This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa
File:                     cb088b4a-420f-4b13-84d1-b160e021b919.roa (raw, json)
Hash identifier:          ZnwtflZpf38JvgWurRyQS1szCPECcY9sqkwvDqI3864=
Subject key identifier:   DE:5E:E9:5C:97:61:15:A0:DD:F7:CA:D5:FE:A7:0B:3C:21:68:C4:C1
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       30E32D232E2A308B6C3CCEF6D9D84BD5B3FFB9B0
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa
Signing time:             Sun 23 Nov 2025 00:20:05 +0000
ROA not before:           Sun 23 Nov 2025 00:20:05 +0000
ROA not after:            Sat 21 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e3:2d:23:2e:2a:30:8b:6c:3c:ce:f6:d9:d8:4b:d5:b3:ff:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 23 00:20:05 2025 GMT
            Not After : Feb 21 23:59:59 2026 GMT
        Subject: serialNumber=903ae67eca0066d2e13fcd13a7fe3ca63d722afe6f34ddf3e6240ca263e1c6be, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:17:bc:9b:52:b9:d0:44:c5:4d:26:e0:82:
                    89:d3:09:eb:07:11:ce:93:f6:67:48:33:ac:6e:3c:
                    8f:22:c9:57:a5:a6:d2:81:18:05:c4:7a:e1:2c:d9:
                    08:cc:b8:bc:13:46:12:08:9c:0b:4c:67:c0:cb:d6:
                    59:aa:86:58:3a:08:2f:07:43:d1:2c:b1:cb:f3:e4:
                    38:b2:2d:21:eb:66:1c:81:13:fd:62:fd:a4:8c:a1:
                    21:81:f0:25:83:83:6a:af:4d:5b:be:07:83:ac:4a:
                    71:41:b8:8e:1a:29:5a:77:4e:5e:33:8e:86:e2:eb:
                    be:75:cf:87:5a:18:2d:96:f9:55:2d:cf:e6:d9:e5:
                    28:3e:dd:93:2f:c9:d0:7c:b4:73:32:2e:de:71:a3:
                    c3:72:7c:96:47:8d:c4:f6:c1:57:9a:67:71:fd:f1:
                    4f:88:8a:1b:d0:56:6f:93:b3:25:e4:fc:12:63:e3:
                    80:25:2b:99:8b:24:e2:1c:6d:f3:84:60:84:0d:2e:
                    2f:ba:ac:08:68:2b:fc:ae:d7:3c:46:c0:a8:29:a6:
                    4b:19:6c:9c:ee:55:4d:f4:f6:48:52:ef:d5:52:25:
                    90:d1:dd:26:7e:0e:3c:e0:48:cf:a0:a1:02:13:44:
                    53:9f:c3:9a:08:aa:c9:1a:05:4a:74:f8:80:31:46:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5E:E9:5C:97:61:15:A0:DD:F7:CA:D5:FE:A7:0B:3C:21:68:C4:C1
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:40:44:df:d4:0e:e4:d6:cd:3b:b0:82:f1:6a:b9:da:3f:95:
         96:8d:14:a9:73:7f:1a:f6:82:c7:c7:e2:8c:1f:9a:94:78:77:
         0e:a0:2f:98:aa:d9:68:e8:46:af:ea:29:d3:0b:fd:9c:6b:b5:
         8d:15:c7:4b:8b:17:71:c7:6f:a6:98:1b:76:a4:54:49:62:6a:
         69:ef:b7:05:64:b6:ef:14:54:de:3f:0c:e5:0c:2d:d9:f8:25:
         dd:ba:60:fe:e2:b9:dc:61:37:20:da:cc:77:02:76:f6:27:28:
         75:a3:c2:1d:b4:95:5b:28:8f:4b:b3:3c:86:d3:b5:ae:67:19:
         19:41:eb:95:78:e5:f9:fa:aa:10:69:1f:9e:21:35:5f:63:5b:
         79:af:cf:f8:00:8b:bc:a3:14:cc:60:66:f0:45:0b:05:0d:9b:
         07:af:3d:55:91:d5:cf:6a:2b:8e:81:7b:5f:05:79:d5:17:73:
         24:b0:0d:8e:54:39:23:fa:3c:52:d7:90:4f:37:b3:2f:af:f4:
         e6:5c:53:eb:3f:57:bb:a3:29:62:42:42:e3:bb:01:98:7a:7a:
         2d:2b:70:4e:0d:ec:41:d1:da:a8:f6:9b:9f:9d:53:4b:54:f0:
         9a:d0:fd:8f:12:73:58:58:90:65:9e:f0:f4:f8:1e:92:88:0c:
         a8:69:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:12:14 2025 by rpki-client