This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d2173bb-e797-4226-9e44-2c1db14d18b3.roa
File:                     2d2173bb-e797-4226-9e44-2c1db14d18b3.roa (raw, json)
Hash identifier:          mYXKxRmo2aopQkhYXmtGlHohQwiPPGNpnJAe6qAhRjs=
Subject key identifier:   4E:1E:4D:52:57:31:E8:61:8E:E9:8B:B0:41:23:BE:95:46:7B:80:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74F2AC851B4A665A706B4C85F3377FEECD33EBCF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d2173bb-e797-4226-9e44-2c1db14d18b3.roa
Signing time:             Mon 08 Dec 2025 00:00:37 +0000
ROA not before:           Mon 08 Dec 2025 00:00:37 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        75.2.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f2:ac:85:1b:4a:66:5a:70:6b:4c:85:f3:37:7f:ee:cd:33:eb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:00:37 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=f0895632449a5a2938a450b17e3435e8b34e04084c03d9e7a4ba95a7ac6458a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:1e:56:16:76:84:c8:7f:af:b9:ad:b2:27:
                    15:a9:31:33:71:11:b9:fc:64:15:3a:b1:df:43:13:
                    76:9e:9d:42:fa:c9:da:fe:de:5a:52:48:11:93:15:
                    e5:ca:bf:5c:ce:bf:f6:ea:94:dc:5e:42:fd:fa:f7:
                    35:6d:d3:c7:5d:5d:4c:7c:cc:07:db:e9:cf:1e:6d:
                    1d:8d:03:c3:52:d5:31:59:83:40:97:23:b5:f8:b2:
                    7c:1d:a0:06:4d:32:67:73:ba:73:ed:48:fc:75:09:
                    c0:dd:c8:a9:47:06:37:c6:38:e3:55:b5:97:b6:ab:
                    24:a0:f0:f9:cc:ba:be:e3:b4:18:5b:3b:26:71:b4:
                    59:6c:f0:5f:c9:98:be:21:86:f5:6f:3f:f0:be:a2:
                    24:da:dc:70:96:b2:ae:a6:41:1a:44:5d:21:30:18:
                    a6:a1:e9:87:3c:9f:6c:7a:8e:48:c9:7a:b9:ec:7c:
                    2d:10:fe:d3:75:ea:dd:d4:ff:38:78:25:80:b2:7e:
                    72:50:b2:94:4c:46:4c:21:11:b5:2b:3f:b8:90:f9:
                    6c:a1:6d:49:24:b3:63:23:ce:7f:12:37:52:13:8a:
                    64:ee:57:e2:c9:22:ae:2b:d2:c9:e4:2c:41:5d:35:
                    6a:07:3c:7d:7e:b7:09:05:a6:bf:f3:6e:82:1b:b5:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1E:4D:52:57:31:E8:61:8E:E9:8B:B0:41:23:BE:95:46:7B:80:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d2173bb-e797-4226-9e44-2c1db14d18b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c1:65:d4:0f:aa:e1:7f:eb:2d:1a:24:37:6b:6a:35:fa:b4:ad:
         6a:2e:dd:8f:53:ea:6f:de:6e:04:3d:b7:bc:02:25:0f:17:ee:
         d2:90:8e:1b:35:58:22:16:0c:fe:5d:ce:4f:bc:25:4b:8c:09:
         37:b5:4e:dc:db:ac:3d:69:fb:41:b2:f2:e4:cb:1c:89:51:b1:
         8e:89:29:c3:82:6d:c8:ad:4b:11:7b:da:6d:15:5c:36:2a:98:
         01:ef:ad:28:92:28:f6:da:4f:de:e0:82:df:13:d0:43:f6:47:
         af:14:23:07:89:24:08:4a:4e:9e:66:23:b6:07:e4:e8:1f:a4:
         62:4e:c4:f0:a2:9c:fc:d3:4b:7d:76:a6:b4:d9:02:a0:0e:2a:
         b6:9d:93:42:be:27:32:bb:50:95:78:5b:f0:e9:b7:b9:4f:79:
         c7:66:08:c2:7c:25:ea:1c:4d:8e:ed:bd:19:12:9c:49:6f:c6:
         3d:7e:c4:4b:41:46:6a:8e:3e:69:16:a9:36:b6:27:08:a5:e2:
         65:d6:94:5d:19:e2:a9:ba:d5:b0:a5:7d:62:49:8d:ee:11:f8:
         2a:2f:06:55:08:a5:c4:bc:03:c2:73:f2:6f:53:7e:87:89:7e:
         35:b0:46:74:00:b0:1c:db:22:41:33:81:da:02:35:7f:79:a7:
         92:5a:15:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:49:30 2026 by rpki-client