This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4963540b-ec7a-49a7-9f72-11cb956c55de.roa
File:                     4963540b-ec7a-49a7-9f72-11cb956c55de.roa (raw, json)
Hash identifier:          H298bxLs7EfYX0Llb3z0+LyV0PY2vrxvh2Egrspg1RA=
Subject key identifier:   30:51:C8:61:8D:5E:AB:D2:7A:51:C8:4E:27:BC:3E:68:39:01:B1:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C063E5812C14C6FDE82459D8B7ECFEECAB9BCE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4963540b-ec7a-49a7-9f72-11cb956c55de.roa
Signing time:             Wed 10 Dec 2025 00:10:36 +0000
ROA not before:           Wed 10 Dec 2025 00:10:36 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.120.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:06:3e:58:12:c1:4c:6f:de:82:45:9d:8b:7e:cf:ee:ca:b9:bc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:10:36 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=d5fd284600c537df0ea1ecd80afb17ad9cf32b57516da27160cc755a6120ec11, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:66:7b:ce:45:f4:f4:14:5f:07:cd:2f:7f:
                    0c:cc:e4:fc:fc:c9:6c:10:79:ab:91:a5:2b:a1:06:
                    19:4b:f0:b9:96:11:d1:79:f2:15:91:54:b9:d8:f8:
                    37:c6:25:d5:46:b4:97:b7:1a:31:4e:ec:81:b4:f6:
                    d6:a3:9e:e2:a5:62:3c:b3:d7:ad:24:21:f3:73:ac:
                    23:09:91:a2:9a:1c:3b:6b:5e:fb:0f:e8:35:e1:88:
                    25:b0:09:45:e2:1c:b4:11:a7:c5:df:e4:5c:6c:51:
                    a0:71:44:1e:06:3d:36:3c:67:b3:f5:09:21:f7:1b:
                    7b:1b:43:f1:62:d1:9e:3d:08:b2:dc:a1:54:48:f0:
                    e1:ed:a2:c5:88:91:c1:32:a1:e4:d5:4c:ba:1c:4f:
                    83:d7:c1:90:e7:fd:96:f8:94:97:b1:a5:46:b5:a3:
                    b2:e9:cc:11:36:f3:7c:14:24:d5:f0:89:13:31:ad:
                    39:df:40:00:18:ab:9e:70:52:58:b4:f9:d1:a6:07:
                    c7:e3:0d:08:a6:3e:0f:51:b7:10:28:b3:15:52:0b:
                    42:46:a5:f8:51:48:77:00:6b:c7:ef:c3:be:09:65:
                    96:4e:ef:e2:8d:53:43:6a:85:97:c8:af:34:25:40:
                    c4:d5:ea:54:4e:a9:eb:45:eb:45:77:08:62:bc:b2:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:51:C8:61:8D:5E:AB:D2:7A:51:C8:4E:27:BC:3E:68:39:01:B1:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4963540b-ec7a-49a7-9f72-11cb956c55de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.120.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:ea:8a:a6:a6:51:fb:3f:07:7f:05:3b:16:f3:87:e9:10:28:
         7d:cd:b8:eb:08:16:cb:00:12:a6:61:8b:d0:1c:61:ed:1b:dd:
         d7:84:02:85:19:05:cd:65:92:d3:1f:2e:0a:02:1c:b7:40:33:
         ba:cb:af:ae:13:78:66:01:d6:4f:33:fb:80:5d:1d:72:68:86:
         74:3b:5b:22:9c:d2:60:18:d6:ce:d4:93:01:cc:47:d5:87:56:
         09:cb:bf:35:fd:6d:0a:cc:70:73:23:10:b1:5e:87:0e:fa:b7:
         99:4d:10:d7:f1:f5:7b:ad:66:29:ab:55:7e:b1:83:7a:36:a8:
         3c:00:c3:3d:bf:97:d0:9a:06:09:8a:f8:73:8b:32:d7:94:4f:
         8d:fd:ea:12:45:bb:8b:6a:b3:74:29:15:67:4a:24:fa:0b:63:
         07:be:d5:58:a8:26:91:17:25:24:46:b2:35:ca:bb:4d:c4:18:
         6b:ee:a7:f7:46:14:94:c6:32:09:b1:f8:e3:f7:c9:b2:ad:9d:
         2d:e7:63:55:dc:14:b8:ee:59:b3:6c:01:ad:c5:ba:d7:bf:9e:
         c2:37:b9:29:f4:f4:fa:ea:a8:55:22:da:31:12:53:5f:b1:0a:
         34:fc:b1:a6:f0:98:00:a9:ff:bb:f2:66:bf:91:b2:6f:07:34:
         ec:3b:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:28:28 2025 by rpki-client