This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15633e1f-54bc-4c9a-8294-0c707f053f2a.roa
File:                     15633e1f-54bc-4c9a-8294-0c707f053f2a.roa (raw, json)
Hash identifier:          MOl4U/8+HGvdNVNLNLdD7J1uOjKTl/UYxTcX2HXLOec=
Subject key identifier:   AE:F1:1C:64:E3:F1:C7:01:94:2E:09:D2:B7:1F:E6:EF:A7:DC:5A:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       570502B6AF7B1A2E8E3B7C374762B8D60E6739E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15633e1f-54bc-4c9a-8294-0c707f053f2a.roa
Signing time:             Thu 11 Dec 2025 00:10:58 +0000
ROA not before:           Thu 11 Dec 2025 00:10:58 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:05:02:b6:af:7b:1a:2e:8e:3b:7c:37:47:62:b8:d6:0e:67:39:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 11 00:10:58 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=dcb0c24a4f661d227ce60f9d8548ae2e7f3fd42da2330b78e3be0c0788e9a68e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:42:d3:a3:8c:93:90:af:ac:cc:d9:7d:c2:
                    32:17:a2:d9:ff:1b:63:25:a5:6a:60:cc:38:63:68:
                    c2:01:c1:16:35:0a:24:9e:1c:46:46:9e:f3:b8:30:
                    1b:5b:8f:4d:ee:63:a3:ed:55:5f:20:f3:9e:19:e2:
                    48:fa:2f:6b:8f:1f:ee:45:4e:e9:79:92:33:09:4c:
                    9d:69:17:e2:fd:e3:0c:66:3c:16:74:6a:b1:10:4b:
                    6a:d3:2f:89:7a:f9:b9:ea:70:42:b4:c3:30:0d:86:
                    7a:c6:d0:e1:95:d7:94:e0:d2:b1:bc:67:ee:18:b0:
                    eb:31:85:4a:44:b2:dc:c5:25:77:24:86:06:32:c8:
                    f5:4e:54:ca:99:16:9e:5c:94:1d:60:34:79:f5:99:
                    6d:9a:d2:3f:a6:59:d2:35:72:9d:9c:98:12:a2:6f:
                    d0:ec:d0:4e:65:71:32:a7:3c:1e:88:e4:7e:4a:72:
                    9a:b0:84:12:f2:54:1d:73:b3:58:81:8e:6a:b1:d9:
                    12:f7:2c:fc:a3:35:83:82:76:79:ba:fb:1e:a1:2b:
                    7e:81:5f:2a:0c:21:42:63:e6:0b:78:60:20:e2:9e:
                    ee:00:8c:34:67:5c:a9:63:a3:31:55:aa:ff:ab:57:
                    0f:12:89:b3:75:c2:89:91:6e:53:02:58:5d:b0:f2:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F1:1C:64:E3:F1:C7:01:94:2E:09:D2:B7:1F:E6:EF:A7:DC:5A:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15633e1f-54bc-4c9a-8294-0c707f053f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:67:28:01:e2:13:bb:f7:1d:bc:91:4f:71:20:72:d3:32:
         61:f8:31:82:18:93:63:9d:f3:ef:c7:73:ea:5c:f7:b3:1f:6c:
         0c:17:0d:5b:a3:25:39:e9:4c:a7:da:f6:db:37:40:b5:55:a5:
         26:ca:73:49:21:71:e1:6a:25:7e:e1:38:d1:6d:6c:f4:c7:18:
         c8:6d:3f:5f:14:bb:2c:f0:e9:16:ee:c3:4e:1d:88:05:9c:5f:
         68:ae:e7:1a:7e:27:6e:e9:82:78:8b:8f:99:73:82:79:5b:7b:
         7a:6a:53:7a:f9:af:74:68:f3:dd:6a:74:dd:d9:a7:ec:23:99:
         10:65:b6:72:42:3e:33:11:6e:91:3d:0c:f2:9e:a4:bb:1d:3c:
         57:bb:bd:46:87:19:fc:40:c6:d8:f4:58:48:c9:45:94:24:11:
         00:6b:80:cf:42:a5:86:3d:9a:8d:2a:09:d9:32:6e:f0:9b:5a:
         82:09:c0:f0:0e:f6:b9:b3:ba:d9:94:86:da:94:d2:97:a4:5c:
         ae:aa:c0:bb:bc:9e:6f:d0:93:22:6e:49:95:d0:fc:1f:48:d3:
         fa:39:e6:e5:20:c7:99:5b:e2:41:4d:ed:9c:13:70:99:ad:d2:
         84:3f:21:de:c0:1b:d7:42:33:21:fe:02:3f:8e:f0:8b:ba:7f:
         c9:db:ab:95
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVwUCtq97Gi6OO3w3R2K41g5nOeQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjExMDAxMDU4WhcNMjYwMzExMjM1OTU5
WjB6MUkwRwYDVQQFE0BkY2IwYzI0YTRmNjYxZDIyN2NlNjBmOWQ4NTQ4YWUyZTdm
M2ZkNDJkYTIzMzBiNzhlM2JlMGMwNzg4ZTlhNjhlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuH0LTo4yTkK+szNl9wjIXotn/G2MlpWpgzDhjaMIBwRY1
CiSeHEZGnvO4MBtbj03uY6PtVV8g854Z4kj6L2uPH+5FTul5kjMJTJ1pF+L94wxm
PBZ0arEQS2rTL4l6+bnqcEK0wzANhnrG0OGV15Tg0rG8Z+4YsOsxhUpEstzFJXck
hgYyyPVOVMqZFp5clB1gNHn1mW2a0j+mWdI1cp2cmBKib9Ds0E5lcTKnPB6I5H5K
cpqwhBLyVB1zs1iBjmqx2RL3LPyjNYOCdnm6+x6hK36BXyoMIUJj5gt4YCDinu4A
jDRnXKljozFVqv+rVw8SibN1womRblMCWF2w8lrFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrvEcZOPxxwGULgnStx/m76fcWsAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE1NjMzZTFmLTU0YmMtNGM5YS04Mjk0LTBjNzA3ZjA1M2YyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTb4wDQYJKoZIhvcNAQELBQADggEBADGsZygB4hO79x28kU9xIHLTMmH4
MYIYk2Od8+/Hc+pc97MfbAwXDVujJTnpTKfa9ts3QLVVpSbKc0khceFqJX7hONFt
bPTHGMhtP18Uuyzw6Rbuw04diAWcX2iu5xp+J27pgniLj5lzgnlbe3pqU3r5r3Ro
891qdN3Zp+wjmRBltnJCPjMRbpE9DPKepLsdPFe7vUaHGfxAxtj0WEjJRZQkEQBr
gM9CpYY9mo0qCdkybvCbWoIJwPAO9rmzutmUhtqU0pekXK6qwLu8nm/QkyJuSZXQ
/B9I0/o55uUgx5lb4kFN7ZwTcJmt0oQ/Id7AG9dCMyH+Aj+O8Iu6f8nbq5U=
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:15:22 2025 by rpki-client