This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de64e6ca-05ed-46a3-873a-8d17e7f59082.roa
File:                     de64e6ca-05ed-46a3-873a-8d17e7f59082.roa (raw, json)
Hash identifier:          86RSB7T97ys61KRZI41+1iRc8vTPSw0KZkI9OlMSEak=
Subject key identifier:   1D:4B:F6:93:A8:01:DF:02:F4:64:18:F6:19:CD:4A:75:B4:92:F4:E0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2E503BCCC661560E58ADBC8C2073F2F25819BE3E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de64e6ca-05ed-46a3-873a-8d17e7f59082.roa
Signing time:             Tue 02 Dec 2025 00:40:51 +0000
ROA not before:           Tue 02 Dec 2025 00:40:51 +0000
ROA not after:            Mon 02 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.137.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:50:3b:cc:c6:61:56:0e:58:ad:bc:8c:20:73:f2:f2:58:19:be:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec  2 00:40:51 2025 GMT
            Not After : Mar  2 23:59:59 2026 GMT
        Subject: serialNumber=6666b6a0a768e6aecb2b7acb1b18ec12b4408dd6dbf368898948c1877abe2f41, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:93:ba:73:32:e6:07:94:07:da:36:29:12:9e:
                    43:d0:dc:40:56:3d:7c:9f:12:d3:b4:59:95:b6:d2:
                    87:fe:b3:bb:75:4f:66:7c:ba:49:6a:97:bf:9e:1e:
                    92:a3:f0:4e:ce:f8:f3:1a:ab:5f:f0:ce:57:8c:e3:
                    b8:62:02:f5:17:27:61:6f:c1:3a:c3:c8:23:30:c8:
                    c6:83:c6:e8:9b:34:3b:c0:09:9e:b5:a3:89:59:56:
                    00:36:b8:c3:f6:35:70:6e:3b:06:e6:dd:3e:87:48:
                    59:6e:57:65:43:87:f4:19:e8:4a:2a:75:27:cc:90:
                    30:4e:94:99:aa:11:0b:38:a5:17:bd:d8:b6:a6:fb:
                    0f:c6:ca:b2:1d:2a:0f:c2:34:42:81:62:c5:b6:8f:
                    c0:eb:8a:f3:2c:59:e0:85:ab:c9:66:03:4d:e1:fd:
                    8f:20:89:d2:d1:a0:a7:41:5c:da:dc:65:af:b6:77:
                    9d:7e:ad:62:ff:bd:35:bc:e4:26:c9:79:d1:f3:07:
                    d2:a0:89:99:c2:ec:76:76:2a:e1:ae:70:1e:cf:de:
                    7f:2e:6e:7d:df:33:31:ba:5a:65:42:c3:24:ba:4e:
                    c8:4a:83:67:07:ca:3b:d3:ca:f3:7c:95:23:76:11:
                    2c:f2:f5:bd:c4:8a:74:cc:1a:54:71:5b:3b:a3:ca:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4B:F6:93:A8:01:DF:02:F4:64:18:F6:19:CD:4A:75:B4:92:F4:E0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de64e6ca-05ed-46a3-873a-8d17e7f59082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:aa:34:e6:b2:5a:11:c7:a7:56:ca:c1:6e:9c:ec:78:61:c3:
         6e:15:d0:6a:92:81:85:e9:ab:ea:ad:25:31:9a:f9:4b:c3:51:
         10:88:1a:85:c5:04:2d:23:4f:c8:b4:f8:cb:b2:26:af:f7:ae:
         0c:83:bd:6c:ba:fe:2d:b1:c2:8c:80:30:7d:8e:2c:28:a5:40:
         18:a4:08:ea:a2:44:d3:a3:15:40:32:e3:8e:a7:ea:1f:c2:d1:
         9c:12:38:e4:25:ca:0e:24:48:2d:b8:57:fb:63:48:02:f1:e9:
         af:18:ed:9a:43:e9:55:b4:88:af:a1:0c:c3:0e:ec:27:e5:b7:
         1e:30:70:0a:77:d3:f3:16:92:92:3b:fb:c9:1a:ea:6a:a2:9d:
         1c:f9:ee:bb:1d:a1:42:2f:ab:ba:ee:76:46:b5:d4:a4:58:6c:
         2d:cf:f4:21:5c:e0:40:f3:f9:60:12:36:7e:64:53:1a:91:48:
         3f:bd:0c:55:ff:a3:cb:c1:fe:5b:c8:98:6b:89:05:59:04:45:
         20:d9:dd:a8:0a:b1:c0:ab:c4:40:21:2d:36:44:b6:d5:a1:20:
         7b:86:3b:8b:ff:7f:99:00:b5:38:dc:41:9a:46:96:0f:d0:dd:
         6b:50:85:5f:ae:61:77:85:91:79:e0:3b:75:4e:1f:be:e8:09:
         70:25:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:17:23 2025 by rpki-client