This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356faa82-a0da-4902-ac5d-0346855caaf1.roa
File:                     356faa82-a0da-4902-ac5d-0346855caaf1.roa (raw, json)
Hash identifier:          bI9fCPu72Ead6lwUaVSQ3w9F6BD3JwOzSsa41dBcLlY=
Subject key identifier:   DD:99:55:09:C9:D1:3A:5D:06:5A:07:3E:82:26:BE:75:FD:6E:E8:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       225F17BA9F7F6DFE117F933A3C1800BA8209D642
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356faa82-a0da-4902-ac5d-0346855caaf1.roa
Signing time:             Sun 07 Dec 2025 02:31:42 +0000
ROA not before:           Sun 07 Dec 2025 02:31:42 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.60.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5f:17:ba:9f:7f:6d:fe:11:7f:93:3a:3c:18:00:ba:82:09:d6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 02:31:42 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=e006692eed6d16e7a2e7e13992e0085937d658b3c674fca8a5de5e07953812d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b3:02:06:fa:cc:a6:31:b4:d3:6c:ef:67:15:
                    cd:c3:8f:9e:d7:b3:9f:de:a3:cf:75:79:07:49:76:
                    e0:79:7b:1a:b8:56:84:91:ed:3d:cd:8f:9f:ee:d1:
                    e7:dc:fe:c4:23:6d:89:d8:5b:65:0f:4f:60:47:09:
                    aa:39:de:4c:fa:e6:f3:12:27:ea:eb:27:43:8f:c9:
                    74:d4:a8:ff:0a:04:39:95:89:5c:8b:6e:9c:22:8b:
                    58:87:8c:70:a5:25:fc:59:4a:9d:6c:56:32:e7:d4:
                    d5:f0:34:28:cb:0a:8c:be:a0:dc:24:f8:83:bc:08:
                    83:77:a0:d4:b7:5a:ac:0c:d2:7b:3d:32:11:b4:60:
                    2a:66:c7:19:cc:42:3f:91:9f:7c:bb:74:02:67:4c:
                    6a:4b:31:f6:4f:9b:66:91:5e:17:4b:b7:15:20:44:
                    78:c6:ab:2b:65:5c:47:2c:f9:7c:fa:4a:e1:8a:63:
                    b6:d6:2b:d7:37:d1:a8:22:ed:64:10:46:d4:be:f9:
                    ff:fd:4a:59:1f:45:e8:a7:75:74:7c:cf:63:f6:41:
                    0a:05:1a:16:3c:07:de:53:c9:cd:4b:4c:e1:31:58:
                    41:d2:4d:d6:d5:b1:76:27:d0:a6:a9:3d:1c:e2:09:
                    a0:d1:22:e5:b1:f9:b6:0c:8b:a5:b0:82:c7:c7:ea:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:99:55:09:C9:D1:3A:5D:06:5A:07:3E:82:26:BE:75:FD:6E:E8:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356faa82-a0da-4902-ac5d-0346855caaf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.60.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         aa:b2:54:76:bb:15:c5:32:64:70:be:f5:0e:70:73:d5:d1:05:
         df:59:48:5f:00:41:63:cb:e5:93:b8:74:e4:58:cc:b9:20:df:
         5f:3a:64:aa:a7:69:e7:10:2d:67:4c:ea:21:8a:42:1f:7b:24:
         ed:18:e3:4e:49:51:cd:45:9f:67:3f:8c:94:1a:0b:b7:ba:e8:
         ef:82:99:74:f8:55:89:01:fa:fd:5e:8c:82:cc:74:95:d5:ab:
         9e:a4:1d:b0:f3:7f:f5:eb:09:53:7f:aa:7f:a7:0e:cc:83:b9:
         30:d6:93:4f:16:06:c9:24:fc:99:c8:dd:f9:31:af:9a:ce:52:
         b9:2a:1f:24:d8:5b:1e:86:13:a3:87:c0:cd:54:3b:81:74:1c:
         44:ef:a0:b5:69:ae:87:d2:79:65:cc:a7:d6:89:e9:dc:9c:b1:
         3f:d5:df:43:3d:c9:13:03:17:1f:69:72:91:6c:d0:b2:bd:40:
         44:d5:9a:96:5c:a3:96:e1:86:0c:ba:4a:9b:1b:25:f8:ad:46:
         fe:26:1f:e3:18:8f:0c:3a:60:76:15:7c:84:e6:86:6a:89:98:
         b5:db:c7:c8:16:71:7b:0b:d2:b9:84:3b:8c:42:40:38:1b:48:
         78:e4:f1:6b:31:ec:4d:95:3f:ec:89:b5:e9:8a:6e:3e:d6:ee:
         71:cf:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:02:05 2026 by rpki-client