This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa
File:                     461512e0-a72b-4e95-b675-27ac531c5460.roa (raw, json)
Hash identifier:          Vy83IHUTJPBV6Z8FiTDL7p7tNrSHsoT2VQ5BdHYfNkM=
Subject key identifier:   CA:88:A2:7A:69:2C:29:9A:6C:D9:2A:02:9E:08:0F:AD:A8:94:05:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5CF795EDBB53375A87B3A5761A70C89BB2CFB60B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa
Signing time:             Sun 07 Dec 2025 00:21:19 +0000
ROA not before:           Sun 07 Dec 2025 00:21:19 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.115.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f7:95:ed:bb:53:37:5a:87:b3:a5:76:1a:70:c8:9b:b2:cf:b6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:21:19 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=63749947292efb401566ac250b03c2906a3a236dbd16428c40aa5dc13c5e7f5b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:7d:b9:f6:27:0c:ac:57:04:5c:c1:a6:b5:
                    6f:d2:cb:bd:ba:6e:e9:aa:97:b8:f5:0b:1c:ec:2e:
                    19:ca:1c:90:b4:b5:d2:06:fa:fb:c8:ea:97:0d:0d:
                    3d:0c:6e:82:48:11:77:86:6a:48:2e:fb:aa:51:e4:
                    fb:4f:2a:ca:d2:c1:1c:a7:1d:24:0b:5d:50:64:47:
                    67:cc:2c:40:c6:5d:b0:89:81:06:84:a5:cf:25:c2:
                    3b:35:40:0a:f7:4c:51:c2:0d:33:c9:b7:b5:52:fd:
                    8a:05:cf:21:ec:23:7c:54:8a:69:25:89:2c:8e:d8:
                    b2:16:d6:ca:e2:83:69:10:15:69:74:00:fb:da:25:
                    83:ad:af:66:9a:bd:63:0a:e7:1a:97:20:1e:34:db:
                    39:63:aa:c3:51:6d:28:c4:a6:b2:b3:a6:12:84:d6:
                    8d:61:a0:8c:9c:c3:ad:cd:e4:5a:83:f7:87:e6:85:
                    1e:45:e6:ec:d7:cc:41:7c:f3:78:18:a5:d5:ff:9b:
                    8b:40:58:79:1b:08:e3:65:7a:ad:82:bd:f1:26:76:
                    e5:de:36:e3:aa:43:b4:63:ee:80:3d:9c:45:cb:1b:
                    4b:18:28:a2:de:e4:8c:c1:41:0d:1c:00:a7:f6:72:
                    a3:52:4f:39:60:06:3f:10:71:15:f2:3d:18:61:85:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:88:A2:7A:69:2C:29:9A:6C:D9:2A:02:9E:08:0F:AD:A8:94:05:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c0:bc:96:48:dc:02:aa:be:31:c4:a6:61:ba:64:20:8f:c6:3a:
         1e:89:3f:c5:dd:db:23:4d:77:cf:7b:02:c7:5d:db:a0:27:71:
         33:25:59:77:f9:9c:d6:28:07:1c:80:55:0d:78:d9:b9:1c:3a:
         f6:38:02:37:11:6d:40:c6:e8:f1:11:77:07:0e:be:9c:3f:d1:
         0c:83:5e:48:be:63:ad:31:dd:99:47:f4:74:3f:f7:0b:54:e0:
         27:95:32:d8:34:fa:1d:14:e5:2a:65:2f:05:d3:2a:3b:9a:a3:
         b4:28:88:47:46:e3:06:fc:27:45:6c:55:31:7d:98:a0:29:40:
         e0:b0:73:69:2e:2b:7c:49:22:fe:e3:2d:b3:f6:7d:bd:53:32:
         45:87:f3:24:22:ea:1b:4d:f2:3a:ee:4c:67:cd:1e:8c:06:fa:
         6d:1a:3b:00:db:68:b8:43:51:25:ed:50:a8:c5:3b:d3:9c:2f:
         1d:dc:c2:95:6b:1e:19:32:45:ba:eb:3b:df:9c:87:cf:eb:1d:
         48:6f:4d:5f:d5:b8:3e:46:c2:60:55:ec:db:4a:cd:3a:4e:06:
         8b:ea:0a:82:ce:49:6b:4c:29:d4:93:63:81:b6:72:9b:ea:9f:
         26:78:15:4e:54:46:c7:ab:01:b5:a3:e0:c6:a4:ef:2c:65:09:
         83:f1:b7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:34:12 2026 by rpki-client