This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7ad350b-c67f-47a4-bc0c-073f8683a332.roa
File:                     f7ad350b-c67f-47a4-bc0c-073f8683a332.roa (raw, json)
Hash identifier:          AY7GScbi+m6iDyx3kMJqTG3XDelc0RXCf+cP2NtB2YY=
Subject key identifier:   B7:53:A5:5A:23:C8:D0:B9:40:F7:50:17:E6:CC:C8:DE:5B:27:95:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77042727EFECBC1335492795191E6A0731DD1606
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7ad350b-c67f-47a4-bc0c-073f8683a332.roa
Signing time:             Wed 03 Dec 2025 01:40:44 +0000
ROA not before:           Wed 03 Dec 2025 01:40:44 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:04:27:27:ef:ec:bc:13:35:49:27:95:19:1e:6a:07:31:dd:16:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:40:44 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=d1974c2930717292a841ba511aa178ceca311f139db86b2e021a7e83d3aa526a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:d6:ec:0c:68:fb:4b:55:15:f2:de:8f:4f:
                    74:6b:b1:51:b9:d0:aa:47:14:a1:1b:2a:0b:35:c5:
                    b6:1f:03:35:44:70:19:fa:ba:1b:b9:e3:aa:ba:3d:
                    20:96:7a:e3:93:0d:29:b2:7d:b4:d7:22:9d:17:f2:
                    20:f7:82:c2:ad:af:da:cc:41:75:15:ca:76:84:3d:
                    a7:fc:53:e0:7b:8f:b7:e7:2b:33:bf:fb:92:1b:63:
                    b5:c5:4c:e5:fc:b6:ef:94:66:15:cc:5a:28:c6:0b:
                    82:47:5c:d6:95:d9:cd:e6:a2:1c:20:47:5b:64:5b:
                    c4:b0:7b:4d:16:65:38:1d:88:80:9d:8f:5f:56:54:
                    5a:ad:45:88:9f:56:44:24:ef:48:92:f3:df:33:06:
                    01:f1:1f:cb:1e:fb:9b:8e:e2:7e:84:eb:37:f1:47:
                    bc:74:39:ba:1b:32:ec:44:f9:14:f8:82:4e:fe:95:
                    50:e9:c7:64:9b:a5:1f:41:3a:b1:b8:d7:dd:97:65:
                    05:01:db:4a:cc:8d:f3:4e:f1:3d:44:06:28:6e:99:
                    26:51:85:05:cb:aa:1b:af:04:49:f3:a8:23:7e:6e:
                    93:18:d8:34:f6:c3:43:74:fd:f2:a1:36:f7:f6:ce:
                    67:a8:dc:16:57:ea:92:05:ab:ba:d9:44:02:30:19:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:53:A5:5A:23:C8:D0:B9:40:F7:50:17:E6:CC:C8:DE:5B:27:95:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7ad350b-c67f-47a4-bc0c-073f8683a332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:f5:23:d0:2d:d0:5a:5d:dc:22:7c:c5:d1:6d:33:95:b8:6f:
         28:eb:cf:0e:40:1c:57:4b:f7:c7:bb:00:4e:ba:f6:f2:7f:05:
         62:31:5e:88:6d:15:3f:83:81:51:82:67:45:ae:57:87:db:7c:
         c5:e9:f6:21:ae:0f:a1:eb:a1:ec:a9:48:b0:6e:85:e5:20:10:
         cb:8d:e0:f9:ca:15:20:13:ec:f8:8e:cb:9d:c6:0c:70:1e:50:
         2c:66:a6:b4:b0:a8:b5:3c:73:af:8a:32:e2:91:27:75:d8:d9:
         87:71:20:08:0f:9c:45:0a:6b:15:a9:3c:31:21:a5:41:74:8e:
         cb:da:bc:2c:9b:1e:f9:7b:c5:56:4c:de:b1:7d:f4:1f:99:24:
         50:95:84:f5:2d:bd:3f:e8:32:4b:bc:d2:87:b1:85:d3:95:5b:
         a5:70:96:31:e8:ca:f5:ec:15:d6:e0:7d:ea:f4:98:20:0f:00:
         bf:65:b5:47:9f:20:e6:6b:4f:bd:c2:a6:39:79:fc:01:f0:29:
         f6:a1:06:41:db:e7:f4:8d:70:48:5b:d6:3e:70:c1:a5:90:21:
         c3:c6:27:57:87:7a:c3:e5:40:b3:ae:d7:1f:36:79:1e:b0:a5:
         d2:b3:a6:81:f7:a0:7d:4d:dc:0e:f6:25:3d:9c:b8:e5:1d:6f:
         ed:1b:f9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:57:53 2025 by rpki-client