This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa
File:                     78823995-1ea3-458b-919e-48e1b3b2cfc4.roa (raw, json)
Hash identifier:          GI52oYPdBtWOD5yjoCJqZWZZkCiVPJB8v3v7Zn0DYuU=
Subject key identifier:   D8:A6:2E:4C:7D:89:19:8F:F7:07:5E:A5:DF:D2:84:9C:FB:96:7B:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B455EB95E164898EB887B31BBAEAAD54A731668
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa
Signing time:             Wed 19 Nov 2025 00:31:33 +0000
ROA not before:           Wed 19 Nov 2025 00:31:33 +0000
ROA not after:            Tue 17 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        129.30.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:45:5e:b9:5e:16:48:98:eb:88:7b:31:bb:ae:aa:d5:4a:73:16:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:31:33 2025 GMT
            Not After : Feb 17 23:59:59 2026 GMT
        Subject: serialNumber=afdebbdf166c92a8c0a520c800c479b07f5eb2b8110a61afa9be499ba3910a40, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:03:15:ac:7f:ae:61:a6:cc:09:4e:fb:ae:
                    5a:c5:04:10:7e:6a:88:95:60:f5:7a:58:98:52:41:
                    04:b3:37:4e:96:6d:16:2f:65:b1:ba:94:a8:7d:d3:
                    9e:83:af:09:87:e6:ec:07:41:89:59:d3:55:82:a0:
                    5c:e9:62:c8:5b:61:82:f8:d1:64:5b:bd:f0:b6:80:
                    d2:34:c8:57:aa:6b:f2:50:0d:22:7d:2e:32:ac:01:
                    b3:bd:6f:20:b0:99:92:db:a5:bc:d9:14:24:82:4e:
                    d1:21:aa:fb:6a:46:28:7a:33:2c:b4:0c:21:ca:d5:
                    51:b7:12:ac:9a:ae:c9:2e:19:f6:76:8f:00:68:0e:
                    be:4e:1f:56:af:dc:5a:7f:ea:60:74:63:aa:45:fd:
                    1f:33:ce:a6:ca:9d:25:82:4c:6f:5d:ec:a3:77:27:
                    c3:20:31:04:ec:6f:3f:91:79:36:07:07:da:9c:57:
                    cb:56:e4:25:c6:0b:58:30:bc:f6:8d:57:09:28:04:
                    81:14:1a:f6:5d:79:58:e7:1b:35:f7:91:81:f3:79:
                    20:e6:c8:d8:93:c9:c0:0a:d2:4f:0e:65:a7:b7:fe:
                    21:89:81:e0:40:ae:ba:d6:b6:b1:6b:5b:fb:d2:33:
                    77:18:6a:0f:a7:9c:2c:f5:1e:35:ed:64:8f:9b:e3:
                    48:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A6:2E:4C:7D:89:19:8F:F7:07:5E:A5:DF:D2:84:9C:FB:96:7B:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:93:e8:32:67:42:49:2f:14:57:af:b1:c2:86:d8:f8:e4:4f:
         72:0d:4f:0d:82:37:56:3a:89:0d:ad:32:ce:a3:26:d5:4b:39:
         8a:f4:a9:84:00:a0:66:e0:4c:2b:14:f6:4d:fd:a5:98:5a:82:
         35:70:42:b1:04:7e:6d:93:0c:5b:94:90:7a:da:b3:c6:8a:17:
         88:a3:c7:41:20:2c:25:f9:10:32:de:65:6f:db:31:6e:72:78:
         05:01:c1:63:95:d9:3a:fb:f8:dd:97:ea:1e:35:19:7c:67:f3:
         68:59:b8:ae:d2:1b:2a:80:c3:fe:87:c9:a0:45:c9:ee:f2:c7:
         22:51:b3:e3:75:f6:35:ee:46:73:3e:73:4d:e6:ac:f4:df:51:
         54:d0:df:93:51:52:60:86:98:ad:5f:d5:be:e0:14:ac:ee:64:
         1e:2b:36:0f:82:46:0a:d6:2d:d1:4e:78:3b:0e:69:b8:09:c8:
         d2:c0:69:1f:38:99:8a:34:d2:db:a6:20:3d:5d:6c:78:c8:af:
         f2:7d:65:33:dc:64:87:a9:67:3d:51:e7:55:e0:8e:6a:11:01:
         7d:8e:07:9f:fe:56:d7:05:36:c4:1d:d7:18:e8:94:3c:ab:b7:
         48:be:2f:de:03:0f:4b:28:fb:6a:73:39:49:ee:0e:c0:e7:28:
         3a:9f:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 21:40:29 2025 by rpki-client