This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aa2483a-0310-4f8b-813f-9aa1272e40a8.roa
File:                     3aa2483a-0310-4f8b-813f-9aa1272e40a8.roa (raw, json)
Hash identifier:          OeQJVOYQUip36OKII/T0huTpzjhd9VLyiuaK2WJ0uvE=
Subject key identifier:   1E:34:75:48:C5:64:23:0A:B6:B3:53:33:5C:94:EC:0A:AA:5B:1E:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E3EAECDE32653120BB559E1BF6AD6F7611B846D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aa2483a-0310-4f8b-813f-9aa1272e40a8.roa
Signing time:             Tue 11 Nov 2025 01:31:36 +0000
ROA not before:           Tue 11 Nov 2025 01:31:36 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.56.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3e:ae:cd:e3:26:53:12:0b:b5:59:e1:bf:6a:d6:f7:61:1b:84:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:31:36 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=3f2ccaf565e9ff744850f9d6f1d54a9b1a09b18a48e0e09d57e90fd08c00f059, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:8e:10:ad:ce:aa:bd:e6:0e:eb:af:84:b7:
                    a6:1d:d3:25:0e:c2:80:04:39:77:fe:a5:6f:55:bc:
                    5e:95:f1:ca:bc:dc:87:57:b4:5b:70:1d:24:7c:13:
                    ed:20:f1:33:a9:6f:57:09:5d:95:46:77:7f:56:c2:
                    0a:53:2a:cc:40:02:f8:f8:bb:26:5e:31:07:8d:cd:
                    f6:03:e9:00:20:9b:14:f0:52:56:79:46:0e:8f:85:
                    80:2e:5e:ad:1e:3b:e5:14:a8:28:b8:42:b0:ec:6e:
                    6b:83:59:42:51:51:43:03:5b:3b:f5:80:e7:73:8d:
                    a3:fd:b8:9b:2f:ed:b7:ba:3e:a6:61:f9:45:b2:e8:
                    25:e2:4e:28:f2:17:98:6a:09:75:77:71:5c:7d:71:
                    70:64:35:6a:b3:f8:5f:98:c9:7f:dc:cd:ac:26:78:
                    2b:77:06:29:38:a5:15:dd:7c:5c:96:7a:6a:ca:d7:
                    9b:ac:af:04:03:05:b9:a4:a6:6c:af:8a:c3:26:c6:
                    5f:94:8d:f3:21:16:5f:42:84:ae:2b:27:71:c2:48:
                    f0:12:c3:31:bf:ce:23:16:b6:8a:a3:98:06:0d:06:
                    29:8e:05:4e:00:de:92:d2:db:fb:74:14:dd:6f:c8:
                    76:b1:00:a6:7f:d0:60:d1:a1:eb:a9:9a:9a:c2:cf:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:34:75:48:C5:64:23:0A:B6:B3:53:33:5C:94:EC:0A:AA:5B:1E:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aa2483a-0310-4f8b-813f-9aa1272e40a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         be:4f:49:9c:8b:c6:ce:8a:39:bd:30:b5:fc:d3:d8:39:22:bd:
         a2:68:33:cd:eb:ca:ba:91:b5:fe:0a:6e:90:12:f2:27:63:9d:
         05:6f:48:ac:b4:d0:ff:ee:b5:06:46:47:a5:c4:c9:7d:a7:9f:
         40:4e:f9:78:d6:ed:35:60:46:ad:a0:c6:c1:4b:6b:dd:35:b6:
         0d:36:8e:2e:c2:ce:03:8c:ce:56:2a:6d:de:67:35:16:60:f4:
         de:d8:40:8f:55:c1:98:60:b6:e5:e8:0d:ba:83:c7:e2:9e:e9:
         16:d7:be:a7:79:66:8e:7c:56:6c:48:82:11:6f:b6:74:b5:71:
         65:60:9d:3d:c6:b9:e3:cf:e8:bf:c5:6d:3f:2e:9b:67:d4:dc:
         ac:21:7a:49:38:3a:ba:ad:3d:c8:ab:d4:e1:4c:ea:85:ec:a4:
         65:0c:89:2b:d6:4b:1e:51:a7:86:c4:99:ee:fc:93:5e:bd:5a:
         82:0c:f9:8d:46:bc:83:3f:59:95:22:2b:93:a7:7f:c9:92:39:
         65:99:b6:c4:5a:0f:bf:99:b9:07:00:f4:f1:e3:14:df:e7:3a:
         9f:ef:35:87:a6:b7:82:6c:cc:8c:b2:99:06:e0:95:f0:52:e2:
         88:38:9c:dc:22:39:f6:85:ce:a5:ce:f9:dc:4d:fd:8b:f8:8a:
         17:c8:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 17:33:41 2025 by rpki-client