This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22c0e5ed-c1f6-43d2-b730-3379c8a6d9d3.roa
File:                     22c0e5ed-c1f6-43d2-b730-3379c8a6d9d3.roa (raw, json)
Hash identifier:          Ebbxj4v1jDe4hGqNxp4GR9JEpL8+N8FtNqwVClin/T0=
Subject key identifier:   92:8B:A4:A6:D0:92:E2:F3:C5:AE:97:5F:79:CE:6B:12:2E:31:63:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       72A5E4DC04D191505D39377234FB273574A66205
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22c0e5ed-c1f6-43d2-b730-3379c8a6d9d3.roa
Signing time:             Sun 16 Nov 2025 00:30:12 +0000
ROA not before:           Sun 16 Nov 2025 00:30:12 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.60.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a5:e4:dc:04:d1:91:50:5d:39:37:72:34:fb:27:35:74:a6:62:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 16 00:30:12 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=ac71dd39e50e00f24af25c4552205433bfe9140bc7323a0a11457a16f8eece30, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:52:7c:67:d2:9b:10:de:5f:17:4a:c2:74:
                    03:c6:2c:b4:19:61:ef:42:a1:ce:75:d1:af:a5:75:
                    82:b0:6c:c5:46:75:96:3d:e7:fd:0e:a5:b1:df:99:
                    11:09:50:4b:bb:6b:72:3f:82:5a:df:da:72:0a:9e:
                    e1:fe:72:1b:b2:52:8d:cb:22:9a:fd:85:88:c4:c4:
                    58:ed:9a:55:d2:df:4f:89:83:0f:73:30:52:21:da:
                    56:2b:09:5e:00:e1:4d:0d:2e:4b:cc:b0:f3:e5:35:
                    6c:c8:62:ab:6d:60:05:8f:87:76:6a:9b:52:cc:43:
                    7d:89:11:49:e9:18:c7:31:b0:1a:b5:8a:41:5a:bc:
                    ae:2f:e0:2d:83:79:ed:5f:87:34:22:f6:28:1f:9f:
                    33:70:ac:aa:1f:ed:f8:1a:9d:71:fa:63:b8:d1:ba:
                    06:14:2b:1b:b7:15:4a:93:16:b5:da:41:7e:ca:f8:
                    73:cc:a8:f2:05:5b:80:85:3c:33:2f:ba:50:22:3d:
                    01:a3:5c:bf:b3:88:5e:ae:19:6d:9b:9e:ad:29:f9:
                    c7:b2:83:02:7d:c6:c1:6a:aa:58:3c:31:7e:50:ce:
                    f8:9c:9b:05:0a:47:e6:74:35:3c:02:e4:e8:23:1a:
                    4f:57:70:9d:37:a2:b4:21:f0:c1:34:ed:4a:23:46:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8B:A4:A6:D0:92:E2:F3:C5:AE:97:5F:79:CE:6B:12:2E:31:63:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22c0e5ed-c1f6-43d2-b730-3379c8a6d9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.60.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b9:fc:ee:7d:5b:73:90:d2:db:80:76:c6:85:e0:45:80:b7:51:
         67:7d:25:03:29:21:38:bd:18:6d:57:9e:b9:a8:b5:60:aa:92:
         f5:b6:5c:f7:7b:6f:b1:52:3c:a1:01:b0:a8:75:75:15:2b:92:
         48:3f:95:83:d4:41:a5:87:90:08:84:9f:14:57:3c:5d:81:61:
         f7:b0:37:2a:40:3b:21:43:4c:3b:cf:09:9c:ce:e1:a5:fc:55:
         49:fd:24:f1:2c:34:30:e8:e9:2e:a3:e8:99:a4:af:42:28:50:
         b4:45:8a:e2:37:f4:04:ef:97:7b:18:aa:b6:c5:4d:c5:6c:59:
         27:5c:05:7a:05:7e:c2:d8:d1:06:c7:82:4a:ef:2a:e9:f2:06:
         a7:74:cb:03:e0:32:f8:80:9d:d3:3f:35:b6:61:88:28:d4:fd:
         3f:90:60:60:f8:ff:16:fc:60:26:e4:6b:2a:d1:e7:40:a8:1d:
         ed:9a:e7:ee:ec:d6:c6:34:ae:67:64:15:6c:a7:e5:0f:2a:f5:
         09:7b:83:d8:31:cb:f8:97:7c:96:ab:c6:08:70:f6:72:b1:0b:
         98:03:6a:cf:db:aa:f8:d9:c2:67:f5:d9:51:4b:90:ab:29:d0:
         be:d3:a0:24:ac:3a:c5:9f:72:2d:95:76:a2:05:fc:17:91:bd:
         5b:88:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:37:48 2025 by rpki-client