This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eee3bf5-ea50-48e9-8988-67355ca4772d.roa
File:                     8eee3bf5-ea50-48e9-8988-67355ca4772d.roa (raw, json)
Hash identifier:          0K4vFPoz2D9Abs3QBC6IC2Qsfks1cw99cfeCRoE4MOo=
Subject key identifier:   54:D2:61:72:37:4A:B2:53:E7:AC:BA:E1:66:6C:63:53:75:2A:61:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4AAE3099CF992851EF53EED5247C4CAFB809321E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eee3bf5-ea50-48e9-8988-67355ca4772d.roa
Signing time:             Sun 07 Dec 2025 02:10:09 +0000
ROA not before:           Sun 07 Dec 2025 02:10:09 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        32.236.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ae:30:99:cf:99:28:51:ef:53:ee:d5:24:7c:4c:af:b8:09:32:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 02:10:09 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=e699f51d493b5d15f4f6ab401abcf91a12e2585b1fcc87c61b8726379cd8470d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:96:04:41:16:6f:f9:dc:15:85:30:b7:19:
                    3d:7e:49:1f:3c:ff:e1:b9:8e:1e:8b:b7:cc:cb:81:
                    41:7a:57:c7:be:a6:d4:85:34:d5:90:65:b5:81:39:
                    0c:c2:f3:81:3d:68:ff:8e:4c:66:0b:8c:33:47:2e:
                    c6:8b:44:ea:8c:95:ad:51:ac:c0:62:c7:d2:9d:6e:
                    f2:69:cb:3a:82:6b:32:39:a5:a5:f3:92:cd:da:51:
                    ec:81:a0:28:f5:ff:44:70:b1:d7:40:2f:88:aa:e4:
                    c2:7b:5c:a7:f1:75:0c:06:92:f1:9b:5d:3a:5e:16:
                    f3:e9:73:23:28:6d:d5:09:26:ee:7d:29:71:1c:3e:
                    16:18:87:04:ab:f1:ce:3b:16:3d:4c:0b:19:fb:a8:
                    96:8d:af:df:c5:13:c2:e4:42:ea:81:58:c4:0d:1d:
                    bc:20:a2:93:11:2e:f1:44:c7:cf:13:ae:81:fe:53:
                    61:17:11:6c:33:87:ec:f3:f8:41:6b:75:95:b2:90:
                    99:97:06:1b:28:d0:c2:e2:ea:04:16:47:7b:e5:b4:
                    ec:aa:15:ad:ff:9a:a9:f1:35:dd:68:85:79:eb:96:
                    01:21:ac:dc:71:fb:0f:45:6d:48:e7:9c:33:6d:f0:
                    fb:ca:9e:2c:46:c7:64:0c:c9:a8:9e:b2:59:e7:1e:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D2:61:72:37:4A:B2:53:E7:AC:BA:E1:66:6C:63:53:75:2A:61:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eee3bf5-ea50-48e9-8988-67355ca4772d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.236.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a7:13:76:85:67:75:6a:d2:d5:ff:e4:c4:5b:6d:92:7e:51:16:
         31:4a:5b:39:83:31:e4:86:18:ee:c6:dc:3f:58:8c:1a:74:89:
         9b:e7:b9:a1:47:40:53:89:eb:86:7e:0b:37:42:e1:2b:06:16:
         2e:c7:af:17:a4:68:89:14:9d:6b:f2:3a:68:8a:05:60:1d:28:
         23:dd:7f:3a:83:af:05:b0:d8:3d:b0:07:df:29:bb:f3:c8:3e:
         5b:6f:54:db:ec:4b:e4:49:0d:04:25:54:39:3a:95:38:98:7f:
         7a:7e:6e:38:75:d0:a7:87:99:13:dd:7c:07:cb:e4:75:84:ba:
         a0:88:6e:7b:84:9c:54:0c:a4:b4:8a:1a:31:9f:67:72:bc:d5:
         0a:53:4d:b5:4a:22:3f:e3:c8:62:e6:47:62:cd:48:1f:7d:dc:
         90:88:99:35:24:9d:bf:43:93:c8:ef:6f:e7:ef:ac:af:0c:5c:
         d7:72:97:73:4e:bc:4d:b1:3a:2c:cf:e3:cc:85:52:60:be:f6:
         85:db:8b:57:8a:78:1e:e4:13:08:16:62:80:1b:af:cf:5a:b0:
         13:62:36:dd:7c:c3:df:83:95:48:c9:95:e6:62:e6:80:a3:26:
         b5:33:92:de:fb:cc:70:5c:0f:0d:9f:42:10:8e:1b:69:48:30:
         76:1f:34:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:51:55 2026 by rpki-client