This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c964bb16-b590-4c0c-89eb-29a939e70a6d.roa
File:                     c964bb16-b590-4c0c-89eb-29a939e70a6d.roa (raw, json)
Hash identifier:          Mju0y29i+PevmZaZzg7/A7SZzcsWYyq6A88eIi3S4bQ=
Subject key identifier:   6D:A7:62:8E:05:B5:FE:FD:C5:2A:68:12:23:7E:88:40:03:B3:D3:34
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       14874D222E8E82EB0352682A9C158E0F0FEB95DD
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c964bb16-b590-4c0c-89eb-29a939e70a6d.roa
Signing time:             Wed 10 Dec 2025 00:20:06 +0000
ROA not before:           Wed 10 Dec 2025 00:20:06 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:87:4d:22:2e:8e:82:eb:03:52:68:2a:9c:15:8e:0f:0f:eb:95:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Dec 10 00:20:06 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=43b0dfc8a68fe843b3f0c223cd9b1cb6cc71bd813f2633a44544ddbaa46cc717, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:bf:38:f3:f2:2e:f9:c6:ec:b6:d2:00:03:
                    28:a6:7b:57:a7:7f:81:78:e0:ec:19:f1:a5:10:9a:
                    90:51:9a:9a:20:07:5d:1f:ed:65:ff:db:d5:60:b6:
                    fb:66:fd:a6:08:f0:8f:e2:31:fd:51:0a:49:6d:7f:
                    e0:71:a5:f5:5c:c9:ec:af:5a:b3:dd:2d:6d:c6:8e:
                    49:50:93:b5:a7:be:2d:dd:3b:76:12:1f:26:61:d3:
                    ce:29:f2:a1:8b:9b:b9:f3:79:24:24:e8:2f:00:6f:
                    df:37:be:58:1d:fc:fb:22:ed:d8:75:de:3a:99:93:
                    da:08:d1:86:80:23:50:b6:39:04:be:9e:aa:c7:1f:
                    73:77:cf:f6:97:96:5b:ea:1a:52:de:91:b5:ef:13:
                    33:c0:fc:74:8e:57:76:6d:f5:9a:32:c3:72:8b:04:
                    15:eb:d6:c8:f9:12:ae:b4:33:92:ab:78:f0:fc:ed:
                    12:f3:4c:4a:e4:b9:05:00:25:a3:9c:2b:af:39:95:
                    2a:9a:65:f8:12:e3:73:fe:c8:c5:15:81:f8:11:d2:
                    0c:1b:a3:06:84:ab:11:14:8e:55:42:f9:4b:fc:fb:
                    8a:51:bd:b1:2d:40:2d:a3:a0:32:b8:22:4c:f1:54:
                    e1:22:20:b3:7b:f9:f5:90:c8:85:cc:62:30:8b:09:
                    3a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A7:62:8E:05:B5:FE:FD:C5:2A:68:12:23:7E:88:40:03:B3:D3:34
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c964bb16-b590-4c0c-89eb-29a939e70a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:87:38:3c:be:3f:01:17:43:0b:32:c2:e0:43:f4:5b:e6:d9:
         16:75:5a:69:ca:c1:d8:f7:75:23:c6:86:66:b0:bc:08:cd:11:
         d3:a8:72:f8:26:55:87:9f:b3:05:1c:fb:68:0a:f4:4e:02:36:
         c2:e9:ea:a5:2f:ba:e2:53:44:47:66:99:4d:8e:e9:95:cc:a9:
         68:06:fb:34:47:75:0f:b1:e1:aa:5d:24:be:77:d2:bc:53:2e:
         a3:a4:bc:e8:a4:56:f8:7c:96:d4:15:24:d8:37:77:e7:ed:7a:
         0f:40:30:12:2e:79:5a:a0:f7:9e:88:f0:1e:15:4b:d4:82:17:
         88:a6:b7:76:88:80:78:3d:3b:25:54:e3:d1:df:79:99:23:ee:
         c9:7b:83:1e:8b:2e:51:ec:7f:5b:ab:d7:83:d6:21:a6:33:24:
         8f:40:15:3c:5a:1f:df:d5:34:87:5d:dc:cf:55:78:94:16:08:
         b6:66:19:fd:d0:e8:11:e7:d2:65:cb:ae:36:0a:68:bf:0e:e4:
         d4:1c:98:19:0b:dd:7c:98:b3:8c:b6:f4:6e:96:ec:be:2e:8e:
         7b:6e:cb:a5:b0:ee:49:f8:8f:26:c9:fa:b0:76:88:52:1f:70:
         4f:ec:22:17:fb:8e:a5:07:2b:08:38:37:c9:0f:c6:1b:f7:34:
         3b:30:76:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:11:55 2025 by rpki-client