This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c134793a-63ec-4164-85d3-0adf648bcf8d.roa
File:                     c134793a-63ec-4164-85d3-0adf648bcf8d.roa (raw, json)
Hash identifier:          aDyXrPeNrGxy5b3rF/WbPg3CMAwn/9WrFLjoapeCaVg=
Subject key identifier:   5C:14:5E:68:0F:44:BB:A9:93:84:DE:64:D9:FA:D2:49:72:2B:44:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       073A802773A2A06C0F9F72F72830618BD598FCF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c134793a-63ec-4164-85d3-0adf648bcf8d.roa
Signing time:             Thu 11 Dec 2025 00:01:18 +0000
ROA not before:           Thu 11 Dec 2025 00:01:18 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3a:80:27:73:a2:a0:6c:0f:9f:72:f7:28:30:61:8b:d5:98:fc:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 11 00:01:18 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=822c5f1743c4e24af4a67af8a206eff43040ac9c62ff89ef8989d6aed87cf4df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:f9:be:17:3b:52:5f:87:83:7f:f3:6a:c8:
                    60:3a:1a:32:8f:f9:98:fa:1f:bd:ac:4a:e1:3f:25:
                    2f:c0:c7:19:3b:bf:22:22:9d:4e:98:3c:f3:ff:9b:
                    e7:89:ca:9b:30:d3:73:30:94:f8:6f:b6:0d:55:a8:
                    0c:c1:70:b7:a1:59:18:12:b0:38:33:77:c7:c0:25:
                    2f:21:ce:a4:81:8a:36:ad:d2:09:53:bf:69:c7:5d:
                    dd:8f:25:08:48:92:f0:47:65:20:4f:0e:bd:e0:6c:
                    69:6d:c3:a5:2d:c1:5a:16:c2:c6:2f:04:d7:5a:d9:
                    8d:df:b6:03:e7:05:0c:7b:f9:a5:56:73:0f:18:3a:
                    12:ab:f3:e5:e4:9f:67:1c:d9:31:2b:bf:67:9c:69:
                    77:71:84:e3:39:6e:03:eb:3d:c0:13:ae:56:46:01:
                    01:5c:4c:b6:e6:94:f7:fd:f8:a7:0d:ca:a2:b6:24:
                    58:5a:37:01:80:0a:cd:4e:17:10:98:8c:ce:f4:62:
                    cd:ad:a9:f2:eb:a3:87:53:2a:8f:dd:bf:af:f7:08:
                    14:60:40:77:15:f1:5f:53:8e:4e:70:1d:1d:ef:9a:
                    05:5d:51:1e:f9:f2:1c:6a:da:02:28:92:1e:22:40:
                    75:70:b0:01:f9:71:8b:a5:36:c6:6e:d2:5a:72:ac:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:14:5E:68:0F:44:BB:A9:93:84:DE:64:D9:FA:D2:49:72:2B:44:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c134793a-63ec-4164-85d3-0adf648bcf8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:9b:9c:a8:b0:53:0f:fb:17:5c:1f:9e:6f:f2:f9:9b:5d:
         9b:79:7b:b5:04:14:4b:48:cc:df:c0:ef:29:22:e7:d0:24:db:
         f6:2f:a8:38:68:18:57:37:0c:22:fe:00:4a:ef:15:44:dc:1a:
         c2:a6:1b:a4:99:d9:1d:46:51:84:cb:b1:e9:34:95:10:4c:c8:
         54:29:c7:95:0d:d5:99:39:5d:12:28:5d:96:64:1f:33:46:c8:
         22:09:44:a4:25:17:e2:82:c2:7f:f0:0d:4f:0e:8d:0a:78:ff:
         a5:7f:4b:d4:23:a9:4d:1c:06:72:7e:eb:e2:89:b4:ed:b8:eb:
         3a:a4:23:3c:0d:a3:a6:c6:c3:eb:c1:6d:8c:f9:4c:22:3d:e8:
         07:72:bd:e8:69:5d:a9:22:85:82:df:89:b5:0d:88:3c:d6:cf:
         6f:4f:d6:f8:25:25:0a:3f:bb:e9:00:91:e9:06:c1:a9:a1:ef:
         8b:e6:ae:48:ea:23:ba:3a:1e:c8:00:35:62:9b:a4:0d:13:06:
         f7:3e:2a:68:64:bb:60:6a:01:aa:c7:e9:92:e0:a1:95:13:bf:
         76:76:41:d8:2d:3b:4c:48:8b:12:fc:df:04:6c:dc:e8:99:5d:
         4d:b2:f4:25:0c:b3:e8:3b:3b:70:34:7e:f7:90:bd:1f:f4:be:
         32:59:93:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:58:39 2025 by rpki-client