This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa
File:                     090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa (raw, json)
Hash identifier:          Jyt9/9JdBCirXirDuSFf/CdV4TLIo0mFgbqvjPsLePg=
Subject key identifier:   DC:C1:EE:EF:5C:EE:34:5D:DA:94:ED:8E:F4:38:AC:4F:B7:78:F2:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2233F878094D7131B2D58A0DD996A9840072DCC0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa
Signing time:             Thu 11 Dec 2025 00:10:58 +0000
ROA not before:           Thu 11 Dec 2025 00:10:58 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.54.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:33:f8:78:09:4d:71:31:b2:d5:8a:0d:d9:96:a9:84:00:72:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 11 00:10:58 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=3d3f96506b3c9fd4dec1326ad207c3724556fb526458389949a44ca6ebb7f7f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e7:32:2d:44:ed:20:b0:0d:db:47:b4:95:fb:
                    cd:1e:a8:ac:f2:e1:90:f6:ff:63:3c:2a:d7:cc:b3:
                    e1:6a:6d:c8:a5:ec:a7:df:a3:63:c2:af:00:2d:e3:
                    fe:88:d6:d4:fb:86:f8:74:a7:7c:d7:f7:6d:e5:d7:
                    ae:0b:aa:eb:8b:0f:9c:72:58:60:ae:ad:80:a2:5a:
                    37:fe:bb:1c:c0:cd:cb:ac:f8:f3:49:58:99:62:dc:
                    be:f6:df:4e:64:52:23:56:ad:56:42:4c:0e:94:dd:
                    c1:91:6b:95:4a:5e:d4:b6:c5:29:7f:01:40:3a:43:
                    eb:b6:3d:b5:a5:dd:a5:9e:df:d1:15:32:c7:66:e8:
                    0b:d3:61:4a:96:5b:ec:46:d2:a0:e8:73:55:94:a6:
                    1b:f7:b2:e6:9a:de:26:7b:07:d9:98:01:af:6b:87:
                    91:8e:f1:89:a9:88:bc:64:9c:3d:87:d4:44:c2:25:
                    5d:74:ca:cb:c8:67:9b:b4:3b:b5:27:c1:7b:d0:27:
                    83:e5:c6:20:a6:c0:a3:48:d4:75:23:f4:2e:55:84:
                    f0:83:ad:24:19:e8:de:11:3f:13:47:33:fc:71:32:
                    02:cc:4d:6d:d1:70:07:94:5c:06:fc:c5:ba:2b:b7:
                    e9:80:ab:d8:29:10:4a:34:df:dc:3b:07:79:fa:ee:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C1:EE:EF:5C:EE:34:5D:DA:94:ED:8E:F4:38:AC:4F:B7:78:F2:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:fd:6a:e8:42:61:f8:b7:69:71:2c:e2:39:64:43:24:5a:
         c9:b0:fc:e5:fe:9d:63:2a:30:17:d2:a8:59:70:71:16:9c:d0:
         68:3a:16:62:9e:b7:04:34:fe:a3:fb:4c:d9:d6:f3:ca:69:70:
         1f:ca:94:be:63:48:c0:3f:f2:89:a7:d8:29:c2:c9:4d:2e:4a:
         7b:21:2b:a2:6a:f7:79:ad:18:c9:53:2d:30:a4:a1:10:89:fb:
         9b:9a:ae:5a:65:94:bb:ba:0b:f0:f2:79:b2:69:e7:ab:e6:86:
         45:3f:0e:23:02:02:ed:8e:8e:c3:6e:86:7a:82:62:b5:81:0d:
         89:20:47:d0:3b:df:f1:14:8b:b2:b8:8f:f9:29:3c:c2:e3:43:
         23:42:98:cf:15:77:01:b3:40:11:7f:d7:39:7e:bc:ba:41:a2:
         05:cb:86:ea:ff:36:3b:ed:ef:e1:7e:59:d0:f7:a7:f2:9b:7d:
         c6:a1:fc:84:6f:26:fa:e1:67:a7:3b:49:e8:ec:86:aa:ce:6c:
         e1:fd:81:6e:4c:9f:b6:65:75:13:08:2e:ea:7c:e3:7d:9e:1a:
         6f:44:1d:3c:f1:de:72:ba:71:00:9f:79:9f:6c:db:ec:8b:c5:
         13:e5:d6:ba:01:d4:52:29:7a:65:0d:95:5a:72:7c:bf:c1:82:
         ea:53:db:86
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIjP4eAlNcTGy1YoN2ZaphABy3MAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjExMDAxMDU4WhcNMjYwMzExMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZDNmOTY1MDZiM2M5ZmQ0ZGVjMTMyNmFkMjA3YzM3MjQ1
NTZmYjUyNjQ1ODM4OTk0OWE0NGNhNmViYjdmN2YzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCK5zItRO0gsA3bR7SV+80eqKzy4ZD2/2M8KtfMs+Fqbcil
7Kffo2PCrwAt4/6I1tT7hvh0p3zX923l164LquuLD5xyWGCurYCiWjf+uxzAzcus
+PNJWJli3L72305kUiNWrVZCTA6U3cGRa5VKXtS2xSl/AUA6Q+u2PbWl3aWe39EV
Msdm6AvTYUqWW+xG0qDoc1WUphv3suaa3iZ7B9mYAa9rh5GO8YmpiLxknD2H1ETC
JV10ysvIZ5u0O7UnwXvQJ4PlxiCmwKNI1HUj9C5VhPCDrSQZ6N4RPxNHM/xxMgLM
TW3RcAeUXAb8xbort+mAq9gpEEo039w7B3n67mHbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3MHu71zuNF3alO2O9DisT7d48nAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA5MGNjZGUyLTNiYTMtNDBmZi1iZDA3LWFlNmY3MTZmMGUyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjNjowDQYJKoZIhvcNAQELBQADggEBAEMO/WroQmH4t2lxLOI5ZEMkWsmw
/OX+nWMqMBfSqFlwcRac0Gg6FmKetwQ0/qP7TNnW88ppcB/KlL5jSMA/8omn2CnC
yU0uSnshK6Jq93mtGMlTLTCkoRCJ+5uarlpllLu6C/DyebJp56vmhkU/DiMCAu2O
jsNuhnqCYrWBDYkgR9A73/EUi7K4j/kpPMLjQyNCmM8VdwGzQBF/1zl+vLpBogXL
hur/Njvt7+F+WdD3p/Kbfcah/IRvJvrhZ6c7SejshqrObOH9gW5Mn7ZldRMILup8
432eGm9EHTzx3nK6cQCfeZ9s2+yLxRPl1roB1FIpemUNlVpyfL/BgupT24Y=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:31:43 2026 by rpki-client