This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91e1290-8903-43b0-9ff5-cf18f7e06923.roa
File:                     d91e1290-8903-43b0-9ff5-cf18f7e06923.roa (raw, json)
Hash identifier:          gn0getdhCuQUFaKuPOe/M91X6bAuzRFdVM579/eHocA=
Subject key identifier:   04:6C:36:BE:6E:11:47:D3:B4:DA:64:E5:65:54:EA:8B:F2:45:7F:13
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       06EC66BFEC3F65B5DC204A1866F7E74B6910951B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91e1290-8903-43b0-9ff5-cf18f7e06923.roa
Signing time:             Sun 16 Nov 2025 00:40:47 +0000
ROA not before:           Sun 16 Nov 2025 00:40:47 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ec:66:bf:ec:3f:65:b5:dc:20:4a:18:66:f7:e7:4b:69:10:95:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 16 00:40:47 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=8ce0ec6448dafa04de65f4930a55c8e8b8e02666a24780ef78fb43fcbce1b5d4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:6a:04:28:7d:f8:ed:92:24:d8:fd:41:1d:
                    fb:64:7e:8c:2d:ec:59:5b:e0:5c:67:4a:b6:24:0a:
                    79:54:dd:f6:4f:e4:2b:33:ac:17:f3:42:66:4e:bb:
                    59:79:dc:12:98:3a:15:f4:83:4d:b7:5a:1d:a4:17:
                    a1:eb:17:d7:14:8d:9b:8a:5c:0b:01:34:b8:de:9d:
                    59:88:78:13:bf:f6:68:0e:9f:72:42:11:5b:01:95:
                    9f:f4:fb:ac:9d:ab:2c:22:15:06:92:fd:e2:e2:b5:
                    71:83:4d:36:d1:06:b0:d0:78:57:68:96:87:a2:d1:
                    fe:62:28:f6:2d:34:01:11:90:35:8a:ca:84:83:fa:
                    85:98:d8:62:af:2f:d7:c7:c1:ff:99:4f:f7:78:2c:
                    ce:c2:b6:64:3b:02:4a:19:fd:9a:09:dd:6b:8b:31:
                    2f:6e:df:1b:55:3e:16:9e:32:16:43:4a:75:9a:c3:
                    0e:fe:fc:69:41:8f:a1:aa:ca:f1:b4:d1:27:12:f2:
                    c1:ae:25:db:c6:6d:2b:0b:a5:2a:d9:af:68:23:0b:
                    d7:c5:1b:e6:9d:1a:03:f0:98:0b:f4:ac:bc:72:78:
                    59:92:47:5e:11:ea:99:e8:07:54:de:5a:5f:ba:c1:
                    74:01:a4:86:e7:2e:15:99:f7:18:9d:0e:35:d2:ba:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6C:36:BE:6E:11:47:D3:B4:DA:64:E5:65:54:EA:8B:F2:45:7F:13
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91e1290-8903-43b0-9ff5-cf18f7e06923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:7b:e1:cd:23:f1:d0:ac:03:45:15:44:98:11:aa:fc:ac:bf:
         90:44:e3:d9:e8:9b:9f:b0:48:56:c0:0d:18:b4:5b:2b:cb:f9:
         b8:13:80:c0:99:00:24:2b:e5:a5:13:69:8b:3d:cd:0e:f2:e9:
         88:13:b0:8c:7c:67:fb:0b:17:18:4d:4f:aa:99:72:ec:55:c0:
         c6:73:0c:c7:59:0a:9a:7b:f7:ac:5b:02:cf:02:4e:4a:8c:9a:
         95:5b:1d:b4:e5:f4:8d:50:1b:27:6d:46:86:1b:5b:64:31:70:
         f1:a6:59:15:e1:84:4c:ca:70:c9:eb:8c:7b:f5:ff:d1:81:e8:
         2d:5c:b8:cb:0e:78:1b:53:c1:cd:b7:2f:c8:db:83:82:d6:f3:
         a0:55:39:63:ba:62:77:a6:70:50:83:6a:92:e8:b2:67:2b:48:
         a3:ef:d4:43:fd:2b:0a:de:e2:49:45:5d:01:04:a8:c7:76:24:
         c4:c6:55:88:5f:aa:2b:87:86:97:da:64:bf:cb:93:b0:1f:5c:
         b0:87:f2:98:d5:17:d3:1e:65:3e:93:16:85:54:e2:98:16:00:
         3c:b5:18:d7:23:bf:68:29:bb:50:d6:69:dd:90:49:60:e0:b7:
         ce:b2:8d:60:e7:e9:ce:ce:26:e7:93:d0:ec:3d:ec:1f:17:55:
         a2:68:45:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 11:58:59 2025 by rpki-client