This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa
File:                     ca57515a-3058-4353-ab16-a7d94657f8f8.roa (raw, json)
Hash identifier:          08sQPz3ChEEiUzL6jWokv7z1subtwcXrU+sT0Ej6E38=
Subject key identifier:   23:BC:55:54:AA:45:F9:BC:C8:F7:07:DD:45:42:A9:F3:BD:57:C7:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05E7AEAFF81835C98065927EDD3B4BE96122FB27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa
Signing time:             Sun 07 Dec 2025 02:40:06 +0000
ROA not before:           Sun 07 Dec 2025 02:40:06 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        40.252.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e7:ae:af:f8:18:35:c9:80:65:92:7e:dd:3b:4b:e9:61:22:fb:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 02:40:06 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=2145d109c05d077e71dc41ef2b128be91e8c51a954385e30dd4dd00757273709, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:20:ea:95:d9:ba:71:d1:54:b4:83:05:69:
                    71:7f:e8:2c:dd:37:e5:77:86:3a:39:29:8a:59:aa:
                    7f:47:d7:00:82:bd:24:b4:ea:fd:c1:3d:e0:37:65:
                    0c:b1:f2:5f:7b:a7:73:71:38:3b:ef:1d:11:ed:eb:
                    e4:0c:e3:49:c2:0e:a6:86:66:5a:15:4f:d1:b7:41:
                    1e:53:7f:fc:37:72:3b:c7:79:5b:49:9d:b6:63:20:
                    7b:7b:bb:da:c6:eb:b4:eb:0e:21:bf:dc:d1:3b:94:
                    e8:5e:05:19:69:5e:b6:03:15:c0:d3:0e:02:66:bc:
                    ec:4a:40:18:8e:8b:38:52:5b:36:f7:ec:38:a1:97:
                    cd:39:83:32:af:fa:8a:a3:66:6f:48:1b:87:ec:df:
                    fe:4f:68:1c:87:3a:d1:e7:e1:e6:5a:41:91:f9:86:
                    e4:ed:33:bb:20:cc:bb:1e:10:bf:57:e3:49:80:a2:
                    38:22:35:54:62:df:f9:62:b6:46:b2:e1:5e:e5:1a:
                    f9:c7:e1:38:22:9e:80:2c:ad:c2:02:f5:30:6e:eb:
                    24:01:9e:49:33:33:94:81:37:37:28:64:7c:82:d0:
                    d9:0e:c5:58:dc:87:cd:fd:f9:a2:9d:e8:01:0e:83:
                    c7:1c:de:c7:85:b6:66:25:fe:fc:11:52:6c:93:0d:
                    e0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BC:55:54:AA:45:F9:BC:C8:F7:07:DD:45:42:A9:F3:BD:57:C7:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:62:24:15:7b:79:8b:3e:d0:ac:cd:a9:77:fa:91:e4:e9:05:
         ee:2a:e1:b9:35:ab:21:a7:2c:e7:d1:da:e9:08:6a:98:a1:9a:
         b0:64:a5:6a:47:e4:17:12:65:66:19:9c:fe:f6:a6:13:d8:36:
         02:89:49:25:8c:f2:d7:9d:71:b5:6c:6c:23:81:0c:6e:85:30:
         ca:e9:a2:3b:6b:ff:4d:12:09:65:aa:89:c9:a3:2e:87:ae:00:
         aa:f8:43:31:d5:d8:f9:4d:6f:32:9d:2e:ef:c4:51:06:05:78:
         e8:74:da:73:a9:68:45:aa:13:2a:d6:f1:dd:18:30:9f:b0:20:
         f3:af:a8:60:20:3e:41:f5:c9:53:bd:1c:e3:93:0c:0f:6d:39:
         6a:26:9a:c4:05:75:bf:55:b3:bc:dc:9b:df:73:8b:9d:28:96:
         bd:9f:0f:a1:f5:2a:50:3b:18:6e:9b:03:8b:33:4c:54:7e:5f:
         10:5b:ae:b2:e0:e0:a5:ae:06:45:c2:5f:a6:76:0f:93:92:90:
         04:c9:a4:72:dc:f8:88:2a:31:c4:39:b3:aa:f7:7a:78:96:4f:
         d3:bb:1f:e8:01:7e:10:ad:61:03:1e:eb:2c:5e:f1:19:13:83:
         cd:d5:69:c1:6e:c8:f7:79:63:1c:ad:51:40:2e:5d:2f:df:57:
         f3:e0:53:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:50:52 2026 by rpki-client