This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa
File:                     ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa (raw, json)
Hash identifier:          pyE17nGuHk4DHgSyXYqmEFHVzbizc1XpOBpx5naFf4E=
Subject key identifier:   F7:1F:06:B4:FC:78:06:A7:A3:BB:1E:AD:E2:AB:E5:A7:9D:27:44:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0CA8CC8F8680382A88A16FED2D2BF4B015E16E5E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa
Signing time:             Mon 08 Dec 2025 00:50:45 +0000
ROA not before:           Mon 08 Dec 2025 00:50:45 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        98.90.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a8:cc:8f:86:80:38:2a:88:a1:6f:ed:2d:2b:f4:b0:15:e1:6e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:50:45 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=0530694132680738eb4d18583f2e09a62e7e20afa998610d8ddcc3315fa82a7e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:d9:14:21:5d:6f:b7:c3:ed:6d:af:89:b7:
                    55:b6:01:11:0e:2e:c0:f1:07:20:9b:f8:f7:8f:50:
                    49:64:b6:4d:b7:12:9b:13:4a:05:c0:0d:ea:68:9b:
                    de:55:4b:64:b8:2b:e9:9a:82:6c:45:95:ad:3c:bc:
                    48:f6:fa:cd:46:92:eb:4f:a8:c8:ea:79:42:3f:06:
                    bb:ab:62:0d:e2:b7:db:86:19:0a:31:4c:06:db:d9:
                    44:7b:dc:48:53:21:be:58:d9:50:31:6a:09:b3:c1:
                    bb:ff:c8:95:4c:ce:6c:a3:a0:31:16:d7:d5:37:54:
                    9b:89:58:be:6c:06:04:1d:06:cd:fc:2e:06:18:76:
                    6e:05:7b:76:9a:94:0d:e3:2e:52:06:8d:03:d4:49:
                    6c:0f:7d:93:43:1e:5f:d8:27:94:36:c1:0a:4a:8c:
                    cf:b2:d4:95:9d:ab:5a:f9:2f:e2:a9:b4:2b:ef:f5:
                    21:0d:9e:bf:e7:be:dd:81:83:3f:ff:e5:1e:12:05:
                    f5:a2:ab:4e:29:4f:50:f8:25:ac:ee:e4:05:c6:30:
                    5f:35:38:74:65:36:08:9f:43:59:1a:e6:1b:47:0f:
                    95:08:eb:3e:6c:63:6f:9d:63:9e:f5:07:84:91:9f:
                    d6:ed:f9:59:9a:04:e9:6b:38:46:fc:27:28:48:18:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1F:06:B4:FC:78:06:A7:A3:BB:1E:AD:E2:AB:E5:A7:9D:27:44:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca19fbc0-fa77-4d41-a330-3c8e8e0e5c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.90.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:0f:31:77:b8:7e:53:e9:fd:d0:c4:b1:57:81:31:fc:90:42:
         e6:b2:27:25:50:24:a5:64:8c:e3:38:8c:ad:c3:98:7f:04:f7:
         1b:46:f0:b0:02:c6:9f:6f:9d:a3:98:f6:cc:92:2e:bf:2d:c9:
         dd:c0:d5:f4:ba:be:aa:c9:1b:ee:85:3d:8c:05:80:01:cf:cc:
         47:f9:34:ce:41:b4:70:4e:5d:b2:1b:d3:d3:8a:5c:65:8c:a2:
         91:d3:0f:65:b5:3e:44:a7:8d:37:8e:fd:f9:73:f0:e3:b3:f6:
         c5:d3:20:3a:ba:99:2a:7f:59:1e:d3:1f:2f:21:70:e4:80:84:
         7a:a8:3a:83:7d:53:8c:59:f8:3d:d2:ed:ca:80:70:9c:4f:3f:
         f9:d2:15:66:56:f0:21:ea:15:99:4d:28:58:57:74:f2:cd:e8:
         51:8d:22:3f:e3:aa:54:80:45:11:b2:7d:f9:c3:fc:d1:d8:83:
         71:ef:9b:59:14:90:a3:95:37:93:47:51:aa:4b:f0:0e:12:91:
         46:35:9f:60:d3:ed:26:e5:bb:4e:34:40:a0:90:b6:00:56:7e:
         c6:56:b4:32:1a:29:9a:ea:3f:6e:9f:da:2e:6a:6d:bd:6e:36:
         a3:25:92:a7:ae:e9:79:e6:76:50:bc:5a:c2:a3:65:9b:66:c3:
         37:d8:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:49:34 2026 by rpki-client