This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cd03778-0409-4d3e-a7fb-6dea68b9c135.roa
File:                     0cd03778-0409-4d3e-a7fb-6dea68b9c135.roa (raw, json)
Hash identifier:          kFh74IlTKmgIUOJlX4i0sxy7mRD147mJHEKfRNWJdWs=
Subject key identifier:   09:11:17:B1:15:8F:ED:30:ED:D4:F8:FF:AE:58:60:A2:AF:4E:DE:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7782C64823055EB6F94973C29B2806B7E983C914
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cd03778-0409-4d3e-a7fb-6dea68b9c135.roa
Signing time:             Wed 19 Nov 2025 16:36:48 +0000
ROA not before:           Wed 19 Nov 2025 16:36:48 +0000
ROA not after:            Tue 17 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.148.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:c6:48:23:05:5e:b6:f9:49:73:c2:9b:28:06:b7:e9:83:c9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 16:36:48 2025 GMT
            Not After : Feb 17 23:59:59 2026 GMT
        Subject: serialNumber=4e536f3f1861c69861d1f2f02b5b44dc1d60aa77ba6cdb15d8b4bd6b3d799803, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fe:c3:23:4d:65:aa:6b:c1:10:8d:8e:8b:62:
                    f8:14:7d:a3:6c:83:fb:e8:74:ab:37:0e:1f:aa:45:
                    7a:7a:3e:fb:ce:10:02:5c:c1:a0:55:62:7b:58:58:
                    f9:38:48:6e:ce:c5:a7:48:92:9a:f1:10:22:f5:e8:
                    92:2d:b9:1f:37:02:93:eb:e0:93:33:52:2b:31:6b:
                    37:48:3b:f3:b5:8c:39:8c:4d:ec:ad:65:71:a7:12:
                    4a:ed:dc:1f:42:ea:a8:67:fd:75:fe:ce:ba:4b:21:
                    ed:1b:97:e8:39:ad:9a:2e:34:93:3c:34:35:32:81:
                    c0:96:fd:49:b6:c1:0d:27:7e:39:70:0a:ed:83:3b:
                    2a:f2:e1:0c:1c:15:a4:ce:f9:00:30:a4:ad:3d:08:
                    ac:06:a7:4c:de:c0:5f:d4:a4:78:79:85:94:35:cf:
                    e9:9c:31:51:5b:ba:96:77:15:1a:50:9b:d8:b8:aa:
                    00:f0:d7:05:4d:d2:e4:12:98:eb:8b:f6:92:ce:02:
                    3b:48:0c:8e:0f:20:5f:d3:22:45:17:41:95:f0:b0:
                    d3:99:86:6a:d8:27:9a:83:f4:00:fd:1b:25:4d:ac:
                    2c:46:65:54:4e:cc:65:7d:26:c4:b8:ee:00:41:c0:
                    7d:4d:9c:cb:d4:2b:d1:e2:76:25:d3:e1:f9:f5:d1:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:11:17:B1:15:8F:ED:30:ED:D4:F8:FF:AE:58:60:A2:AF:4E:DE:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cd03778-0409-4d3e-a7fb-6dea68b9c135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.148.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         38:52:71:a3:6b:d0:10:b2:c9:bc:46:43:c5:67:30:b6:3b:cb:
         48:86:15:cb:b2:7c:dc:be:75:5b:f7:50:14:08:09:0b:14:fd:
         4f:f9:39:df:10:fa:cd:fa:d1:61:77:31:93:86:56:ec:0a:c8:
         79:11:20:41:99:44:21:fe:ff:5c:6c:e9:60:97:33:a5:42:8a:
         f6:19:57:3f:67:ba:6d:cd:75:ef:74:f4:b6:92:92:01:73:fb:
         3a:41:bf:ea:1f:9f:1d:da:e6:59:44:08:ae:cc:c0:91:38:0e:
         a6:26:d4:b4:70:ba:08:51:43:d0:c9:90:8c:87:a6:ff:72:13:
         4b:34:d9:6a:70:67:ab:67:e0:d4:74:b5:30:ea:36:ae:73:23:
         a2:e8:8a:fe:fe:9a:fd:fb:48:12:1b:23:95:75:a1:de:dc:82:
         3a:fd:03:b9:26:63:49:56:dd:f8:d1:64:a4:5e:15:f9:01:52:
         85:30:e6:48:de:9c:db:e9:0e:55:49:4b:b1:45:9b:91:07:d4:
         74:eb:59:b3:13:0a:cf:9a:4c:c5:56:d5:95:e3:b8:4f:7f:fe:
         0b:62:a4:aa:24:e4:84:b2:2d:0f:79:59:65:ed:85:47:4d:84:
         4d:d6:2d:53:f2:19:c7:0c:dc:e9:46:24:e3:40:2f:ed:ef:95:
         eb:46:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 17:36:03 2025 by rpki-client