This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ea4f0ec-c158-4950-9858-041d23e677f2.roa
File:                     9ea4f0ec-c158-4950-9858-041d23e677f2.roa (raw, json)
Hash identifier:          q47epEiJCKRr4R5wSqWm8WCj2jnbcevftCZHke/s0Z0=
Subject key identifier:   E9:61:80:C0:9B:9F:B2:77:3A:B1:11:F2:7A:ED:8F:FB:32:D1:AA:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       604D485B4D09B78644DA2320E2F5074AC9BC1B1E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ea4f0ec-c158-4950-9858-041d23e677f2.roa
Signing time:             Thu 11 Dec 2025 00:00:08 +0000
ROA not before:           Thu 11 Dec 2025 00:00:08 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        203.88.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4d:48:5b:4d:09:b7:86:44:da:23:20:e2:f5:07:4a:c9:bc:1b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 11 00:00:08 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=0b8281cb8d459f476e4b0fc97323dbdee2271aeb2be1ba858939ed785cb9e46e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:63:b9:0a:13:70:b5:74:ef:92:1a:68:31:
                    1f:90:ca:d3:5d:81:c4:46:68:f9:b2:15:78:f6:20:
                    f5:33:4b:b8:af:35:64:83:20:76:59:73:5f:1e:c6:
                    f6:bd:59:ed:05:e4:54:2f:71:34:de:5b:95:5b:5d:
                    df:26:18:d8:32:84:03:54:fc:55:a7:7e:4c:e1:a1:
                    48:78:ed:ea:00:25:21:75:10:0c:c8:6f:ee:a6:42:
                    13:cf:f5:c0:bc:61:4d:3d:14:eb:f2:ae:15:08:4c:
                    78:4b:86:5e:94:f7:70:7b:52:5f:fb:28:42:43:dc:
                    07:da:4f:91:40:a2:3c:12:4c:f2:59:d6:f6:b7:d1:
                    c0:ae:50:17:84:02:8d:fd:4a:ef:73:e8:47:2b:85:
                    92:82:d9:2f:a1:fe:dc:ff:46:99:5d:ed:35:bf:e4:
                    60:f9:00:e0:c8:68:ee:5a:e8:38:da:a4:b7:db:97:
                    94:fd:3f:88:f4:96:e1:46:3f:55:c3:aa:fd:84:e1:
                    02:c5:89:1b:15:ec:ac:f9:46:25:c6:bb:75:1f:a1:
                    74:10:2f:79:76:c1:88:ca:bb:53:ec:90:39:92:bc:
                    a0:8c:ed:b0:3b:83:63:df:59:8f:5d:43:29:2c:b3:
                    08:3b:ce:f6:f3:50:46:f2:3c:09:ff:5d:9b:1b:9a:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:61:80:C0:9B:9F:B2:77:3A:B1:11:F2:7A:ED:8F:FB:32:D1:AA:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ea4f0ec-c158-4950-9858-041d23e677f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.88.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:d5:ce:fd:3c:cf:93:23:ee:a7:92:d9:25:2b:3c:08:63:
         34:63:49:c6:4e:96:e7:74:0a:56:40:7f:79:74:2c:00:1a:01:
         3e:e8:e7:4b:83:4d:cf:fb:ea:76:f9:08:b3:47:47:9c:0c:d2:
         8e:0b:09:03:ac:30:b9:a6:b6:3c:4e:23:f1:ad:b2:63:a9:82:
         8a:e7:be:50:2a:3b:1a:4a:ff:82:3a:71:21:96:bd:ad:15:72:
         0d:95:4b:50:00:36:0f:78:33:9b:5e:5f:a6:5b:fa:64:ef:a5:
         27:b7:0b:a8:a9:ab:bb:2a:f4:35:af:2b:7c:54:78:5c:f2:7f:
         5c:92:bd:ae:24:bb:c9:83:83:96:e7:c2:83:f1:88:45:e8:05:
         ce:13:74:27:33:32:97:3c:f7:8f:fe:14:a4:b6:34:99:98:bd:
         b0:9d:81:22:9a:8e:17:d3:d3:e1:92:b8:c6:13:73:04:2b:1e:
         b2:51:7e:c6:17:4e:9c:84:45:af:26:b8:52:36:ef:0d:e0:db:
         25:76:5b:d9:b5:16:cc:c4:7c:5e:08:ee:e7:4c:2d:6e:1c:f9:
         69:25:7f:1e:93:45:2a:4d:1f:0b:8f:3a:fe:d6:57:0e:2f:f2:
         bd:4d:b6:49:42:1d:cf:c4:dc:52:e6:93:41:f3:4a:a7:2f:ac:
         b0:bd:ea:6d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYE1IW00Jt4ZE2iMg4vUHSsm8Gx4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjExMDAwMDA4WhcNMjYwMzExMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYjgyODFjYjhkNDU5ZjQ3NmU0YjBmYzk3MzIzZGJkZWUy
MjcxYWViMmJlMWJhODU4OTM5ZWQ3ODVjYjllNDZlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqTGO5ChNwtXTvkhpoMR+QytNdgcRGaPmyFXj2IPUzS7iv
NWSDIHZZc18exva9We0F5FQvcTTeW5VbXd8mGNgyhANU/FWnfkzhoUh47eoAJSF1
EAzIb+6mQhPP9cC8YU09FOvyrhUITHhLhl6U93B7Ul/7KEJD3AfaT5FAojwSTPJZ
1va30cCuUBeEAo39Su9z6EcrhZKC2S+h/tz/Rpld7TW/5GD5AODIaO5a6DjapLfb
l5T9P4j0luFGP1XDqv2E4QLFiRsV7Kz5RiXGu3UfoXQQL3l2wYjKu1PskDmSvKCM
7bA7g2PfWY9dQyksswg7zvbzUEbyPAn/XZsbmlELAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6WGAwJufsnc6sRHyeu2P+zLRqnswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzllYTRmMGVjLWMxNTgtNDk1MC05ODU4LTA0MWQyM2U2NzdmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADLWF4wDQYJKoZIhvcNAQELBQADggEBAGH81c79PM+TI+6nktklKzwIYzRj
ScZOlud0ClZAf3l0LAAaAT7o50uDTc/76nb5CLNHR5wM0o4LCQOsMLmmtjxOI/Gt
smOpgornvlAqOxpK/4I6cSGWva0Vcg2VS1AANg94M5teX6Zb+mTvpSe3C6ipq7sq
9DWvK3xUeFzyf1ySva4ku8mDg5bnwoPxiEXoBc4TdCczMpc894/+FKS2NJmYvbCd
gSKajhfT0+GSuMYTcwQrHrJRfsYXTpyERa8muFI27w3g2yV2W9m1FszEfF4I7udM
LW4c+Wklfx6TRSpNHwuPOv7WVw4v8r1NtklCHc/E3FLmk0HzSqcvrLC96m0=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:33:47 2026 by rpki-client