This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8fadca1-ece1-4fd9-8c0c-44964044b286.roa
File:                     d8fadca1-ece1-4fd9-8c0c-44964044b286.roa (raw, json)
Hash identifier:          jL1PKTZrvqxUm8mpBqlPEUyJ1WCBZEXt6uKJbuPQYHo=
Subject key identifier:   C3:3F:9A:F9:32:94:B0:0B:D0:D9:57:64:B9:82:97:76:64:4E:57:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       484438AE91CA5177CC03C769E162B3E06ADC74E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8fadca1-ece1-4fd9-8c0c-44964044b286.roa
Signing time:             Wed 10 Dec 2025 00:10:40 +0000
ROA not before:           Wed 10 Dec 2025 00:10:40 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        142.54.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:44:38:ae:91:ca:51:77:cc:03:c7:69:e1:62:b3:e0:6a:dc:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:10:40 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=c7835b525c4c1c2b4c409834a82ec5567a683d1b9a1f55b68678bede91a791b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:de:5a:95:4b:d3:f9:d3:8d:b4:1e:4e:a9:9a:
                    0a:49:70:e1:23:db:3c:88:e6:2d:d0:a9:34:07:28:
                    dd:a9:37:0a:5e:19:f9:08:14:7b:8e:95:73:5f:d0:
                    28:1b:4b:1c:64:69:c2:ce:fa:48:03:99:28:a3:7b:
                    a5:aa:9f:54:96:98:36:dc:61:3b:3c:21:ff:6e:b3:
                    6b:4c:59:48:cc:75:3d:d2:52:e2:22:a4:b8:ad:f3:
                    04:93:8c:57:1d:fc:1c:ca:b7:36:be:63:4a:45:41:
                    b3:55:23:3f:24:31:d0:35:a9:7e:f7:17:92:50:ff:
                    d6:14:d3:c0:ad:1f:e3:2c:aa:98:7a:f5:b9:36:1f:
                    80:7b:ec:b6:ee:27:d3:cd:6d:cc:71:8d:1c:55:2b:
                    78:8a:d5:40:7b:79:90:ba:08:b9:df:17:a1:c4:d6:
                    6e:65:8b:c2:0d:32:fe:db:09:a1:0c:b3:0c:e3:c9:
                    8c:8c:06:14:9c:99:03:a1:10:dd:f7:b9:d1:c8:66:
                    cc:9a:8d:77:a5:cd:d1:6e:61:89:3b:21:19:19:49:
                    df:86:03:87:c7:e8:5c:b3:86:5b:bc:0b:63:6b:95:
                    48:e7:f0:74:1e:a9:fa:98:de:77:f4:b2:2b:79:ac:
                    fa:f4:dd:ff:f1:1f:7f:2d:49:90:5d:16:9f:86:ba:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3F:9A:F9:32:94:B0:0B:D0:D9:57:64:B9:82:97:76:64:4E:57:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8fadca1-ece1-4fd9-8c0c-44964044b286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:76:7f:78:d9:59:9b:2f:7f:31:73:1c:09:2f:06:a3:42:6e:
         9d:32:93:f9:39:ca:d2:1b:50:6d:b1:4d:e6:d4:18:cb:d6:3a:
         3b:ab:f1:47:1e:19:55:a9:a8:76:c1:b7:14:02:be:72:99:56:
         db:e8:09:ef:c3:52:af:77:e0:4b:1e:37:15:f2:d0:6e:48:a6:
         c7:74:66:39:46:b0:f0:f5:ae:1e:53:f3:b2:76:68:fa:41:ad:
         81:16:d4:40:b2:56:01:5a:23:47:9d:83:fa:cd:1e:a0:19:6a:
         6f:2d:12:b4:66:dc:ca:c8:57:13:01:9c:cd:33:03:73:21:3b:
         6b:af:62:71:fc:98:60:2f:e7:80:0c:21:66:47:a8:b7:db:ef:
         69:93:5e:f2:b4:40:11:1f:4b:f5:1a:5e:b1:16:bb:65:6f:7d:
         e5:66:64:19:43:b8:cb:f1:02:62:9e:be:e0:81:07:96:d2:54:
         c3:4e:3e:7e:9d:90:d2:96:a7:49:9b:48:a1:39:d1:b2:08:65:
         65:ab:83:ef:3c:ca:50:1c:81:4f:77:30:94:2f:6f:81:85:6a:
         e9:f4:fa:57:01:7f:47:04:ff:8b:e7:50:16:c4:97:b7:d9:55:
         c5:b7:7e:09:78:15:28:05:af:15:28:1e:7a:cf:9f:6e:f1:5e:
         35:ec:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:24:06 2025 by rpki-client