This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa
File:                     f82c1957-9091-4d53-8075-edcb55104e57.roa (raw, json)
Hash identifier:          MRYrm2ITvu7My5G2yE1U++tx99+6hVeBwBSdaZh6f0E=
Subject key identifier:   9E:9D:49:5A:3F:17:7A:2F:77:47:51:B3:68:DC:38:FB:45:57:2E:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13ECE0A79799DC55CA43402D113B56C2E22B27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa
Signing time:             Sat 15 Nov 2025 00:00:08 +0000
ROA not before:           Sat 15 Nov 2025 00:00:08 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.141.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ec:e0:a7:97:99:dc:55:ca:43:40:2d:11:3b:56:c2:e2:2b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:00:08 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=d2cffbe85d086d39113dd2f884c7c2d593b7240b3c075a02f7bdb6254ab02593, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:be:92:3b:f0:56:a5:f3:d4:0f:0c:f6:72:
                    c9:9f:e3:90:cc:5d:37:43:04:83:fb:a6:e1:a2:68:
                    53:35:a9:5b:84:a2:08:7e:61:c5:82:8f:5c:2d:d8:
                    b8:ef:c9:89:05:38:c7:6d:6a:b0:7d:ac:e1:b6:a9:
                    c4:b5:5d:24:67:2d:93:ed:5e:9d:4e:70:4b:5a:35:
                    55:dd:5a:06:d2:dd:81:c3:9b:15:a7:52:17:44:c1:
                    79:5b:f1:2f:98:55:da:0e:18:90:88:d8:c3:c1:b6:
                    6e:7f:18:be:d0:8e:dd:c0:67:04:01:c2:e1:c0:da:
                    cc:2b:6c:87:08:c8:25:ae:68:fe:2b:59:e0:26:13:
                    50:f8:1a:df:1b:6e:55:cb:46:fa:35:5a:7e:a7:42:
                    ab:f4:9e:05:6f:b2:4a:89:42:f9:1f:53:10:2e:3c:
                    0e:e1:de:9e:26:6b:8e:82:32:c5:db:2d:e2:74:88:
                    2a:04:94:c2:0c:2d:67:72:dd:ff:44:bd:16:b2:1b:
                    38:35:60:d1:72:18:f9:86:d5:9e:cc:24:07:54:b4:
                    d1:fe:55:87:69:7f:19:59:7a:04:f9:2f:b6:ce:71:
                    96:38:b5:ed:b7:b8:65:28:9a:c9:15:b9:90:81:1c:
                    e0:54:1a:15:6e:99:2e:0e:b2:56:14:0c:f2:7f:22:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9D:49:5A:3F:17:7A:2F:77:47:51:B3:68:DC:38:FB:45:57:2E:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.141.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         36:97:30:f3:3b:cc:f7:1f:c3:2b:e7:98:20:f6:0e:f6:78:e2:
         18:f0:f8:96:51:ad:3c:55:6a:04:59:ad:3d:c4:d4:e9:4d:cc:
         7d:d5:bc:1f:4e:2d:84:82:59:7c:92:59:14:61:2d:a2:e8:a2:
         4f:c3:2f:86:4b:58:46:8d:6c:ff:1b:22:66:af:16:02:48:96:
         c3:20:eb:58:80:64:53:89:ad:9c:49:44:32:ed:22:48:41:01:
         4f:df:9e:90:2a:cb:84:b5:2c:0d:8b:a4:00:a2:52:d1:3a:20:
         cf:bd:ac:51:26:a2:5f:59:81:35:a3:8f:dd:aa:94:e1:27:08:
         80:25:81:d6:24:94:e8:c6:08:37:ee:05:3a:7d:d9:d3:76:bb:
         7d:99:64:25:90:2f:34:b4:1e:c8:7a:28:c3:d0:86:e0:1d:47:
         f1:3a:d3:b2:06:a7:a9:b2:02:a3:cf:2a:9d:7e:85:07:8c:bb:
         44:b4:e8:09:37:e1:8f:5e:56:be:f5:a4:2e:82:86:bd:df:eb:
         59:38:ed:33:d3:9b:86:0f:6e:6f:7d:8c:07:ce:29:42:e8:31:
         32:c5:f4:17:67:67:75:93:28:0b:b3:b6:51:b0:be:6f:50:3b:
         3e:03:15:17:e6:cf:42:cb:86:49:14:50:79:be:ec:08:1d:4f:
         c2:98:dd:bd
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITE+zgp5eZ3FXKQ0AtETtWwuIrJzANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTExMTUwMDAwMDhaFw0yNTEyMjAyMzU5NTla
MHoxSTBHBgNVBAUTQGQyY2ZmYmU4NWQwODZkMzkxMTNkZDJmODg0YzdjMmQ1OTNi
NzI0MGIzYzA3NWEwMmY3YmRiNjI1NGFiMDI1OTMxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALEsvpI78Fal89QPDPZyyZ/jkMxdN0MEg/um4aJoUzWpW4Si
CH5hxYKPXC3YuO/JiQU4x21qsH2s4bapxLVdJGctk+1enU5wS1o1Vd1aBtLdgcOb
FadSF0TBeVvxL5hV2g4YkIjYw8G2bn8YvtCO3cBnBAHC4cDazCtshwjIJa5o/itZ
4CYTUPga3xtuVctG+jVafqdCq/SeBW+ySolC+R9TEC48DuHeniZrjoIyxdst4nSI
KgSUwgwtZ3Ld/0S9FrIbODVg0XIY+YbVnswkB1S00f5Vh2l/GVl6BPkvts5xlji1
7be4ZSiayRW5kIEc4FQaFW6ZLg6yVhQM8n8iphcCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBSenUlaPxd6L3dHUbNo3Dj7RVcuLzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvZjgyYzE5NTctOTA5MS00ZDUzLTgwNzUtZWRjYjU1MTA0ZTU3LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB2ONADANBgkqhkiG9w0BAQsFAAOCAQEANpcw8zvM9x/DK+eYIPYO9njiGPD4
llGtPFVqBFmtPcTU6U3MfdW8H04thIJZfJJZFGEtouiiT8MvhktYRo1s/xsiZq8W
AkiWwyDrWIBkU4mtnElEMu0iSEEBT9+ekCrLhLUsDYukAKJS0Togz72sUSaiX1mB
NaOP3aqU4ScIgCWB1iSU6MYIN+4FOn3Z03a7fZlkJZAvNLQeyHoow9CG4B1H8TrT
sganqbICo88qnX6FB4y7RLToCTfhj15WvvWkLoKGvd/rWTjtM9Obhg9ub32MB84p
QugxMsX0F2dndZMoC7O2UbC+b1A7PgMVF+bPQsuGSRRQeb7sCB1PwpjdvQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:46:09 2025 by rpki-client