This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/fd96e119-2761-4573-bdad-0f464228899f.roa
File:                     fd96e119-2761-4573-bdad-0f464228899f.roa (raw, json)
Hash identifier:          mVWgVN3ZRwctuWEkrSRaC9RZi53ZmnZchrQgGTwyr8Q=
Subject key identifier:   EC:7E:F0:FE:B5:43:73:34:52:68:FB:38:17:20:9C:33:91:09:43:B6
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       6FE4BA7B5125251BA91BAE7FF0C3D2E93CC1279C
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/fd96e119-2761-4573-bdad-0f464228899f.roa
Signing time:             Wed 12 Nov 2025 00:10:09 +0000
ROA not before:           Wed 12 Nov 2025 00:10:09 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     401654
IP address blocks:        198.41.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e4:ba:7b:51:25:25:1b:a9:1b:ae:7f:f0:c3:d2:e9:3c:c1:27:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Nov 12 00:10:09 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=e2c269b2ed75572ab9c85c926b91e82cd8cf793fb59fb4588f3b08933d70bdc9, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:82:e1:ea:d5:d4:03:b5:00:67:25:92:1a:
                    fb:63:d1:a1:33:30:e1:82:40:61:5d:ea:b4:ad:d2:
                    05:ee:f0:bb:ff:ee:ed:c7:92:e1:95:95:58:ff:dd:
                    27:1c:40:51:fd:4f:84:5a:8c:c9:e2:0f:9b:82:53:
                    e8:e3:41:54:5a:9b:9b:69:5e:1b:7b:31:e2:d9:58:
                    49:97:02:c5:6d:77:11:4d:ce:77:9c:51:0c:b6:b1:
                    93:d5:3a:a6:f4:a8:ac:62:52:0e:6c:82:45:50:65:
                    6c:2c:0a:fa:f3:24:f8:53:53:6b:d7:82:c7:f9:b8:
                    b1:e4:a8:a3:e5:52:31:b6:df:99:f8:2c:d9:e8:ee:
                    8e:06:16:ac:7e:cc:a9:6a:fd:49:ac:77:99:9c:20:
                    e5:1f:4d:e9:44:14:af:8d:37:8e:98:e5:a6:ff:be:
                    a3:2f:f4:7d:23:2a:0b:e8:28:86:55:62:72:e8:a1:
                    82:67:7d:7a:d4:0a:eb:cf:22:9b:0a:81:f1:ce:5d:
                    7d:14:11:b1:8f:d4:6c:86:76:be:e4:42:0f:ef:f5:
                    bd:f2:88:60:b2:2c:20:f6:b7:e6:53:46:05:62:36:
                    ca:9d:56:2f:73:46:93:35:62:cb:b5:d6:88:0b:38:
                    86:0c:f4:fe:0d:b9:64:7b:37:ef:57:73:3f:37:7a:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7E:F0:FE:B5:43:73:34:52:68:FB:38:17:20:9C:33:91:09:43:B6
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/fd96e119-2761-4573-bdad-0f464228899f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:3d:f6:92:c8:0c:91:af:1c:22:22:a3:41:d1:e0:f6:72:
         ca:2a:c2:56:ae:75:2e:ba:db:b9:03:72:78:43:99:45:37:d1:
         27:1b:f0:7d:2d:94:57:ba:ab:6e:53:0e:02:03:7e:50:43:98:
         2c:04:a4:64:04:bd:92:bf:b2:59:d6:35:63:9a:d3:df:e2:6c:
         8b:b0:e2:42:9b:74:2d:10:84:17:05:25:7b:07:37:a8:a5:3e:
         80:c8:83:95:52:f8:bf:31:f1:6c:b1:44:60:d1:68:09:8a:42:
         3d:42:d2:d8:b8:17:04:5d:b3:97:ae:2c:38:87:9b:b7:f1:b5:
         2c:15:46:d2:bc:2d:40:e4:6a:23:94:2c:7c:db:13:cf:95:04:
         b9:1a:53:1d:e2:a4:52:cd:e0:30:4f:d5:5c:37:8f:63:88:af:
         77:2f:2d:cf:55:d6:59:2c:ba:ad:0a:6b:51:46:d1:bd:b6:32:
         0a:a2:b1:82:d1:64:63:95:d1:67:7b:1e:b9:04:58:af:2d:77:
         3e:46:c2:32:7d:bc:67:73:80:2b:47:a8:ce:7a:a9:f2:d8:11:
         31:82:a9:6e:0d:b4:e6:a5:72:05:0f:1b:0f:0c:a2:ef:12:6d:
         b9:c5:53:10:fa:b4:0f:7b:29:85:8c:7e:1c:af:a6:87:cf:b9:
         f9:c4:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:13:49 2025 by rpki-client