This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa
File:                     be713b82-ae33-4ba7-81a1-ce725d0392dd.roa (raw, json)
Hash identifier:          SHxNIAaopFQWm32lIExCcpEMujPQVD9CnxofMBmKrik=
Subject key identifier:   C6:0E:81:40:15:04:68:75:C3:89:E0:9A:F8:89:EB:44:ED:2C:B5:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0312AF0FC55399665B3A491D0F34248F9D8D31D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa
Signing time:             Wed 10 Dec 2025 00:41:40 +0000
ROA not before:           Wed 10 Dec 2025 00:41:40 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        57.193.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:12:af:0f:c5:53:99:66:5b:3a:49:1d:0f:34:24:8f:9d:8d:31:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:41:40 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=0d6bc80bea9bfaa049483a050d578d2c82ad5d522c8362bbe30df753cc113539, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:2d:77:3b:59:22:a4:bf:b7:96:2e:08:fd:
                    99:73:24:92:11:3e:95:fd:6a:50:71:42:58:e9:3a:
                    ee:f2:30:b3:a2:c0:d9:4d:1b:de:4d:c4:e7:a1:38:
                    aa:61:bc:4c:59:44:72:2e:12:c3:cc:76:37:36:25:
                    ca:4f:9f:f4:07:9d:b6:37:3f:0a:0f:1c:bf:9e:28:
                    6a:a1:45:60:c1:b7:78:f9:00:74:73:cd:b3:98:3b:
                    69:84:80:70:14:a1:d8:14:88:cd:90:70:2f:e8:d6:
                    ba:91:49:7a:42:fe:c8:78:8f:95:f5:b2:f0:e9:4c:
                    58:21:6c:41:50:d2:3e:a3:4e:1a:90:27:88:95:90:
                    c2:d4:c1:3e:3a:19:4d:a2:d5:03:59:e5:d6:01:a4:
                    35:80:a4:7a:5a:84:3d:ba:0a:c9:df:5b:73:32:ab:
                    72:0c:9a:54:8d:5f:34:91:7a:90:40:06:55:e3:60:
                    eb:c8:8d:89:b0:51:35:1d:36:43:e0:be:e6:42:a0:
                    d2:18:a0:d7:d0:40:11:e2:a9:c4:5a:b2:c3:b6:50:
                    bd:87:43:78:a2:4a:6c:d8:82:85:19:28:79:09:80:
                    ca:ac:2c:8e:0e:c0:9e:8c:5e:58:ca:6d:0d:9e:35:
                    90:a9:a2:34:f1:3a:fb:37:79:db:3c:84:78:d6:2e:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0E:81:40:15:04:68:75:C3:89:E0:9A:F8:89:EB:44:ED:2C:B5:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:21:ba:b2:71:87:4d:93:25:6c:e3:52:24:0e:7a:8e:78:
         b7:a6:bc:2e:f8:ee:76:0d:dc:8b:ff:6b:eb:08:1d:75:37:51:
         5b:e3:1c:23:3e:db:8c:84:c5:00:0a:cb:05:98:2c:bf:47:fe:
         c2:85:25:63:8c:7a:0a:a2:dc:d6:4e:b3:c2:1d:72:96:64:98:
         5e:63:db:bb:c3:0e:cb:0c:dd:ac:a5:6c:64:0d:69:2b:1b:f6:
         95:a4:e8:70:a9:da:d4:cc:f4:b8:31:53:2c:ce:8a:7f:98:22:
         5e:4d:8e:65:f0:1a:d4:46:81:a7:7a:ff:01:d4:d3:a6:e6:02:
         67:78:72:30:dd:ae:31:fc:ad:de:a6:a7:94:a7:d9:10:a0:a3:
         bf:81:87:0a:a5:57:5b:f4:b3:e5:8c:30:84:53:2b:be:69:05:
         47:9a:c3:9b:61:4f:5c:c3:dc:66:81:02:14:fb:13:24:c7:7a:
         ca:da:a0:17:3d:64:ab:d1:91:0b:b9:0a:ec:c7:66:65:25:98:
         aa:10:36:f6:88:72:6d:38:6d:36:b0:70:d4:7a:68:37:69:b2:
         fb:13:ee:63:96:83:be:53:d8:71:d5:f2:ab:78:e9:2c:c7:bf:
         ef:17:aa:52:0b:eb:ce:b8:55:38:2b:fb:e8:c3:00:f9:61:70:
         3d:8f:13:cd
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUAxKvD8VTmWZbOkkdDzQkj52NMdkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDA0MTQwWhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwZDZiYzgwYmVhOWJmYWEwNDk0ODNhMDUwZDU3OGQyYzgy
YWQ1ZDUyMmM4MzYyYmJlMzBkZjc1M2NjMTEzNTM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgOS13O1kipL+3li4I/ZlzJJIRPpX9alBxQljpOu7yMLOi
wNlNG95NxOehOKphvExZRHIuEsPMdjc2JcpPn/QHnbY3PwoPHL+eKGqhRWDBt3j5
AHRzzbOYO2mEgHAUodgUiM2QcC/o1rqRSXpC/sh4j5X1svDpTFghbEFQ0j6jThqQ
J4iVkMLUwT46GU2i1QNZ5dYBpDWApHpahD26CsnfW3Myq3IMmlSNXzSRepBABlXj
YOvIjYmwUTUdNkPgvuZCoNIYoNfQQBHiqcRassO2UL2HQ3iiSmzYgoUZKHkJgMqs
LI4OwJ6MXljKbQ2eNZCpojTxOvs3eds8hHjWLqIXAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUxg6BQBUEaHXDieCa+InrRO0stVwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JlNzEzYjgyLWFlMzMtNGJhNy04MWExLWNlNzI1ZDAzOTJkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA5wTANBgkqhkiG9w0BAQsFAAOCAQEAsNAhurJxh02TJWzjUiQOeo54t6a8
Lvjudg3ci/9r6wgddTdRW+McIz7bjITFAArLBZgsv0f+woUlY4x6CqLc1k6zwh1y
lmSYXmPbu8MOywzdrKVsZA1pKxv2laTocKna1Mz0uDFTLM6Kf5giXk2OZfAa1EaB
p3r/AdTTpuYCZ3hyMN2uMfyt3qanlKfZEKCjv4GHCqVXW/Sz5YwwhFMrvmkFR5rD
m2FPXMPcZoECFPsTJMd6ytqgFz1kq9GRC7kK7MdmZSWYqhA29ohybThtNrBw1Hpo
N2my+xPuY5aDvlPYcdXyq3jpLMe/7xeqUgvrzrhVOCv76MMA+WFwPY8TzQ==
-----END CERTIFICATE-----
Generated at Wed Dec 31 02:23:55 2025 by rpki-client