This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a330adc-2d44-48c2-85f1-2237901b6ea5.roa
File:                     5a330adc-2d44-48c2-85f1-2237901b6ea5.roa (raw, json)
Hash identifier:          TQc5QiczGkg4Z8w+QYi+P+MsQ6yXmpWu6J22jwocxPY=
Subject key identifier:   62:4F:91:E5:F0:85:B2:C2:27:B8:AC:E3:5A:DC:90:32:2C:42:44:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68B366A96AE9F8FE52CD88A0243D8782F4E46E4A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a330adc-2d44-48c2-85f1-2237901b6ea5.roa
Signing time:             Sun 07 Dec 2025 02:21:07 +0000
ROA not before:           Sun 07 Dec 2025 02:21:07 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        110.239.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b3:66:a9:6a:e9:f8:fe:52:cd:88:a0:24:3d:87:82:f4:e4:6e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 02:21:07 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=73f81b6fc18a0c72bc360548af8591eaa31b0214b4218254347fea2b566edc9c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:9a:26:2a:04:46:fa:85:6f:40:9b:02:4a:
                    f8:42:ff:31:9d:80:d4:9d:85:50:73:f8:82:1b:ff:
                    1f:35:5b:f9:46:c7:6e:41:65:d5:80:6b:3e:3b:8d:
                    93:1c:a1:bf:8e:75:43:b7:4f:2b:d0:2b:bf:2a:a5:
                    93:5d:f5:54:96:61:d4:9b:5f:4e:18:43:2d:83:f1:
                    cc:ee:27:de:81:d1:2c:28:a5:a2:a3:87:81:56:a2:
                    29:35:e8:c4:01:d4:89:98:1b:c8:2a:bf:9a:3d:8f:
                    59:6f:8b:05:fc:c9:32:07:81:3e:2f:96:e4:d9:9f:
                    fb:77:6c:30:19:e2:5a:01:82:e5:29:b3:2a:23:31:
                    bc:03:4c:38:fd:3d:e3:f1:78:c5:a6:3a:18:b9:40:
                    61:6d:1b:ff:52:84:7c:44:ae:fd:1f:82:20:e5:63:
                    c2:a4:4a:6e:6d:02:1c:10:4e:78:1c:43:6c:7e:d9:
                    c6:ca:8a:49:c4:ed:99:7f:cb:9e:67:e6:17:bd:c4:
                    bb:c9:bf:de:42:31:eb:80:af:97:d4:72:36:04:a4:
                    61:70:6f:27:63:6d:78:5d:69:75:eb:f4:c4:7c:67:
                    69:0c:cb:44:c7:98:43:c2:65:12:6e:fd:57:d3:ec:
                    b5:e7:8e:da:63:60:1c:18:4f:00:59:77:d8:5c:71:
                    12:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4F:91:E5:F0:85:B2:C2:27:B8:AC:E3:5A:DC:90:32:2C:42:44:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a330adc-2d44-48c2-85f1-2237901b6ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.239.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:93:a2:97:76:e3:0a:33:e9:29:90:fe:16:4e:61:f7:97:0b:
         d2:50:9f:ca:ca:bd:1d:d9:31:e4:7a:24:76:5f:56:ea:01:5c:
         10:5a:a6:5e:aa:bc:d4:4c:07:50:02:ef:bc:6b:bc:90:4b:fe:
         aa:3e:05:85:26:9d:75:8b:1e:be:52:6c:7e:a9:eb:a5:9c:ae:
         bf:e2:9b:c4:ed:54:99:37:cc:0c:6c:66:15:7c:85:2e:8b:ba:
         ff:50:9f:46:9d:d8:06:47:88:36:43:d9:78:44:17:55:37:48:
         fb:36:1b:ef:50:46:b0:70:2f:f0:47:de:1b:d3:31:9e:00:f9:
         95:26:05:ab:eb:a6:95:be:1f:f8:0b:b6:f1:b6:54:5b:61:6a:
         ad:9b:5e:ec:58:e4:97:8f:70:cc:ec:7f:81:d2:51:91:51:22:
         a1:be:cf:61:17:e8:f5:3f:38:35:01:ed:5f:75:02:07:26:e5:
         08:54:39:0b:98:44:28:0e:85:fe:cb:17:af:f9:7c:33:1d:f0:
         77:ba:54:e8:39:d0:6f:65:14:44:a0:06:0f:28:81:b1:cf:11:
         1f:e5:a6:34:93:82:b6:28:31:dd:57:59:04:b6:7e:94:b8:aa:
         7d:11:35:64:c7:a4:6e:75:8d:cd:a7:43:fd:8a:94:2a:3e:37:
         a1:0c:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:40:33 2025 by rpki-client