This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9561ac1-33c5-4a40-8016-801d44a3d838.roa
File:                     f9561ac1-33c5-4a40-8016-801d44a3d838.roa (raw, json)
Hash identifier:          +dgeVWSjbWgNH/S3qJUjPBrw4LaiAeyWwgCkLqwRrh0=
Subject key identifier:   E3:67:8C:88:E7:4D:B3:1E:91:E1:20:FE:1F:D0:BD:34:20:D6:5C:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       033AB69B98F5FCE0B0CB672EDD7871D1820056BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9561ac1-33c5-4a40-8016-801d44a3d838.roa
Signing time:             Sat 22 Nov 2025 00:10:11 +0000
ROA not before:           Sat 22 Nov 2025 00:10:11 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3a:b6:9b:98:f5:fc:e0:b0:cb:67:2e:dd:78:71:d1:82:00:56:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:10:11 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=799e05305613414b860583fa6b08f61142081ddca83191b71999ba7736d2d43b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:ea:de:9b:0b:9b:34:49:c2:55:da:8a:5f:
                    57:93:07:79:f1:03:6e:a3:09:25:1b:01:21:9a:31:
                    96:36:10:1c:ac:43:e5:9e:a6:b4:b6:45:cb:7f:fe:
                    37:4f:2f:e0:ea:0d:bb:1d:da:14:cb:c3:3b:5f:54:
                    c3:c7:32:4e:48:52:ff:0c:52:84:70:73:95:99:4e:
                    76:d1:81:76:de:d3:1a:4e:b5:72:a2:2b:53:33:0b:
                    35:1f:9c:77:48:0c:ae:f0:2f:dc:c7:16:be:c3:87:
                    80:c4:04:ea:35:3c:58:c6:4e:c9:a3:4e:c1:4e:98:
                    67:29:7c:d0:22:33:bc:05:c4:f4:26:1a:a3:7a:db:
                    3d:c8:5f:f2:f0:57:8d:01:19:d8:5f:01:3c:ee:1c:
                    d3:50:d1:b2:9d:c6:41:8c:8d:88:fd:e6:97:86:35:
                    03:68:ce:d9:78:d6:98:00:b5:ae:7b:b1:7f:4a:fb:
                    a8:d6:7c:03:d4:79:4a:7c:19:6c:99:6e:15:f1:92:
                    78:4b:d1:33:14:f1:e3:74:9f:58:cc:af:1e:96:47:
                    82:c9:f1:01:b2:6a:d4:63:5c:90:c7:87:13:d7:17:
                    16:ad:ef:5d:38:84:2d:79:bd:10:a0:c2:23:23:1d:
                    05:b0:85:74:49:73:ef:7d:8b:63:46:96:d2:ac:03:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:67:8C:88:E7:4D:B3:1E:91:E1:20:FE:1F:D0:BD:34:20:D6:5C:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9561ac1-33c5-4a40-8016-801d44a3d838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:fc:ce:19:85:0e:02:91:7d:5f:59:a5:3c:1b:56:c8:77:
         78:82:fd:1d:bf:0d:b1:85:0c:5f:3a:36:2d:3e:3e:7f:7e:10:
         75:b6:34:ac:91:f2:1f:ae:fa:4b:88:c2:4f:2d:ae:14:2d:5c:
         05:3f:a1:90:1b:3b:46:e7:25:86:fb:85:8c:91:29:34:55:d0:
         96:8b:56:aa:fe:b4:6a:38:f5:5f:7b:1a:19:28:e7:70:3c:2b:
         45:6b:8f:ae:14:d0:e9:ae:75:9e:fe:67:6f:34:99:03:6c:d8:
         c4:32:23:40:0b:9e:d6:3b:ae:19:73:b3:dc:1a:1e:2f:29:ab:
         f2:f9:97:ab:bd:c0:c3:22:b6:ca:bc:4d:4a:23:03:a9:ca:42:
         71:86:4a:83:cb:69:71:e6:1f:bc:09:8d:c8:46:fa:9f:61:f0:
         1e:d6:e0:ae:f9:41:fd:ba:2f:3e:23:0f:a5:a5:68:7e:ff:17:
         30:b6:71:b3:df:06:9b:c2:a4:17:8d:7e:0c:16:3f:65:88:de:
         26:c1:db:ea:35:5f:32:b4:1b:cc:5d:08:27:f5:d1:61:8b:b6:
         40:1e:82:8f:4d:60:23:ab:04:e6:10:15:b0:dd:77:4c:2b:3c:
         3a:e2:9e:eb:85:e2:79:dc:8b:18:e2:4e:cb:fc:e6:34:9e:e7:
         41:1e:af:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:32:30 2025 by rpki-client