This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8eab2c65-1488-45ff-b7b3-6d9c0f327f17.roa
File:                     8eab2c65-1488-45ff-b7b3-6d9c0f327f17.roa (raw, json)
Hash identifier:          CoCvfV6FEEPYQZ6BBey2gOXFOthHAwFjdtzY0uZwLcc=
Subject key identifier:   3E:C6:26:C1:B6:24:72:00:56:48:0C:E2:ED:92:F5:BF:F5:37:0A:CC
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       3C96FA05F9021A094CB0AFA4172747370E7FA729
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8eab2c65-1488-45ff-b7b3-6d9c0f327f17.roa
Signing time:             Sat 15 Nov 2025 00:10:08 +0000
ROA not before:           Sat 15 Nov 2025 00:10:08 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:96:fa:05:f9:02:1a:09:4c:b0:af:a4:17:27:47:37:0e:7f:a7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Nov 15 00:10:08 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=5aa7ecf69684f4aa1d15f2093d68cfc024370b3104e91092a95c5fbe40f1b2dc, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:de:5b:a3:e7:83:2c:ef:4e:43:be:d5:41:
                    3c:d9:92:4a:78:66:ca:08:84:7c:eb:9d:4b:ce:f0:
                    e5:e0:f1:65:11:35:05:df:1c:19:17:00:b6:8d:8c:
                    ba:8b:f3:8d:13:36:4e:58:13:60:e3:14:7e:cc:ae:
                    51:d3:48:49:70:49:62:f0:b4:bd:78:05:22:db:2b:
                    fe:0e:2c:c4:63:0b:df:0a:b8:a8:84:8c:bd:0d:f0:
                    56:09:6b:0a:e9:c2:00:a8:b2:fe:de:e5:be:cb:69:
                    df:f9:94:2b:52:c9:dd:c0:0d:3d:d3:89:eb:d9:c0:
                    40:53:1f:82:89:62:5e:5b:6d:dc:ca:fe:df:fe:be:
                    19:37:6d:2a:7b:8a:62:31:cb:b6:18:27:3a:92:c5:
                    3d:80:c1:35:1d:64:12:1d:dd:e7:07:76:cd:20:66:
                    e8:6d:1a:9e:91:6d:ad:12:0f:21:27:41:c8:6d:f5:
                    d9:1d:14:f5:80:5d:47:2c:a3:3e:af:e5:61:c5:da:
                    c4:29:a8:9d:70:53:5a:ea:d6:64:62:b6:99:59:a8:
                    42:fd:27:3e:4c:fc:7d:24:a4:09:00:ae:13:39:44:
                    5d:f5:64:b9:f4:b3:21:70:7d:1f:ab:8f:0d:7d:12:
                    c5:93:4c:4a:92:77:fe:1c:d1:54:16:fc:57:7d:8e:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:26:C1:B6:24:72:00:56:48:0C:E2:ED:92:F5:BF:F5:37:0A:CC
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8eab2c65-1488-45ff-b7b3-6d9c0f327f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:b8:b3:ad:f7:e7:5e:4f:93:6d:23:e0:4e:30:66:d6:b6:4c:
         2a:34:a8:2e:d7:6b:b8:09:e1:b9:7f:c3:8c:6b:ef:75:57:ac:
         84:e5:0c:78:0d:18:b2:84:6f:75:a9:c4:ab:f1:3f:28:d3:e4:
         07:11:51:6e:22:31:ba:fa:df:ed:25:5f:c0:50:35:11:59:b3:
         63:fe:98:cf:2a:72:2e:57:23:1d:42:e1:a3:8e:eb:ce:a6:44:
         96:ad:5b:e4:30:c2:20:49:42:59:3e:8c:76:18:6c:81:e7:be:
         df:18:11:b5:58:8e:fc:8b:5a:c4:e7:c1:de:7f:8c:8b:42:e7:
         a3:1a:2e:8f:22:31:ba:cf:d2:f5:4b:3e:f0:cb:9b:e0:11:c3:
         89:c1:db:be:96:98:8d:42:7f:e0:7e:3c:42:4e:28:a7:0a:75:
         15:ce:00:d0:42:c9:89:d6:e5:ee:8c:e2:6e:7b:41:3c:78:34:
         da:a9:06:1d:33:e8:30:f8:ca:49:7b:13:9a:77:2d:5d:be:46:
         eb:d9:85:0c:90:34:89:1d:0a:04:63:1a:ed:4f:4a:01:72:07:
         21:1a:44:6d:94:ae:33:bf:c5:50:08:55:83:44:c7:67:63:50:
         32:55:79:53:0a:57:c5:e0:8c:39:05:9d:77:86:1e:9d:2b:95:
         f2:6f:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:11:36 2025 by rpki-client