This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86d14ae2-9848-4e69-a79a-bfcb269825cf.roa
File:                     86d14ae2-9848-4e69-a79a-bfcb269825cf.roa (raw, json)
Hash identifier:          stfVxWwfXE/U+BNjMf4UPUERtOGWLAQK8c61zKAZf08=
Subject key identifier:   9A:CF:BD:CA:02:7E:26:96:65:CB:55:BA:C4:0C:95:78:4B:74:1E:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B3BA6EC01F7AD365990D7F1443135AECC81A85B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86d14ae2-9848-4e69-a79a-bfcb269825cf.roa
Signing time:             Sun 07 Dec 2025 00:20:58 +0000
ROA not before:           Sun 07 Dec 2025 00:20:58 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3b:a6:ec:01:f7:ad:36:59:90:d7:f1:44:31:35:ae:cc:81:a8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:20:58 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=ec1fceace5a92485927326ebe14c82be7b6add344ae8916875321c27dc130cdc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:bc:a6:49:63:36:34:0b:60:da:80:28:25:
                    cd:ad:f1:a5:31:f8:16:bc:e5:86:6e:4e:9f:bb:0c:
                    e7:b1:71:03:5e:8f:8d:13:42:2a:60:2b:37:b8:ed:
                    02:e7:d2:17:81:83:bb:f3:8f:45:e9:a8:c8:d8:17:
                    72:4b:3a:4d:b3:27:2a:e4:4d:04:85:d5:2d:08:72:
                    61:23:9f:cc:02:50:f9:11:f9:0a:69:6c:46:cb:a2:
                    d2:d4:a3:c7:6b:10:64:a2:87:a9:02:91:dc:70:51:
                    2c:41:2f:56:2d:7c:f1:e1:00:49:05:4e:91:b7:8d:
                    6d:20:e7:ea:79:57:39:8d:60:9b:3a:90:90:f9:77:
                    96:40:1b:be:dd:4c:1a:60:15:78:8c:ee:96:e4:54:
                    a9:99:ee:40:04:85:9f:63:d7:8c:8e:3b:62:17:02:
                    d2:b5:bf:c4:5c:26:7d:1b:e9:6c:21:01:d4:18:98:
                    22:bc:7b:c1:10:a3:fa:1e:57:45:e2:f5:b3:d4:bb:
                    54:07:f9:49:50:1b:cf:72:51:35:0a:35:5e:e8:d5:
                    5a:fc:05:9a:a7:47:71:10:f9:9b:d0:f2:b9:26:f9:
                    f3:5c:80:80:d3:b4:de:d6:59:d1:6b:3e:6a:5d:0d:
                    02:b0:3e:02:8b:44:f7:5b:dd:2b:93:6b:bc:c4:b5:
                    58:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:BD:CA:02:7E:26:96:65:CB:55:BA:C4:0C:95:78:4B:74:1E:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86d14ae2-9848-4e69-a79a-bfcb269825cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:45:7f:24:ad:b8:9a:e6:7b:8f:89:73:d7:51:d0:39:53:d1:
         ca:52:dd:f8:9a:8b:5e:f3:d0:86:31:c8:2c:06:8a:1a:4c:37:
         6f:1f:bb:ad:a7:ef:88:c3:48:83:e2:b2:eb:cb:8c:c4:06:95:
         a9:fe:24:4e:12:21:c1:3d:a0:fc:95:87:27:ca:91:36:c6:b2:
         bc:52:04:84:08:13:00:36:5b:57:b3:1a:5c:fc:ac:8d:92:94:
         44:3d:10:48:0b:a1:e5:09:2a:68:72:df:63:f8:e9:22:8b:86:
         c1:0a:37:ce:21:5e:e6:1b:40:f1:fe:e1:a3:f8:35:8c:4d:08:
         56:bd:de:e9:47:7e:42:7c:d8:f7:b0:c9:f0:b5:5e:66:43:ab:
         07:75:1f:6d:f9:23:c0:4f:7d:85:27:8d:06:b5:50:5b:c1:05:
         ed:c4:62:4e:ee:40:90:e4:28:7d:fb:fb:1a:84:d7:cb:d8:23:
         03:a4:9a:cd:51:fa:63:c5:6f:67:fb:80:08:cb:14:38:80:75:
         88:7c:2f:c0:40:98:ae:eb:23:3a:21:03:f8:3d:28:7c:6a:02:
         86:fa:45:c1:c7:51:15:73:93:17:38:6a:4f:b5:a4:27:a4:4d:
         28:67:9f:91:8e:7f:25:0e:6c:44:3e:5e:b5:af:4f:4b:e0:19:
         0f:24:00:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:35:17 2025 by rpki-client