This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/474b8370-dc4f-4592-ac12-366b777c2660.roa
File:                     474b8370-dc4f-4592-ac12-366b777c2660.roa (raw, json)
Hash identifier:          wdD5ydW8JyqoHXEaMMH5D6D1UlGc5kFu//QRorwxd60=
Subject key identifier:   65:FF:AC:50:6B:B3:B2:F2:0E:87:B1:DC:65:67:A4:43:76:ED:44:14
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       45AFA7C73B4C77E229D25184AE5FC9698F6E7E90
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/474b8370-dc4f-4592-ac12-366b777c2660.roa
Signing time:             Sat 15 Nov 2025 00:10:11 +0000
ROA not before:           Sat 15 Nov 2025 00:10:11 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:af:a7:c7:3b:4c:77:e2:29:d2:51:84:ae:5f:c9:69:8f:6e:7e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Nov 15 00:10:11 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=1723eec1695921b57ba5547cdc85c9dcced6df1e009fc8479b03e6ba36b1096c, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ac:9a:f1:29:2f:94:63:3c:21:b6:f5:eb:04:
                    f9:d3:5e:ea:f4:90:8e:3a:96:d2:40:81:f5:ce:cc:
                    9d:a4:4b:a5:27:c6:25:6e:b7:2b:a7:56:af:c9:56:
                    e8:ab:52:b5:2e:5c:65:98:3b:e6:63:7e:36:09:ba:
                    a3:5f:01:75:bb:b0:af:9f:d0:19:b5:8e:91:2a:97:
                    f9:f3:34:c0:09:cd:6b:e5:4d:9e:79:c3:58:af:44:
                    4e:24:8f:98:fc:e5:b9:6e:7e:72:7a:b6:af:b4:c2:
                    03:2c:e0:8c:8a:53:5a:d8:98:7a:ce:1c:8f:49:51:
                    32:0d:67:a8:e1:89:1c:41:07:97:d0:70:9d:1e:be:
                    1c:14:fa:ac:06:78:a3:c7:0f:d7:ff:41:8a:36:16:
                    8f:47:ac:b2:9b:e8:20:77:a4:80:51:18:76:9d:1f:
                    0d:26:ce:a5:ba:86:46:ec:b6:39:98:6e:e4:bf:48:
                    d2:bb:3f:a3:2c:78:25:df:f5:dd:ef:37:15:ea:f3:
                    8d:15:1e:72:3b:d8:6a:d7:9e:d4:f2:ba:2a:a3:61:
                    4e:d6:e9:a3:65:9c:36:31:e0:18:a0:74:51:a7:b5:
                    d3:3f:c5:43:e2:af:94:b5:ce:74:58:99:9a:fc:68:
                    b3:cc:6b:41:e6:03:e3:3b:b9:50:a4:c7:46:a1:46:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FF:AC:50:6B:B3:B2:F2:0E:87:B1:DC:65:67:A4:43:76:ED:44:14
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/474b8370-dc4f-4592-ac12-366b777c2660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:31:8c:c7:59:0f:c3:08:03:a3:ac:aa:f3:11:02:27:e0:58:
         c5:5c:2c:6e:a2:ad:c6:71:10:e1:10:9f:4f:7b:cd:bc:6a:f4:
         68:e7:1c:00:12:4f:8a:01:1b:e2:bd:80:25:07:15:fb:77:77:
         e5:60:88:c1:73:17:2e:1c:b5:f0:b9:f2:99:20:1e:5e:91:62:
         0a:44:ae:44:e4:59:17:ea:8a:02:49:20:7e:87:29:27:75:26:
         e9:25:93:12:0a:b8:d5:34:3b:31:2d:b9:db:cb:df:64:b0:61:
         52:43:18:22:6a:0f:df:c7:a1:7e:84:0a:88:45:05:ee:1d:82:
         24:33:58:df:b9:54:1f:4b:b8:8f:9c:4b:fb:84:d1:6c:04:f4:
         bb:cc:94:95:99:9e:d9:ba:ad:a0:06:7c:9d:d7:52:54:7e:8a:
         94:5b:de:33:b7:ca:bd:df:92:d8:c9:f2:f9:3e:d0:66:1b:8f:
         10:db:df:8d:6c:8e:e3:0c:11:c4:4f:d3:f9:01:93:6b:43:67:
         22:16:27:c8:ec:fd:bc:c6:94:d8:cb:b2:25:89:bf:a0:cf:74:
         4f:8a:af:51:16:9c:20:22:77:40:63:38:87:27:d2:8f:93:f4:
         04:a8:1e:db:d5:cf:42:23:09:14:ee:c0:09:f8:3a:dd:f0:7c:
         46:79:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:22:18 2025 by rpki-client