This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa6075c-9e02-411e-8e1f-b81753289412.roa
File:                     faa6075c-9e02-411e-8e1f-b81753289412.roa (raw, json)
Hash identifier:          yVJRTxoPQ/ckpiwURd31reFONhdJtTnH3Otv+KyGkTY=
Subject key identifier:   DA:97:5A:D4:8E:0A:A8:89:BF:29:33:79:8F:5D:1E:20:CF:3C:DB:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77118679AC25A26686AC14C2262F607C50E2F0BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa6075c-9e02-411e-8e1f-b81753289412.roa
Signing time:             Thu 27 Nov 2025 00:30:58 +0000
ROA not before:           Thu 27 Nov 2025 00:30:58 +0000
ROA not after:            Wed 25 Feb 2026 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:11:86:79:ac:25:a2:66:86:ac:14:c2:26:2f:60:7c:50:e2:f0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 27 00:30:58 2025 GMT
            Not After : Feb 25 23:59:59 2026 GMT
        Subject: serialNumber=2abcc76f3b9527341a3baf0aad443942fd369a2cf48cc4b1c79c0c1344b3eeae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:a6:95:75:b0:02:e4:ca:39:bb:04:a9:52:
                    5b:a7:fc:a3:26:d7:77:89:91:97:b0:1e:fd:6e:1c:
                    2a:82:6d:7a:69:ff:95:6a:56:e6:fb:89:9f:1c:d4:
                    2f:72:4d:dd:eb:0d:b4:75:a2:22:37:83:ad:37:e2:
                    fe:08:78:0d:28:9c:fa:99:25:13:93:9c:6f:df:b5:
                    2b:2c:13:e9:58:d7:d2:47:9c:49:5a:ab:01:3f:c6:
                    c5:2e:18:a7:56:8b:32:b6:25:8d:a4:c7:71:05:7e:
                    84:90:63:c5:d2:19:0f:c3:5c:a7:bd:41:35:b6:43:
                    46:69:a9:4a:35:e6:9a:3e:2e:86:ff:c6:3b:5f:1a:
                    31:3b:27:d9:16:79:e5:43:74:3c:7e:bb:c1:dd:d6:
                    01:d9:da:ee:ce:de:6f:a4:a6:64:c8:bd:e6:39:52:
                    f0:69:96:52:60:74:78:fb:b7:28:52:0e:15:b7:c8:
                    d0:3e:c6:f4:3f:97:b4:15:a6:e5:f2:b9:fb:c2:be:
                    02:d7:85:55:8f:6b:51:e8:9f:c6:be:4e:76:96:08:
                    96:18:fe:2c:99:b5:37:20:dd:f4:04:c7:3b:8b:5b:
                    22:64:a2:06:b7:e1:83:61:92:ff:2b:79:77:df:9c:
                    22:1f:fc:30:3f:b0:50:52:ec:ff:2f:69:e3:b0:dc:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:97:5A:D4:8E:0A:A8:89:BF:29:33:79:8F:5D:1E:20:CF:3C:DB:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa6075c-9e02-411e-8e1f-b81753289412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:e7:09:7e:ea:06:78:00:0a:e8:9f:a0:0f:64:e5:db:f4:06:
         d8:6a:17:f3:63:75:7b:b9:3e:0f:3e:f3:a6:0e:38:1f:60:b2:
         7c:73:2d:5c:d2:41:72:49:b9:f2:36:c0:de:35:a9:7e:7b:0e:
         b2:53:f5:a3:7c:6b:5b:24:78:ac:ce:b2:25:64:2a:64:b7:61:
         af:bd:21:00:60:9f:6d:28:c3:ba:07:9b:eb:88:e4:b4:b8:bb:
         3b:28:1c:bd:93:90:c2:ff:5c:00:36:0e:cc:e6:fc:90:1f:c9:
         47:13:54:07:35:ce:b1:c3:0d:33:73:f8:fd:b6:6a:67:b5:80:
         7b:ef:bd:3f:6c:bd:ee:cf:34:4d:d0:fc:91:55:39:cf:aa:46:
         48:04:21:26:8a:b2:43:b7:09:35:55:7a:54:11:53:af:c1:cb:
         ff:e5:6a:bd:fa:c5:c3:09:82:d3:eb:45:7a:ac:21:5e:4a:0f:
         a8:14:80:43:e8:39:d5:e5:9f:fe:1f:a9:30:bb:11:47:2d:0c:
         d3:4f:36:37:a4:c2:41:38:df:0f:e3:da:9b:e8:d1:63:fa:52:
         29:d9:00:56:b3:58:64:25:ad:da:b4:e7:58:49:ed:1f:5a:20:
         1f:56:ba:4a:69:d5:b7:6f:4a:0b:20:63:e6:f4:04:ce:91:eb:
         1a:81:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:56:50 2025 by rpki-client