This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559c8a4f-64b4-4d37-b318-b50f637199a7.roa
File:                     559c8a4f-64b4-4d37-b318-b50f637199a7.roa (raw, json)
Hash identifier:          IU/GJoj0G5HKMJymGcMJflAUPVA1GEBSZpUaJHbZTmI=
Subject key identifier:   02:90:41:24:AD:5E:30:7E:EE:5B:84:19:41:7F:9A:E0:25:18:E7:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E92C2CE9A19B578EC8E1C53859783C139C8FCC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559c8a4f-64b4-4d37-b318-b50f637199a7.roa
Signing time:             Sun 07 Dec 2025 01:31:00 +0000
ROA not before:           Sun 07 Dec 2025 01:31:00 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:92:c2:ce:9a:19:b5:78:ec:8e:1c:53:85:97:83:c1:39:c8:fc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:31:00 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=1ae5e5698e6c9c4685754a1ca749fca5bd1d47afa88d3e219400bc5386796585, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:03:ef:44:d5:3d:84:ab:e2:0f:3e:cb:2d:
                    59:32:44:d9:a8:05:7d:4b:a3:b8:29:08:d7:18:cc:
                    cd:69:b4:1b:bb:b7:da:90:72:6c:36:3c:b4:8a:58:
                    13:bb:05:e3:32:37:6e:61:35:39:3b:ff:ac:76:cf:
                    b5:ad:7b:5d:01:43:c4:35:b8:99:f4:f5:99:b3:e5:
                    48:e9:3e:bc:17:0d:39:4f:a4:c4:a4:03:82:64:15:
                    0a:bd:d1:08:3e:06:7e:1c:37:a0:72:8e:f4:d2:ea:
                    77:47:91:fe:8b:0c:9f:38:b9:b8:50:68:40:45:8a:
                    79:9a:41:cd:99:7e:3d:25:40:bf:2c:36:79:2e:d7:
                    1c:33:86:59:6b:b5:0b:d6:ab:28:73:e5:f2:a2:a5:
                    36:25:3f:9c:11:f1:3f:7a:75:4a:83:3d:b9:7a:51:
                    1f:20:1b:3b:58:6e:67:d1:0b:89:77:d4:df:21:b8:
                    ef:7a:01:d6:cf:f5:2e:30:94:53:8b:65:2f:a5:11:
                    fd:dc:dd:1c:d4:88:8f:37:09:fe:ef:6e:92:63:9e:
                    81:db:90:19:ac:33:ca:5d:44:a1:88:94:b1:84:7a:
                    f8:c2:af:b1:d1:ed:5d:da:e6:1a:75:06:39:44:8a:
                    f6:94:a6:39:32:5f:28:4c:d6:d9:91:25:e1:2c:97:
                    ec:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:90:41:24:AD:5E:30:7E:EE:5B:84:19:41:7F:9A:E0:25:18:E7:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559c8a4f-64b4-4d37-b318-b50f637199a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:b4:f1:58:be:b3:bb:02:0d:21:bf:df:cf:7f:d4:16:33:99:
         3c:7c:44:f5:4d:f2:74:67:df:ee:7e:bc:2d:1c:b0:52:99:86:
         77:80:a2:fd:61:a2:f2:c6:76:61:c7:8c:35:a5:6d:e0:af:0f:
         f3:d3:8b:46:f9:68:b1:1e:c2:b1:e2:ae:d6:36:76:3e:48:84:
         50:be:7d:06:04:ff:f5:74:62:ba:9b:a5:29:0b:1a:da:50:33:
         ff:f2:2f:5e:68:fd:7b:ac:a1:ad:6a:6f:0c:bc:ef:78:99:05:
         2c:51:71:5a:e7:7a:f2:6f:46:43:f3:cf:c4:e1:80:3f:e3:51:
         b2:54:68:3a:55:2c:ed:77:a4:0e:b0:e1:16:28:7d:37:80:2e:
         9a:f8:d7:6d:15:3d:83:08:48:d8:30:34:1b:91:01:ad:db:5c:
         f8:7e:40:48:93:a6:82:ec:44:0a:e1:9f:c8:53:a0:18:65:28:
         3e:d6:53:fb:4b:8f:67:c5:da:c1:1f:3b:6d:0a:a2:51:c0:60:
         b5:2e:42:f8:8d:72:0f:d5:48:ec:e5:69:cd:14:67:99:62:28:
         fc:87:82:11:a6:2e:85:04:03:77:6a:70:cc:2e:37:5b:cf:52:
         d4:40:cf:f6:8d:35:3f:ef:28:69:5e:78:dc:09:d0:5b:71:bf:
         7f:dc:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:24:14 2025 by rpki-client