This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a8d5db4-e57a-43d4-b37b-f75971c4a85c.roa
File:                     9a8d5db4-e57a-43d4-b37b-f75971c4a85c.roa (raw, json)
Hash identifier:          ED7IvIegJaXVrOTwIZT/h82F0Ww7uBmCTQMHzYB18FE=
Subject key identifier:   4F:3A:5E:6C:FE:67:5E:28:22:44:34:5D:C9:57:DF:CF:B8:EB:17:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A2DE8622A6D5FEDF9C0282E7827B7B9EA7CC0F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a8d5db4-e57a-43d4-b37b-f75971c4a85c.roa
Signing time:             Thu 11 Dec 2025 00:40:55 +0000
ROA not before:           Thu 11 Dec 2025 00:40:55 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        57.251.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2d:e8:62:2a:6d:5f:ed:f9:c0:28:2e:78:27:b7:b9:ea:7c:c0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 11 00:40:55 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=2d4f1ef79244a463142bc8c6a3d312aab19cf00b8b701383da95720d080f71f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d3:bc:b0:94:4b:c7:dd:61:77:56:ae:ea:0b:
                    c8:e9:a3:73:c0:d7:e7:e8:81:0d:4c:7c:39:cb:23:
                    ed:3e:4e:c8:15:18:19:bb:f2:e8:95:7a:f9:8b:c9:
                    21:56:18:f4:31:95:3d:76:c8:6b:39:71:2a:3d:13:
                    f3:96:83:bb:e6:3a:d1:6c:a5:e8:e0:a9:be:a8:97:
                    4c:5b:99:56:ab:9c:73:7b:92:84:7d:92:3b:de:ec:
                    94:76:12:d1:ef:39:e5:bd:35:f1:9f:32:ca:99:4d:
                    03:89:2d:ee:57:9c:be:a4:d0:e4:2d:d8:96:7a:57:
                    e3:6a:d5:26:1d:fd:d2:2e:b9:4a:87:ef:2e:bb:08:
                    2a:d5:be:e7:08:a9:44:1c:90:e0:6b:8a:0e:bb:2d:
                    09:d7:a7:26:8f:2d:30:81:09:87:63:77:81:3b:a9:
                    29:ca:bd:7b:23:39:b1:25:e3:ff:b7:c7:39:4b:9b:
                    2f:23:26:09:40:01:b2:68:cd:67:a0:02:d0:c9:5f:
                    d6:24:74:70:52:df:6b:1c:b1:e6:0b:4e:74:dc:94:
                    96:6a:bc:83:de:e2:cb:fe:64:7f:7e:01:b5:e3:e8:
                    6b:a4:6c:08:d0:4a:c7:a2:3f:27:92:90:61:5c:8f:
                    57:b5:60:dd:e6:f8:15:f3:30:0e:c3:32:ac:68:a9:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3A:5E:6C:FE:67:5E:28:22:44:34:5D:C9:57:DF:CF:B8:EB:17:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a8d5db4-e57a-43d4-b37b-f75971c4a85c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.251.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:48:2c:39:bf:f9:7d:a8:88:8a:70:0d:9d:c8:92:49:d7:7e:
         0d:41:83:e5:20:5e:eb:57:fe:54:4c:3b:43:ee:a3:a7:d9:85:
         97:ae:0f:62:74:46:ac:da:92:92:e5:fe:17:da:21:e1:38:1e:
         f9:5e:dc:62:39:7a:ca:75:0d:8c:1a:fd:cd:b3:2f:97:f9:19:
         f7:e8:84:e5:b7:50:c8:ec:3a:c1:0a:30:14:19:f9:5c:eb:48:
         4c:f5:d1:3c:3f:b8:33:95:7c:14:89:ca:28:4e:09:d2:6b:e4:
         a5:40:38:5a:d1:7c:7b:c6:83:60:ad:23:e2:81:df:08:30:8f:
         95:18:01:a3:d6:dd:78:5c:f9:c8:d5:13:7b:06:27:e7:2b:12:
         8d:fc:4b:04:ef:fe:d0:a2:bd:e6:26:f8:36:af:7c:fd:46:11:
         21:5f:2c:c2:5c:f7:b8:fa:14:2e:91:20:4d:51:94:a1:40:98:
         9b:87:a9:23:ff:90:50:cd:aa:23:af:d1:3d:27:6d:59:31:7f:
         b4:55:23:39:14:45:6a:62:fc:d1:29:c5:ba:71:7c:97:b3:97:
         05:70:0f:20:c1:84:f3:8e:2c:0f:9b:62:6d:7c:03:61:2a:84:
         5f:c9:39:1f:69:f4:cb:63:7d:18:a0:cc:9e:0a:f0:8f:04:79:
         8d:1a:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:11:01 2025 by rpki-client