This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa
File:                     52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa (raw, json)
Hash identifier:          7/8GI1VFzo7LZOyJVgjno4F/IGnWyXaIxtxYbfS9fqE=
Subject key identifier:   68:78:38:E4:55:64:53:44:F4:E5:DA:78:25:F8:3D:0A:81:1C:CD:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37F04731C7706188686B41D9EAEF5A2950FE6619
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa
Signing time:             Wed 19 Nov 2025 00:10:41 +0000
ROA not before:           Wed 19 Nov 2025 00:10:41 +0000
ROA not after:            Tue 17 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.22.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f0:47:31:c7:70:61:88:68:6b:41:d9:ea:ef:5a:29:50:fe:66:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:10:41 2025 GMT
            Not After : Feb 17 23:59:59 2026 GMT
        Subject: serialNumber=fe9520eb3a26337e9c6cd2051196068092cebf2400b339804efe6ae205f68933, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:72:5a:7d:d3:9d:ad:1b:4d:33:ac:4f:fa:
                    ba:01:c7:1b:9e:2f:8b:c7:25:32:d7:85:04:2a:b0:
                    4c:57:d0:55:05:b3:b4:df:3a:a6:e6:99:ed:9c:ae:
                    14:3b:87:29:d4:53:34:4c:5a:ac:ee:d1:19:90:0b:
                    d2:c5:6e:49:21:ce:1f:4c:35:35:54:e2:d6:ec:61:
                    b8:a1:ff:48:1c:37:b7:a6:b1:ef:c6:fc:01:0a:32:
                    de:69:85:fe:cf:db:f2:51:30:4e:ab:86:58:a4:fc:
                    59:31:b9:10:dc:a9:b3:09:a0:f6:67:44:61:00:c1:
                    dd:9f:1b:2c:fc:4b:3d:b8:17:4d:1e:f5:0c:1d:0a:
                    4c:0a:97:7b:58:74:fd:48:5e:56:32:01:1f:fd:d5:
                    77:d4:25:4d:93:e8:7c:66:00:0a:27:68:5c:85:52:
                    25:7d:f6:c0:5c:ca:93:13:55:ac:48:ca:62:d9:8a:
                    22:12:71:a3:54:36:0b:c4:c8:65:3b:7e:f4:44:21:
                    65:96:65:24:5a:1d:2d:cc:0b:d6:5c:56:3e:dc:79:
                    e9:24:90:b6:cb:13:81:61:20:7f:19:31:ea:49:4e:
                    6d:0d:1f:35:3a:46:33:e0:4d:b8:29:77:75:28:e9:
                    e1:ab:79:b4:5d:32:eb:2d:10:24:85:77:de:43:10:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:78:38:E4:55:64:53:44:F4:E5:DA:78:25:F8:3D:0A:81:1C:CD:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:c4:dc:e3:21:26:df:cb:de:87:4f:6b:08:e6:af:d6:f8:
         0b:fa:af:2f:5f:d7:77:6a:80:95:61:ee:2e:a7:69:98:44:20:
         2a:5e:6d:fd:19:b7:a0:44:a4:14:eb:91:09:b3:17:9e:b3:be:
         00:4b:f6:57:21:c4:30:e9:03:0c:94:a2:08:2a:1a:f9:fc:bf:
         05:45:d9:55:7a:8a:de:27:54:44:7d:4b:05:5a:9c:63:6e:8b:
         24:7f:eb:22:8b:67:40:7d:8f:81:41:15:26:df:cd:6f:b2:35:
         8c:29:00:95:6d:c9:99:6e:5f:0b:46:5b:29:f7:a6:27:fd:14:
         af:fd:52:cc:ad:a5:22:8c:d1:50:4b:8b:e2:92:a1:20:7e:b9:
         8c:aa:0d:ab:cf:fa:87:7d:2f:17:fe:13:a1:4d:c8:51:bd:d4:
         15:3a:e5:02:e4:2f:37:43:7e:f6:9e:71:06:a4:fd:6b:01:d5:
         1b:8c:d1:ea:a3:96:31:98:9e:09:89:89:c7:4b:47:bc:fe:c0:
         b5:ca:c1:23:77:88:84:a7:7f:52:eb:48:ff:f3:f2:d7:5c:d9:
         b6:ba:b3:00:7c:59:d5:7d:0c:9a:05:c4:3d:a1:9d:34:6e:20:
         79:fc:09:b5:e7:b8:61:66:14:b9:82:4c:ea:00:7f:3d:66:86:
         71:7f:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 29 10:21:43 2025 by rpki-client