This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa
File:                     b077c7f9-666e-471a-9d7f-878e8767a601.roa (raw, json)
Hash identifier:          JV5oSv47rBbeLM/XqidyGfuaPknJGJRpL1kj2wA+D4Q=
Subject key identifier:   8E:40:D1:BF:1A:92:B0:42:F2:A3:55:F2:3B:37:29:01:D7:0D:A2:27
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C0A69F1AD784A4B79C50341107503D342273F8D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa
Signing time:             Tue 11 Nov 2025 01:51:36 +0000
ROA not before:           Tue 11 Nov 2025 01:51:36 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        107.20.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0a:69:f1:ad:78:4a:4b:79:c5:03:41:10:75:03:d3:42:27:3f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:51:36 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=601a7974a77d7ca93b71ddee4c6666bf7ed25300f44c567e408fa18bbb10df19, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:5d:7e:f3:f6:45:f2:15:e7:46:58:75:c9:
                    b3:d7:ab:54:6e:5c:4e:75:04:4b:7f:f5:98:5a:93:
                    e9:66:72:09:22:8e:d2:ac:d5:91:8a:da:6c:8a:75:
                    7a:e7:9e:50:9f:bc:9c:4d:bd:0e:8f:b3:56:f0:0d:
                    ae:9f:6d:90:43:9f:34:2d:ed:4f:02:95:f8:7b:b9:
                    ca:f5:9f:4f:3d:37:df:52:21:61:48:1a:1a:62:c7:
                    97:51:88:fc:4d:54:ef:5b:e1:2d:aa:0b:b4:fe:40:
                    38:61:1d:80:34:69:6b:38:65:41:2c:c1:c1:70:60:
                    c8:0f:3e:7d:d9:8f:42:f0:d1:3e:a9:49:10:47:9f:
                    c9:0f:17:54:8c:04:03:c0:6f:c1:05:a1:39:f3:00:
                    92:74:74:c5:04:36:58:6b:24:69:3e:8b:33:18:9b:
                    44:36:a4:8e:08:f4:52:9a:ba:45:e1:90:c1:d4:94:
                    39:84:6a:44:35:9a:7d:91:00:27:37:4a:d4:d1:85:
                    6d:97:e7:0c:74:88:98:8f:c6:0d:f8:45:8e:e9:d6:
                    e5:0f:5f:d5:df:13:39:7b:d0:1b:f7:ea:ae:0e:85:
                    b3:30:e7:6c:d1:6a:6b:64:61:3f:f8:dc:4a:84:b6:
                    12:de:99:06:d2:5b:c0:23:81:32:2e:de:3b:d2:56:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:D1:BF:1A:92:B0:42:F2:A3:55:F2:3B:37:29:01:D7:0D:A2:27
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.20.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:68:1a:8f:b7:3b:2a:c3:37:e1:cb:e3:a2:b8:62:d7:4f:eb:
         fe:af:f8:c7:1c:23:7f:f7:9b:68:31:87:0d:a5:cf:cc:b2:79:
         b0:51:44:24:e9:65:96:5c:35:a7:60:be:d3:3b:75:cd:78:69:
         75:b8:c0:51:c2:c2:f9:35:98:71:97:fb:cc:cb:ca:eb:cd:49:
         70:4f:c5:bd:d2:dc:c9:79:47:a0:e7:00:23:67:75:a3:13:e0:
         48:c4:1f:fb:38:a6:41:c1:89:ec:f8:06:b4:d4:5d:ac:9a:c7:
         89:dc:54:e3:1e:33:c2:b4:59:f8:85:0a:dd:5c:7e:ba:c6:5d:
         37:5e:2a:d4:9e:27:cc:a9:ca:80:d9:0c:00:6e:3c:c0:6d:47:
         30:85:8b:36:21:7a:31:e8:b9:2b:fd:42:68:e1:af:b2:3f:a9:
         25:05:49:ef:df:ee:bb:09:81:f4:5c:74:c9:7b:bc:65:90:04:
         b8:0f:30:11:66:26:0f:03:8e:4c:52:04:ca:08:86:9b:89:3f:
         7d:af:4a:1f:53:f9:44:fd:fc:f6:a3:26:37:77:fa:ec:87:51:
         2d:e9:1e:0a:cb:60:f3:fe:7f:f3:bd:bb:2f:99:5a:f6:e8:00:
         16:2e:5a:4a:c3:dc:e1:24:85:5f:f9:6a:05:b0:a2:bd:ea:a9:
         38:97:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----