This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643f38bf-7102-4875-9b05-6243ebeaceb0.roa
File:                     643f38bf-7102-4875-9b05-6243ebeaceb0.roa (raw, json)
Hash identifier:          EXaupPzLny4eTAS6/Pzc+Xg3x3xvI+3lqv66n4ytbts=
Subject key identifier:   AB:05:00:B4:5D:7B:13:8D:15:1B:1A:BD:39:7E:8D:DE:78:5B:33:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D0873E9B04958C170F8D45064F8960A1039180B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643f38bf-7102-4875-9b05-6243ebeaceb0.roa
Signing time:             Thu 13 Nov 2025 00:51:55 +0000
ROA not before:           Thu 13 Nov 2025 00:51:55 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        75.2.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:08:73:e9:b0:49:58:c1:70:f8:d4:50:64:f8:96:0a:10:39:18:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:51:55 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=b172bb6a7fd6dd412d77ccc650534a0ff257fef22542ed1663345ae8765bc418, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:c0:e6:13:d1:76:79:78:e5:ff:44:c7:f7:
                    fd:e9:8a:45:ad:e3:80:7a:78:6c:98:fc:e7:46:17:
                    92:eb:c1:3a:11:10:f3:9b:f4:a3:e1:d0:70:c7:47:
                    38:92:77:57:7a:5c:ed:29:dd:d7:90:29:6e:b6:ea:
                    6d:2a:5e:5c:0d:e8:16:3f:87:1b:78:43:fc:d3:5f:
                    23:21:20:d9:08:e4:42:27:c1:61:fb:42:51:05:a6:
                    18:3b:0a:42:fc:28:48:d4:ea:84:4c:29:af:32:6d:
                    8c:c7:11:41:72:34:e5:0a:86:b3:7a:19:f6:48:57:
                    67:c6:81:90:2a:d2:c3:3b:b3:7d:d4:ed:10:70:a9:
                    2a:14:04:6f:db:f8:27:0a:0e:8e:51:13:f4:e3:b3:
                    2b:a6:b7:15:60:8f:36:59:2f:3f:40:d4:03:c3:b1:
                    8b:8e:c5:8d:03:12:07:a4:f3:b2:76:8e:f1:a5:f9:
                    f9:fe:c4:11:8f:8a:e4:7f:02:3a:f6:5d:c2:dc:f9:
                    72:d2:f0:39:ff:ec:ba:c0:21:d3:1f:5f:b8:38:61:
                    74:42:fa:0f:03:47:fc:42:82:83:b1:6a:28:18:e3:
                    38:d3:bd:4e:9b:a8:14:3c:13:95:b4:e8:e7:a0:43:
                    48:d8:59:dd:ec:d6:a1:cb:cc:4f:6b:48:37:33:4a:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:05:00:B4:5D:7B:13:8D:15:1B:1A:BD:39:7E:8D:DE:78:5B:33:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643f38bf-7102-4875-9b05-6243ebeaceb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:44:5c:bf:0a:c0:74:6f:ce:43:19:88:3c:ab:05:ea:44:81:
         34:80:af:20:3b:e3:32:1a:7d:a0:3e:a8:c8:f8:ec:b6:35:10:
         92:95:8f:6b:00:89:44:17:ec:3f:a9:7d:3e:48:17:be:0d:b7:
         75:30:80:7f:96:77:3f:1f:6f:07:24:18:d9:59:17:9c:bc:30:
         f6:f6:82:b7:df:81:b2:31:ea:eb:20:02:01:10:69:c0:7f:1c:
         88:e4:93:4b:64:31:21:b6:e8:b8:37:01:05:84:23:d8:87:db:
         27:c5:da:e6:70:c6:f2:fa:96:df:2c:7a:ec:38:7a:b7:15:29:
         7b:26:c1:70:52:0e:60:82:53:32:ec:a3:95:36:b3:4b:8f:48:
         7f:ef:17:ce:2f:73:ba:a7:ac:e9:f9:3e:21:f8:ab:05:95:5d:
         51:0d:91:6e:2a:9c:f9:50:11:b9:f2:82:55:1f:16:48:83:11:
         50:c4:c2:34:31:54:6f:44:0d:8b:52:c3:70:cd:a6:29:19:2b:
         69:0b:f8:0d:34:32:a0:d4:8e:ab:41:a3:a9:d4:61:11:68:c3:
         23:72:9a:69:19:8b:1c:a9:f3:7a:c0:7b:09:55:aa:ae:36:b8:
         10:09:5b:d2:01:96:7d:3e:84:ba:11:2d:09:a4:06:c8:c5:a4:
         20:07:aa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 17:35:08 2025 by rpki-client