This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a74be31-f0ee-498b-9348-eb800cee944d.roa
File:                     9a74be31-f0ee-498b-9348-eb800cee944d.roa (raw, json)
Hash identifier:          f14OcSa2X7z5uL/upDtaFFNSLNPtSI8sbmVskldChiM=
Subject key identifier:   5F:E6:E6:B2:55:F0:4E:35:D1:5B:5D:62:C2:6E:91:FF:4C:A6:F5:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C5BACF0E934DB7F312285424B070CC208FAA334
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a74be31-f0ee-498b-9348-eb800cee944d.roa
Signing time:             Thu 11 Dec 2025 00:30:12 +0000
ROA not before:           Thu 11 Dec 2025 00:30:12 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.48.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5b:ac:f0:e9:34:db:7f:31:22:85:42:4b:07:0c:c2:08:fa:a3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 11 00:30:12 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=231b9db2625a5433172f19bb5331bd56361bd1f047d86ecf251a5d8702b2ce52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:9a:4a:78:05:03:b2:9a:35:0a:01:3a:6c:
                    da:c3:be:00:3c:ad:98:26:3a:f3:83:8c:31:20:99:
                    28:0a:d5:b8:74:33:bf:82:b8:a9:3c:27:b9:56:08:
                    4b:1d:3a:c8:d7:78:51:01:47:94:0e:40:b7:9b:b9:
                    69:7c:da:e0:61:84:ce:07:af:98:32:6b:e0:79:2c:
                    e8:ad:da:fa:a2:d0:ff:38:3c:4f:98:fa:9c:0d:49:
                    0b:9c:89:66:45:95:19:40:87:d5:6c:82:f3:84:b3:
                    6a:e4:12:af:29:df:0e:b1:60:1a:22:c8:52:e7:13:
                    0f:1f:b1:4e:7f:37:ad:bc:af:0c:57:c1:a1:f8:51:
                    a0:3e:d6:fc:3e:8b:3c:66:b1:8c:ef:9e:0e:f8:c8:
                    bb:2a:a3:1b:7e:71:9c:47:ac:a7:d9:3d:1a:4f:9b:
                    0c:1d:a3:2f:d2:e8:6c:c9:a4:08:d1:30:a3:44:34:
                    c9:a2:47:3c:ba:dc:08:fe:1f:55:64:ab:4d:55:8a:
                    95:1f:71:d6:94:9c:78:93:1c:32:2d:8b:14:3f:d1:
                    e7:03:73:db:80:03:71:33:33:ef:71:b2:d3:6b:e6:
                    6b:8f:ae:f2:8a:ac:de:7a:b6:c4:60:ed:1d:65:1d:
                    53:4a:1d:16:45:ad:48:d4:f0:43:e6:bf:ea:ea:06:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E6:E6:B2:55:F0:4E:35:D1:5B:5D:62:C2:6E:91:FF:4C:A6:F5:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a74be31-f0ee-498b-9348-eb800cee944d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.48.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         cf:1c:f4:c0:42:d0:56:39:e1:82:4c:80:b3:de:d6:9d:b2:57:
         cf:34:c6:02:77:9f:fc:16:56:6a:0e:e9:0e:01:ac:2e:0a:a2:
         2a:5f:fa:e4:a9:fd:9e:62:51:78:96:24:43:c6:ad:8a:f6:3e:
         6f:e0:12:88:73:05:58:b8:64:0e:00:a7:1b:3d:87:92:bb:0e:
         5c:f5:65:7f:55:e7:b9:ee:8f:6a:a3:53:51:ee:a0:1d:5e:51:
         0e:a2:c9:9b:a7:ef:79:48:38:29:fe:2f:69:6b:64:d3:22:85:
         51:86:29:0b:9c:7e:54:c0:51:74:9c:bf:c9:35:66:e4:55:38:
         ab:e4:af:e6:c7:c4:f6:e4:f1:35:f9:6b:f2:3e:40:0d:3e:63:
         98:e2:1b:4c:c1:5f:10:5f:3f:5c:04:a2:a2:dc:25:f0:9c:f0:
         98:b3:77:f0:04:03:41:27:45:03:eb:76:8a:2a:9d:7e:25:0e:
         0b:5c:90:a6:b5:26:d9:9b:38:55:62:7a:59:44:0e:72:7c:d8:
         7e:08:95:b7:9d:cd:08:45:ea:07:43:d5:f2:5a:1c:36:7e:f2:
         03:52:02:67:5a:fc:4b:2d:35:44:c8:8c:7a:9c:07:b8:a4:92:
         a0:96:47:12:3e:e9:1a:1f:58:d4:23:bf:a9:50:65:f6:17:69:
         59:a1:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:33:36 2026 by rpki-client