This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a788d599-2c60-4aa0-a3d2-135fff75c258.roa
File:                     a788d599-2c60-4aa0-a3d2-135fff75c258.roa (raw, json)
Hash identifier:          nAj64d9RZj3oxJJ1VpSEx0xU7YxopRqeNsM8zAsIa10=
Subject key identifier:   1B:3D:B8:68:D3:C8:00:BB:57:51:01:5A:BD:E5:11:4A:B0:A7:1D:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3914DF207D30F6230F107FB3EED0EBB81A4F722E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a788d599-2c60-4aa0-a3d2-135fff75c258.roa
Signing time:             Thu 11 Dec 2025 00:20:07 +0000
ROA not before:           Thu 11 Dec 2025 00:20:07 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        203.88.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:14:df:20:7d:30:f6:23:0f:10:7f:b3:ee:d0:eb:b8:1a:4f:72:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 11 00:20:07 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=53b0c691a0d2ba4ee79b58172b749ceaa88910f23af5c040c52911b6c73d9489, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:a8:fa:a5:b9:e5:ab:8b:57:08:41:a9:ca:
                    91:7b:95:12:fd:f7:65:1d:74:d5:1d:cc:50:a1:ab:
                    78:1f:a1:03:1c:4d:ed:3c:34:39:cc:ee:53:4f:aa:
                    8d:68:d8:43:70:d3:2c:26:d9:7b:68:16:84:54:05:
                    3c:b9:80:59:a4:e4:27:0b:45:7c:8a:c4:49:bd:de:
                    8a:f7:fb:33:01:ac:3c:ae:72:5e:7f:42:9e:e7:8b:
                    21:71:18:2d:55:a7:e8:08:58:3e:11:0c:3e:f9:03:
                    2a:50:72:21:62:9c:bf:67:4d:c7:4a:b7:10:85:b3:
                    9f:70:e3:0f:fc:2c:d2:8e:ca:41:24:a6:4f:50:00:
                    d0:1d:ae:c0:86:4c:0c:d4:60:4b:fe:a1:34:bc:99:
                    55:09:31:6e:1c:b4:f5:dd:58:59:ec:ed:d6:fb:c6:
                    01:4f:d7:72:7b:e1:60:57:c7:40:01:7d:92:c9:10:
                    03:1c:3d:e9:e9:c2:79:4a:8b:e4:2f:52:ff:30:4e:
                    41:32:3f:af:2a:75:e5:69:57:bb:22:87:66:2a:fa:
                    29:18:e2:f7:6a:fd:8f:15:2c:96:d9:05:1e:86:e6:
                    b6:86:0f:52:50:e1:51:fc:ef:b8:8d:1e:62:83:be:
                    99:95:e9:ee:da:44:eb:53:46:99:5f:c7:f0:f7:5b:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3D:B8:68:D3:C8:00:BB:57:51:01:5A:BD:E5:11:4A:B0:A7:1D:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a788d599-2c60-4aa0-a3d2-135fff75c258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.88.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:18:3c:d0:8c:4c:23:5b:86:03:b1:29:e4:d5:3f:04:32:c1:
         96:f6:05:8c:d6:5e:89:3e:46:95:22:9a:b1:23:9b:d8:60:ae:
         34:64:33:32:52:cb:e9:5a:19:4b:b1:35:d8:08:17:fd:57:dc:
         e3:5c:81:db:83:cf:5b:c6:ba:46:26:00:59:3c:30:70:22:09:
         cf:ec:82:38:f5:04:10:a9:18:73:fd:67:d9:de:f9:69:60:35:
         7b:f4:a0:f1:00:bc:ec:83:16:ef:6c:50:8f:e9:89:51:1a:ad:
         17:c7:e2:49:35:2b:3b:58:29:bc:85:94:13:da:d1:fb:9b:31:
         d9:c9:17:a8:ba:27:13:b2:8d:7e:92:19:21:a0:e2:f1:c7:7e:
         09:a4:b1:90:50:1f:bc:12:d0:1b:76:0f:e9:2c:aa:bf:7a:76:
         84:09:3d:46:87:4a:bf:5a:85:41:16:77:fa:9c:2b:d6:92:69:
         1f:5b:93:60:88:81:e4:e0:07:8b:a4:5f:66:76:12:ba:c7:a1:
         2c:85:e6:28:73:ed:da:63:0b:10:dd:91:9b:d7:c2:0d:41:9f:
         bd:ba:d8:25:e9:4b:e3:73:4e:50:2f:50:a2:3a:de:db:f7:db:
         81:37:36:2a:34:36:2c:c2:36:ed:85:75:41:cb:b8:74:ca:65:
         d7:cd:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:48:43 2026 by rpki-client