1:5a:d7:30:22:44:36:
         7c:75:e4:74:86:61:5c:c9:17:66:60:c3:22:d1:0b:c5:a8:f5:
         a4:bf:0f:17:e4:27:4d:cf:40:9e:a5:3b:06:34:58:ca:e8:e4:
         fb:b4:e6:dd:20:7a:d5:da:c7:34:c7:3c:c5:5c:72:fc:22:12:
         39:75:31:80:a9:a1:30:6b:42:47:d6:54:1e:80:b9:7d:30:d3:
         3e:c4:1a:4b:c0:6f:8c:48:52:d2:a3:0d:83:f4:aa:32:ba:cf:
         6b:14:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:10:24 2025 by rpki-client