This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a67a16-ec65-4294-84bf-ad2edc5d1909.roa
File:                     74a67a16-ec65-4294-84bf-ad2edc5d1909.roa (raw, json)
Hash identifier:          uKSi3yjlv5YhH+kX0g0g6x/8KMoqpYtQiibY1cO+TKI=
Subject key identifier:   59:EC:04:FC:F6:2C:C3:1B:B6:D1:96:FC:6E:CD:77:DE:2A:EC:F3:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52B76A6F0D062F9FF5C12FFCF1D6B9F9326B2128
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a67a16-ec65-4294-84bf-ad2edc5d1909.roa
Signing time:             Wed 10 Dec 2025 00:11:01 +0000
ROA not before:           Wed 10 Dec 2025 00:11:01 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        43.243.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b7:6a:6f:0d:06:2f:9f:f5:c1:2f:fc:f1:d6:b9:f9:32:6b:21:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:11:01 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=66b14700ee12996428e49c5a98f485ae3ab45327b845aaf820825940cff083ad, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:2a:c5:be:25:b7:cd:1d:f9:df:4c:97:b8:
                    f2:ad:3e:a8:a9:24:c9:71:79:35:90:da:88:12:56:
                    62:71:b7:ea:de:04:fa:98:d4:c4:7d:6a:15:3a:05:
                    50:52:b2:e1:7b:3c:77:e1:76:01:6e:71:b8:2b:eb:
                    14:f1:de:c9:49:bc:3d:f8:7c:bb:7d:5a:41:b0:98:
                    5f:13:e8:44:0f:84:d7:ae:76:1b:33:44:72:2f:3c:
                    5e:23:a8:4f:10:96:2c:34:8d:06:fa:2e:ae:8b:02:
                    aa:5e:19:6a:86:f1:6f:27:36:99:c1:5b:4c:b0:83:
                    db:52:ad:4f:10:9f:f3:7e:90:61:10:34:e5:a3:0f:
                    28:ee:85:a7:49:64:82:b9:14:42:67:1f:f5:15:d5:
                    8c:4f:46:21:e5:83:64:2a:0d:eb:b7:75:a1:c2:2b:
                    25:a6:ea:d3:8b:78:1e:dc:3e:3b:d6:90:82:a5:ad:
                    a3:27:ca:cf:90:91:c9:fe:ea:ec:83:63:4d:6d:da:
                    a0:1a:b0:30:e3:0f:19:3e:a0:5c:da:33:f9:47:86:
                    09:d9:f4:bc:60:d8:50:7f:8f:92:cf:1f:ed:0e:67:
                    23:6c:28:30:c2:91:06:a5:54:e7:0d:31:4b:17:1a:
                    78:15:2f:55:51:d6:02:10:83:c2:42:af:75:9a:76:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EC:04:FC:F6:2C:C3:1B:B6:D1:96:FC:6E:CD:77:DE:2A:EC:F3:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a67a16-ec65-4294-84bf-ad2edc5d1909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:86:82:77:9b:c2:48:ee:b0:14:76:ad:57:88:c3:5f:fa:3e:
         3b:29:91:ac:ed:8e:8c:ec:f8:a2:6f:65:62:2c:22:f5:bc:4d:
         2b:6e:ce:b0:1a:10:41:12:bc:f0:0c:e1:ed:3f:a9:4b:cb:f5:
         a8:c4:43:92:2e:d4:30:ae:9a:97:e1:c8:de:b5:ef:88:08:fc:
         63:e4:ab:07:70:09:67:0b:87:24:63:dd:d6:33:4c:51:63:07:
         b9:ca:28:55:ed:8f:64:16:1f:72:08:75:0d:9b:b6:2e:9a:b0:
         e0:40:4c:90:c4:61:d6:60:62:99:2c:5d:81:80:5e:20:43:1f:
         29:a0:f5:49:4d:3a:0b:8b:cb:c1:83:9c:7d:12:f6:29:89:48:
         be:70:eb:04:68:f2:fe:f9:ef:53:c5:03:5a:70:96:65:b6:d4:
         c6:50:20:96:76:ac:9f:45:58:83:1f:5f:07:25:e0:ab:53:5c:
         20:c8:8d:fc:af:c7:da:26:e8:00:36:8f:da:51:3d:f2:c8:31:
         b9:87:74:27:35:bb:8c:23:57:30:3a:80:85:7a:01:a9:a2:11:
         1d:8f:1b:3a:6f:ee:d3:d7:0b:d2:24:74:48:ac:15:31:2c:3c:
         e3:eb:2b:0e:e5:cc:2d:9c:09:d5:3a:8b:e0:a3:be:41:1d:22:
         ad:2d:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:01:46 2026 by rpki-client