This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/258e6f29-ec78-4849-a049-84a7edb4a611.roa
File:                     258e6f29-ec78-4849-a049-84a7edb4a611.roa (raw, json)
Hash identifier:          E6AEbqE0/mHOxy9wE6sNGGBwkIU8RKKRy8i4GlWivL0=
Subject key identifier:   A3:06:DF:F8:33:94:91:75:3E:EC:F9:74:A4:DD:B2:3A:35:3E:9F:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1990BD9CD5919CEF6270088F3D5432FD819997C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/258e6f29-ec78-4849-a049-84a7edb4a611.roa
Signing time:             Mon 08 Dec 2025 00:00:42 +0000
ROA not before:           Mon 08 Dec 2025 00:00:42 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        74.190.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:90:bd:9c:d5:91:9c:ef:62:70:08:8f:3d:54:32:fd:81:99:97:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:00:42 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=96b9590166f527e4c9e5708a65a894b912754bc986dcfedcf889ba4ee2ecd54f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:48:74:7f:69:42:77:71:06:1b:c5:54:bb:
                    6d:18:bf:19:26:17:05:56:fc:59:a5:9d:ed:4f:ba:
                    7d:55:c1:dd:ab:82:f4:e4:ef:87:ff:c2:a4:ad:1b:
                    59:65:2a:a1:be:66:76:21:c1:de:6f:0c:02:76:67:
                    a1:f6:06:d3:a2:e5:f3:bc:19:e0:64:5e:68:93:40:
                    5a:81:00:4a:4a:57:ae:3c:95:64:69:4a:45:e5:41:
                    ed:ee:cc:c3:7e:cc:98:ad:90:fb:a0:c0:3e:fd:81:
                    58:9b:01:6a:12:7e:c7:bd:a5:f8:c7:91:c6:cf:e7:
                    31:03:23:84:72:ca:d9:01:de:9a:55:91:f7:69:78:
                    97:d7:34:d6:28:53:85:42:bc:7c:0a:b4:09:65:7a:
                    43:3f:2a:df:4e:b4:3c:27:6f:a0:2e:0f:ce:5e:0d:
                    63:25:a8:4c:d0:2a:c7:9c:62:36:32:b0:a2:50:c0:
                    7c:8a:4d:5b:93:ab:db:4b:be:d6:b0:52:93:4d:af:
                    86:54:c7:ad:95:6b:fd:64:20:58:97:96:bd:51:62:
                    49:4e:34:ff:fc:b3:39:64:82:81:0c:9c:bb:60:57:
                    ea:45:9c:a2:f2:75:cc:dc:99:80:b4:a3:90:32:23:
                    2d:34:57:17:17:ba:98:53:94:fd:04:29:08:99:9e:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:DF:F8:33:94:91:75:3E:EC:F9:74:A4:DD:B2:3A:35:3E:9F:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/258e6f29-ec78-4849-a049-84a7edb4a611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:41:06:55:b7:8f:80:2a:b4:97:47:28:78:13:c0:f3:cf:e3:
         f5:4e:7a:61:d0:c2:5b:35:25:49:15:20:3c:94:79:f2:fc:ff:
         04:94:33:4b:27:c0:1e:85:81:6f:34:50:b2:b3:bb:27:4c:fb:
         64:91:3e:ac:5c:2c:20:81:27:84:e0:3c:3a:75:2f:24:2e:da:
         78:61:7c:96:fc:f6:8c:1f:29:76:08:7d:41:4c:5c:06:e1:c6:
         25:01:8f:c5:8d:60:0d:48:f0:fc:8b:cd:99:7e:55:f2:5c:cb:
         5d:21:da:1d:e0:d0:2e:06:47:25:94:4c:0f:1d:e7:b1:47:88:
         d3:77:90:0f:54:d8:ed:c6:e4:f7:73:f2:8a:c6:25:07:09:c0:
         a7:d0:85:80:a2:69:16:7d:8a:60:5b:30:1d:c1:a7:30:64:23:
         bf:7f:75:68:8a:7c:23:8a:40:b8:a6:c0:0e:ff:46:46:fa:ce:
         48:8b:b3:40:48:cf:37:3b:d9:33:6d:10:f0:db:fa:18:2f:d6:
         bb:10:2f:33:00:bc:dc:8f:36:56:51:a9:bb:ab:dc:f9:ee:86:
         b1:55:0d:07:25:17:aa:0f:b2:a0:e0:80:90:ec:e3:06:ab:a9:
         be:3f:ca:72:65:f0:18:69:62:b8:ee:f7:f9:41:b8:69:7a:b2:
         71:9c:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:33:46 2026 by rpki-client