This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f57cd127-87c2-4f68-b51e-d3af020a1d8b.roa
File:                     f57cd127-87c2-4f68-b51e-d3af020a1d8b.roa (raw, json)
Hash identifier:          CLg5QPBljXULhuttLyDzr62EVjpVThApiegRh2T7O+g=
Subject key identifier:   C6:60:FD:7D:DA:FB:91:BD:CE:44:81:3F:56:A8:3D:C2:C0:28:CC:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02133F9B5A5D369F19542FE6DC54DDF8B27A67
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f57cd127-87c2-4f68-b51e-d3af020a1d8b.roa
Signing time:             Sun 23 Nov 2025 01:10:06 +0000
ROA not before:           Sun 23 Nov 2025 01:10:06 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.33.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:13:3f:9b:5a:5d:36:9f:19:54:2f:e6:dc:54:dd:f8:b2:7a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 23 01:10:06 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=e167ad6ef86c6083775902c958b9c5905c94d6c38e9478d37173fa27df1ac71c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:41:ec:14:ea:87:61:af:a3:f9:89:41:73:50:
                    d3:26:8a:f8:8f:ee:cd:9e:c6:8c:34:a9:e4:00:53:
                    e0:2a:ff:e1:a4:63:0e:28:57:f1:78:6c:f7:34:48:
                    a7:51:39:0b:43:67:2b:95:81:d9:2c:03:32:95:f9:
                    cd:7a:47:07:7f:cb:f2:1a:9a:6c:cd:dd:ac:8b:91:
                    97:00:fc:20:12:91:5b:ce:12:02:2b:b6:a7:e9:90:
                    8a:0b:ab:8f:df:8f:ad:14:71:b7:45:f3:56:74:6f:
                    45:f6:6b:0e:6e:00:c5:c2:42:37:75:f2:9d:c4:72:
                    ae:de:2e:ad:c1:e6:8c:1f:1c:61:8d:bb:89:08:8c:
                    0e:eb:44:9b:c7:b4:7b:fa:ab:92:d5:60:42:3d:64:
                    d9:a4:5d:d0:b5:70:76:b5:36:4e:a7:d2:29:04:a7:
                    71:1d:ba:3c:04:0f:01:10:9a:b3:2c:41:54:a2:2f:
                    42:56:ee:a2:3b:20:70:6e:f8:21:22:69:8a:39:02:
                    5b:0b:11:e8:54:de:70:af:a7:3e:81:42:31:d2:32:
                    d6:13:b8:e9:5d:8d:e0:05:09:94:dd:51:83:76:c0:
                    73:01:ef:71:e4:f3:40:90:b5:30:af:a3:40:ec:ce:
                    1a:b2:97:59:76:22:2a:fa:f2:40:e5:33:30:46:ce:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:60:FD:7D:DA:FB:91:BD:CE:44:81:3F:56:A8:3D:C2:C0:28:CC:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f57cd127-87c2-4f68-b51e-d3af020a1d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.33.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:e7:b1:88:38:5c:0e:9e:bb:a6:59:7a:88:1a:57:fa:3b:
         5c:f4:a6:a6:df:0a:ae:85:ec:7f:f8:96:0b:10:94:a4:b0:bc:
         ab:51:99:8a:2a:d1:16:84:f2:99:db:8a:2c:23:ba:f0:57:b3:
         eb:a9:7f:49:18:7d:73:ec:45:84:44:8e:bf:da:d1:d7:97:60:
         d7:e1:69:9a:22:5e:e5:04:40:07:85:8c:21:f8:5f:b6:44:11:
         79:ac:f7:a2:cb:fa:c7:f8:9d:26:34:b8:4b:7f:38:39:df:5a:
         ea:77:d3:0c:c7:d7:b8:ed:85:5a:94:33:80:ac:a5:5c:28:9a:
         97:57:67:bf:73:3c:00:aa:55:4f:e9:f5:90:b6:27:bf:1f:d3:
         84:89:e5:62:b1:25:9d:75:a2:b4:9e:09:bf:1b:d2:c1:8d:c2:
         05:54:86:d3:b0:72:83:db:59:85:43:cd:b0:f8:ef:fa:81:ff:
         fd:ba:0e:da:bf:3e:2d:02:66:88:96:51:90:84:9b:7a:e5:70:
         d3:c8:b8:db:d8:c4:ac:52:36:2f:75:88:7e:3c:b6:5f:13:ee:
         79:75:67:86:72:68:f4:94:bb:c0:d4:79:93:2f:95:4e:58:6c:
         de:d2:a3:a2:42:ae:68:55:e1:46:70:bf:83:71:d9:8c:9b:8a:
         4c:04:7b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:52:50 2025 by rpki-client