This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7b638b3-e41e-4f83-bc95-3722c08205ca.roa
File:                     c7b638b3-e41e-4f83-bc95-3722c08205ca.roa (raw, json)
Hash identifier:          96j4r23t6nCCCTFoNT+6RAVcWNWTbFply6ID2Z3dlJw=
Subject key identifier:   1A:D3:6A:6C:B1:74:15:5D:4B:18:E3:8A:98:6B:5F:DE:F4:F8:EB:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6694F812ACE138091098239F723D721E02670A7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7b638b3-e41e-4f83-bc95-3722c08205ca.roa
Signing time:             Mon 08 Dec 2025 00:10:39 +0000
ROA not before:           Mon 08 Dec 2025 00:10:39 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        75.3.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:94:f8:12:ac:e1:38:09:10:98:23:9f:72:3d:72:1e:02:67:0a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:10:39 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=032c9a9ef8e1d0659e9a1d54ab4411930048fc224a6a87ce8aecf414e5f427e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:42:fd:8e:f2:8e:de:00:82:74:ec:b5:5b:
                    f7:9c:6c:9f:c3:8d:97:a0:e7:15:4b:d8:a0:71:4c:
                    42:49:99:47:25:fd:74:f8:91:b0:6e:3b:6a:05:94:
                    89:52:2c:8a:0a:3f:94:a3:12:88:f1:c4:09:33:8a:
                    a1:8e:b6:61:07:83:55:25:94:85:eb:39:97:14:57:
                    f8:c2:72:bb:17:ea:07:9c:16:44:e5:b8:be:cc:c9:
                    12:ee:d8:30:fb:db:9d:ac:cb:62:0c:fa:c4:1b:70:
                    e1:f5:46:0a:42:aa:9e:ae:e6:48:ac:16:d8:24:b2:
                    64:a1:de:80:e5:d6:51:d7:ad:42:22:01:2b:c6:68:
                    b1:47:00:d7:3c:e3:0f:bc:25:5b:47:c8:72:9a:c5:
                    5d:04:b1:f2:98:95:ef:05:d3:50:ae:1d:64:e3:d5:
                    aa:0d:17:b8:eb:c9:37:2c:9e:ae:77:4c:51:55:b0:
                    9d:de:df:ae:a8:f6:68:8e:bb:d0:e9:29:89:ba:92:
                    71:f8:23:c7:0f:3b:54:5f:55:b6:ac:7d:86:5f:24:
                    66:ad:c5:a6:ac:85:32:dd:1e:e6:d4:b6:d8:fc:f3:
                    25:98:90:d1:96:65:a3:4d:83:8c:a2:ad:c8:ec:59:
                    ec:1e:e7:08:1d:95:61:04:f4:0f:6d:5f:d1:0c:a4:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D3:6A:6C:B1:74:15:5D:4B:18:E3:8A:98:6B:5F:DE:F4:F8:EB:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7b638b3-e41e-4f83-bc95-3722c08205ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:e7:33:70:a7:e3:83:5f:15:ca:b1:c4:84:51:21:96:96:7e:
         1e:34:ab:cb:63:e0:9b:7e:86:4b:f4:25:42:3b:b4:16:5c:63:
         70:c3:aa:56:33:0b:76:04:35:9c:41:0c:59:48:ef:8d:bc:83:
         54:af:f0:03:70:c2:cd:b7:80:c3:9c:b2:f3:a6:db:dd:05:ad:
         d3:b2:77:ee:d8:3b:73:cd:b2:ae:9e:ec:11:3d:bf:60:70:ac:
         0e:8f:59:1c:8f:11:1f:bc:fd:0f:d6:2d:e1:d3:93:6c:03:d1:
         60:4e:3f:f4:14:b1:f8:9a:0a:fd:f2:6a:d3:b3:29:9b:a4:94:
         85:7b:14:25:8d:b2:f0:0b:50:cc:8f:1b:09:78:d9:8e:38:6f:
         76:64:8b:18:af:62:ec:2d:af:d9:42:a4:10:79:47:ab:30:48:
         4b:31:e3:e7:45:f1:2b:5c:0d:a2:68:bf:4c:33:81:9e:53:fc:
         b0:62:f2:58:d2:13:48:83:ca:07:8a:64:51:c0:0f:75:de:dc:
         ac:ec:f1:08:79:de:c0:a3:3d:d7:63:8a:52:88:53:82:48:ba:
         a1:7a:f1:9c:48:59:c5:21:35:ea:68:c3:36:16:5b:37:ed:2a:
         c4:7d:86:3e:eb:db:5f:bf:b9:58:76:be:2d:70:20:a9:f4:f6:
         76:e4:a5:40
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZpT4EqzhOAkQmCOfcj1yHgJnCn8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA4MDAxMDM5WhcNMjYwMzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMzJjOWE5ZWY4ZTFkMDY1OWU5YTFkNTRhYjQ0MTE5MzAw
NDhmYzIyNGE2YTg3Y2U4YWVjZjQxNGU1ZjQyN2UwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFdUL9jvKO3gCCdOy1W/ecbJ/DjZeg5xVL2KBxTEJJmUcl
/XT4kbBuO2oFlIlSLIoKP5SjEojxxAkziqGOtmEHg1UllIXrOZcUV/jCcrsX6gec
FkTluL7MyRLu2DD7252sy2IM+sQbcOH1RgpCqp6u5kisFtgksmSh3oDl1lHXrUIi
ASvGaLFHANc84w+8JVtHyHKaxV0EsfKYle8F01CuHWTj1aoNF7jryTcsnq53TFFV
sJ3e366o9miOu9DpKYm6knH4I8cPO1RfVbasfYZfJGatxaashTLdHubUttj88yWY
kNGWZaNNg4yircjsWewe5wgdlWEE9A9tX9EMpJ1BAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGtNqbLF0FV1LGOOKmGtf3vT46/wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M3YjYzOGIzLWU0MWUtNGY4My1iYzk1LTM3MjJjMDgyMDVjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVLA6AwDQYJKoZIhvcNAQELBQADggEBAJ7nM3Cn44NfFcqxxIRRIZaWfh40
q8tj4Jt+hkv0JUI7tBZcY3DDqlYzC3YENZxBDFlI7428g1Sv8ANwws23gMOcsvOm
290FrdOyd+7YO3PNsq6e7BE9v2BwrA6PWRyPER+8/Q/WLeHTk2wD0WBOP/QUsfia
Cv3yatOzKZuklIV7FCWNsvALUMyPGwl42Y44b3ZkixivYuwtr9lCpBB5R6swSEsx
4+dF8StcDaJov0wzgZ5T/LBi8ljSE0iDygeKZFHAD3Xe3Kzs8Qh53sCjPddjilKI
U4JIuqF68ZxIWcUhNepowzYWWzftKsR9hj7r21+/uVh2vi1wIKn09nbkpUA=
-----END CERTIFICATE-----
Generated at Fri Jan 2 10:59:30 2026 by rpki-client