This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ddd28bf-a4b9-446f-94ab-e6c873a5128a.roa
File:                     4ddd28bf-a4b9-446f-94ab-e6c873a5128a.roa (raw, json)
Hash identifier:          +jLTR8HkO9CLLWS4QwdDr1W2WhaAQD3YVkYCBZc1a5o=
Subject key identifier:   1A:6A:47:CD:6D:2F:A8:C7:D5:9A:AA:86:7B:16:AA:38:63:D6:6F:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       105FED2DF46A37112010697211DFC12750C90BE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ddd28bf-a4b9-446f-94ab-e6c873a5128a.roa
Signing time:             Sun 07 Dec 2025 01:51:28 +0000
ROA not before:           Sun 07 Dec 2025 01:51:28 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5f:ed:2d:f4:6a:37:11:20:10:69:72:11:df:c1:27:50:c9:0b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:51:28 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=b87f4d2eae562741736ff81f912a08e7dd16bed0f1e4e93e4636595f1fd5e60e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:a4:46:6e:23:3c:19:ea:02:5f:d2:57:07:
                    1c:88:93:01:7a:bb:72:7c:1b:1a:71:fa:e6:d0:a5:
                    71:2a:e9:f3:4f:5f:66:27:88:ef:3e:68:5c:37:3b:
                    6a:50:06:43:69:19:d7:2e:50:88:1d:e0:8a:e4:84:
                    79:bc:50:0b:40:2b:b1:b6:23:ac:5b:4c:e2:98:cc:
                    d5:ce:5e:c7:55:30:79:ec:ad:7c:30:6a:d4:c9:64:
                    83:d9:54:01:7d:a2:62:7f:2e:6a:74:b5:85:b7:e1:
                    4f:8f:74:7d:82:3c:40:ca:28:d2:41:3e:b5:76:40:
                    78:00:63:22:62:d3:cb:51:93:8c:8f:4d:55:cc:cd:
                    ff:a1:fd:65:1f:e3:a0:90:63:36:3a:63:3c:63:59:
                    98:25:a4:c7:5b:0e:60:27:14:a4:fb:d9:ca:a3:6c:
                    1a:41:e7:04:aa:cb:e5:dd:66:ba:1a:b6:d4:27:20:
                    28:07:9c:6d:aa:95:a0:54:42:a1:87:48:de:ab:3c:
                    8b:06:a4:1c:ed:86:40:9f:57:ea:66:df:c7:f8:7d:
                    19:e3:9d:87:1d:72:73:ab:f0:6a:1d:75:e1:2f:c3:
                    58:76:3c:10:44:99:f1:52:5a:2f:50:b6:5a:c3:ad:
                    c0:2d:16:f6:18:ab:f9:5c:6a:78:0d:c7:8b:15:a5:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:47:CD:6D:2F:A8:C7:D5:9A:AA:86:7B:16:AA:38:63:D6:6F:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ddd28bf-a4b9-446f-94ab-e6c873a5128a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:1a:fe:58:bf:30:1c:6a:35:16:22:b3:ab:73:84:e9:96:82:
         86:29:b5:79:89:7d:99:f7:01:89:6f:64:88:1b:89:e3:64:96:
         24:62:55:12:ff:32:67:2e:2f:dd:2d:01:54:43:c4:8e:94:4b:
         83:03:d6:d0:00:97:cd:cf:99:68:a4:ee:a2:f7:8c:be:11:8f:
         73:77:dd:b9:9f:86:35:7e:eb:12:dc:ff:fb:7e:53:60:b9:19:
         9a:a9:f6:5b:bb:c8:b8:bb:03:2c:6b:7a:92:8a:c8:59:d1:b5:
         a0:f5:2e:00:4b:3a:45:33:58:ad:4b:e2:82:93:61:45:62:3f:
         36:f4:72:e1:13:17:60:5d:bc:49:2d:66:11:aa:cd:43:3f:6e:
         23:14:ca:57:2a:56:03:fd:ed:ee:77:b4:3f:64:b8:9f:2a:fe:
         f6:3d:98:ce:4b:61:2f:65:90:b6:b1:3b:e3:48:bf:05:54:ff:
         0c:03:aa:67:f9:91:bb:94:98:16:5e:c8:ef:e7:98:6f:9d:f8:
         95:e2:c1:ea:af:19:1a:60:2f:42:75:6f:15:7a:65:01:61:d0:
         ac:2a:cd:32:c9:69:9c:fd:d0:9b:c6:c0:57:fd:f9:c1:f7:2a:
         66:cc:42:a3:66:6e:85:34:6e:90:57:64:78:1f:37:04:78:26:
         e7:9e:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:52:34 2025 by rpki-client