This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47ea71af-c756-4483-ae88-621f2adb4c49.roa
File:                     47ea71af-c756-4483-ae88-621f2adb4c49.roa (raw, json)
Hash identifier:          fLvrwq9aHcGaItxoiiVTaDnzYQiJLEdbyPon3AJt7FI=
Subject key identifier:   C6:9D:54:42:A3:56:2B:3B:90:67:A4:3D:D4:BB:F4:F9:8A:35:B1:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3388F49FB81043A25993BAAA10085B1ABD73C975
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47ea71af-c756-4483-ae88-621f2adb4c49.roa
Signing time:             Mon 08 Dec 2025 00:10:03 +0000
ROA not before:           Mon 08 Dec 2025 00:10:03 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        104.153.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:88:f4:9f:b8:10:43:a2:59:93:ba:aa:10:08:5b:1a:bd:73:c9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:10:03 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=1f073d5dcec2094d8c1d749f404c807b874fc069e110ff582d40da31030de114, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cc:57:7d:af:5c:be:c9:dd:eb:aa:ca:63:a4:
                    59:7e:58:5f:11:85:fe:cd:4a:64:aa:17:0c:6b:d2:
                    66:40:a9:65:75:5f:e3:d0:93:35:40:2e:2e:dc:3a:
                    db:2f:38:a1:63:1d:7a:10:57:94:f6:01:aa:44:8d:
                    3a:9e:84:7f:bd:7f:58:2a:bb:e3:29:b2:27:95:12:
                    20:42:74:8c:c4:74:7e:f5:6b:a2:cb:f4:03:af:66:
                    a7:26:a3:d9:2d:f2:d8:f9:0f:32:93:19:04:3f:4a:
                    f7:e2:2b:fa:1f:f9:29:d4:b0:dd:c4:93:c4:8c:3d:
                    2c:b6:c7:b2:10:78:6d:a5:58:8f:28:04:13:85:7b:
                    cc:e1:fc:66:a0:4a:16:5c:c4:b9:ea:cd:00:35:fb:
                    55:c3:84:9e:ef:e8:82:bf:5f:95:d8:42:ef:c7:93:
                    4d:cd:a0:06:62:82:6c:12:67:a0:93:cb:b2:5c:62:
                    db:12:7b:b0:52:4a:3c:63:98:5f:20:09:13:ac:7e:
                    8d:fe:04:fd:4f:ab:3d:03:b4:0b:ec:75:2d:54:31:
                    1f:c8:f9:2c:01:0d:01:1e:bb:48:1e:1e:bb:8d:a6:
                    a6:26:dc:03:25:d6:e3:cb:a3:0a:0f:b2:ed:7a:c5:
                    f3:99:26:54:73:f3:f5:bf:98:4f:b8:b5:ba:0c:4f:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9D:54:42:A3:56:2B:3B:90:67:A4:3D:D4:BB:F4:F9:8A:35:B1:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47ea71af-c756-4483-ae88-621f2adb4c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:9d:83:a3:51:ed:5f:e4:22:dd:f3:85:8c:82:5d:3d:63:43:
         49:8c:05:af:93:23:24:49:f7:80:51:23:2d:8f:e8:ee:21:37:
         c4:f2:bd:5d:3c:48:c4:d3:9b:17:67:0b:58:b8:67:a4:ae:3d:
         3f:e3:91:41:e4:e1:59:8a:5c:ea:ff:3a:b2:98:5d:95:ab:0f:
         c7:a1:56:1f:67:62:60:ec:5d:a3:30:46:d2:76:5c:98:a8:f3:
         e3:9e:d0:44:b6:bf:8d:e6:84:25:50:18:30:ce:d7:17:67:e7:
         ea:0d:55:1b:25:c9:92:22:69:37:ba:11:eb:2d:5a:98:26:e6:
         4e:9c:46:a4:bf:d7:f8:8b:75:bf:ef:22:3c:2a:65:d0:db:5d:
         4a:e7:4f:6e:f6:8f:47:bb:fa:83:29:7c:72:10:c4:d7:41:c7:
         ce:c4:43:59:bd:cf:71:1e:d7:94:e0:e7:5c:4b:1d:7b:03:b2:
         0a:7a:c8:ad:b2:93:94:9d:ab:3c:ef:3f:21:84:d7:05:0c:04:
         1e:50:a2:da:11:2a:81:0e:50:52:73:77:7d:8e:ea:8f:f0:09:
         4a:75:35:df:10:bd:e5:16:67:e5:d3:2f:cc:38:4e:a3:70:28:
         08:c2:5d:3a:22:47:dc:65:93:69:84:8a:8f:dc:d0:1d:86:11:
         f4:c7:3d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:56:47 2026 by rpki-client