This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa
File:                     3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa (raw, json)
Hash identifier:          SSA/Uky2HiS8Vpcilh9TJ4cn9qsS7oE4rWeCORt0RTA=
Subject key identifier:   E4:E6:88:63:FC:3B:24:FE:6A:35:45:B5:28:73:8F:E3:98:6D:6E:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       71AFBC6ADD088640E3C015F960E54D8C73743CF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa
Signing time:             Mon 08 Dec 2025 00:40:43 +0000
ROA not before:           Mon 08 Dec 2025 00:40:43 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        63.34.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:af:bc:6a:dd:08:86:40:e3:c0:15:f9:60:e5:4d:8c:73:74:3c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:40:43 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=d3d36b52b3b3ae967942f2e69ec8bd3b8054647368ae419cb76c0c3dda0366e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:f0:ff:91:54:04:99:52:d2:e5:53:62:08:
                    64:aa:34:8d:2d:75:b1:a4:52:e6:d6:d1:09:34:3c:
                    69:ab:44:8f:4b:5b:73:1b:7e:5f:98:2d:0b:2a:ea:
                    fc:31:5c:4c:5c:84:61:93:6c:97:12:0d:e2:93:cd:
                    a7:69:a8:ec:58:58:2e:e7:cd:2c:89:2c:38:7d:5f:
                    49:7f:8c:e8:fb:ba:7e:59:de:fe:a0:c1:14:06:54:
                    ca:dc:08:dd:3c:02:08:6c:57:bd:1a:91:16:33:c8:
                    a3:2e:23:ed:bf:90:70:7d:40:83:9d:6b:74:af:41:
                    54:cb:cd:b7:2f:d4:a5:30:e5:8e:42:1e:42:ef:02:
                    5d:d7:38:f2:59:5a:28:b5:78:2f:54:d1:3d:d2:6e:
                    17:13:dc:78:98:c0:b4:70:ec:28:33:65:85:9a:b1:
                    96:64:ea:98:2c:5d:e1:42:47:bc:de:72:f2:19:6a:
                    e0:e2:a7:2d:05:1f:4b:53:58:b1:f2:a9:a3:ff:9f:
                    c9:ae:8f:a4:8c:26:4c:85:f3:5e:76:77:17:a8:65:
                    ad:f6:81:c2:fd:08:11:9f:48:e8:31:a9:bb:bf:ca:
                    a0:d1:53:e4:a4:78:6c:60:4b:63:2e:7f:47:aa:3e:
                    87:d4:1e:db:ee:b4:29:bc:d3:0a:e4:cd:c9:6c:b3:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E6:88:63:FC:3B:24:FE:6A:35:45:B5:28:73:8F:E3:98:6D:6E:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.34.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:5e:18:8d:3d:d2:36:01:9e:6e:6d:a6:f8:9c:f6:3b:c6:67:
         90:6c:98:66:bc:a3:c7:82:a7:74:8a:78:7d:55:f0:4f:3d:4a:
         fe:8f:15:48:a2:51:e9:30:86:0c:2f:74:c0:d5:fb:6a:84:cd:
         d3:65:38:77:64:cb:4e:8f:a4:15:bf:61:e6:49:20:ef:8a:93:
         47:ea:c3:55:36:49:6e:75:aa:54:e1:74:d9:51:b9:1c:ee:d1:
         57:13:80:98:69:e2:e0:06:92:fd:58:34:a1:35:9b:31:2e:c1:
         03:0f:c5:c6:5b:b2:1f:29:51:b4:2b:82:4a:43:41:6a:7d:82:
         be:b2:67:b6:04:c9:a3:0f:60:66:fa:a2:1d:14:da:82:7a:eb:
         8c:4b:d3:14:17:5b:5b:79:0c:68:36:e2:d4:9d:b4:09:5e:7a:
         f0:89:3e:b3:3f:5e:ae:91:73:0c:6c:a1:1b:c2:04:17:03:da:
         4e:ce:4b:b3:74:15:83:9b:29:27:66:78:c7:db:f7:2e:07:68:
         8c:33:82:c0:14:61:7a:fc:82:32:5d:a2:04:68:d7:5e:af:fc:
         e8:d7:6e:f5:85:88:50:b9:19:a3:ee:a8:2d:dc:dd:e8:ce:d4:
         44:b8:ac:95:99:48:b9:4b:bd:be:17:3c:56:56:6b:52:76:b7:
         2e:5e:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:32:30 2026 by rpki-client