This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa
File:                     e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa (raw, json)
Hash identifier:          LiE69EVe6zxIOK1gtpW2Rd52XxPBqAwJO4TSJ7k+gpw=
Subject key identifier:   02:DC:0C:D8:97:81:A2:7D:6D:5C:11:36:93:67:94:CC:91:65:4C:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       340122D2F256A1222BA8AC22D090803FEA8796F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa
Signing time:             Wed 10 Dec 2025 00:20:40 +0000
ROA not before:           Wed 10 Dec 2025 00:20:40 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.56.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:01:22:d2:f2:56:a1:22:2b:a8:ac:22:d0:90:80:3f:ea:87:96:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:20:40 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=f6954f74656a8eb5d6876961a16529aa585c531458e5cbf262a644e2aeb7f3f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:43:91:40:dd:95:27:d5:0b:26:ab:4b:fe:
                    df:10:41:a8:56:31:ab:70:5a:86:4e:c2:f7:71:ea:
                    a9:75:99:c0:03:0e:64:af:99:86:74:52:0f:41:8c:
                    17:f8:6b:db:ac:12:98:74:a3:43:32:31:b2:1b:3b:
                    e2:0e:7c:1b:69:fc:1c:f1:1b:9f:a5:ed:4d:88:24:
                    18:77:0e:60:a7:51:b9:7d:53:43:4f:03:6a:56:01:
                    03:65:d6:97:98:92:59:33:93:fd:48:c0:03:7f:f8:
                    be:e8:5b:70:1d:cb:34:22:d7:b7:58:4a:91:24:a1:
                    cf:d9:67:3c:1f:c3:25:af:40:2e:ec:08:1e:7e:e6:
                    f5:d5:08:b9:1b:8b:93:2e:62:c6:6d:9a:b5:e5:54:
                    73:2b:0c:a1:42:d7:94:d4:a8:2f:d5:e5:90:f8:41:
                    be:5f:03:c9:c0:51:61:fc:88:54:93:1f:3e:d4:42:
                    0e:69:ca:cb:b5:81:ed:d1:4a:a4:76:e5:c8:df:5b:
                    30:cc:15:7a:c2:40:21:8d:10:66:fd:e3:5d:ac:ff:
                    f1:67:f5:66:57:62:7c:f3:80:be:3f:17:79:db:4c:
                    da:6e:c1:f8:10:a3:4d:cf:34:85:1f:bd:75:08:0d:
                    96:33:80:7d:e7:2f:8f:16:93:f9:c7:9d:a4:fa:9d:
                    cc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DC:0C:D8:97:81:A2:7D:6D:5C:11:36:93:67:94:CC:91:65:4C:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:da:33:f8:ae:18:fd:4d:a2:48:24:75:0e:84:02:f7:20:84:
         dd:7e:09:a8:6c:38:8a:ca:53:9d:71:ed:df:68:7c:0e:12:f7:
         e0:93:55:a6:0d:f4:26:92:9b:2f:40:d0:39:ea:71:9a:b4:db:
         e1:f2:e1:ba:f0:39:e0:d3:e2:ac:b5:24:99:e9:bb:c3:51:1e:
         8a:fe:3f:20:7d:aa:c0:c5:71:a0:82:2c:cb:5d:76:ce:1d:68:
         2a:ff:50:ad:84:5a:fe:5e:06:76:a9:36:da:06:3d:98:21:10:
         2e:6c:1d:51:7f:d3:a3:da:53:b3:0d:81:06:e8:b3:0d:6d:a1:
         3c:e0:f7:10:09:cf:3f:ce:b1:06:bc:03:cf:ee:21:41:82:12:
         88:dd:9a:47:23:ad:b1:ab:a0:72:fa:be:70:00:7c:27:84:e2:
         13:e1:20:fd:0f:46:8b:0c:36:ee:b7:67:4b:ce:fc:ff:d7:3c:
         43:5e:65:eb:e1:74:9f:47:ea:82:02:5b:b1:3b:3f:c8:50:f6:
         de:fb:2a:50:dd:6f:3c:be:33:fb:7a:cc:56:70:bb:51:93:62:
         6a:6b:3c:17:da:74:84:1e:3f:5e:26:b4:3f:c0:a0:1e:b7:9f:
         20:c8:7e:56:8f:8b:10:fe:30:5b:15:b6:79:f3:c8:3c:e8:24:
         cd:68:5b:c3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNAEi0vJWoSIrqKwi0JCAP+qHlvYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAyMDQwWhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNjk1NGY3NDY1NmE4ZWI1ZDY4NzY5NjFhMTY1MjlhYTU4
NWM1MzE0NThlNWNiZjI2MmE2NDRlMmFlYjdmM2YxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxFEORQN2VJ9ULJqtL/t8QQahWMatwWoZOwvdx6ql1mcAD
DmSvmYZ0Ug9BjBf4a9usEph0o0MyMbIbO+IOfBtp/BzxG5+l7U2IJBh3DmCnUbl9
U0NPA2pWAQNl1peYklkzk/1IwAN/+L7oW3AdyzQi17dYSpEkoc/ZZzwfwyWvQC7s
CB5+5vXVCLkbi5MuYsZtmrXlVHMrDKFC15TUqC/V5ZD4Qb5fA8nAUWH8iFSTHz7U
Qg5pysu1ge3RSqR25cjfWzDMFXrCQCGNEGb9412s//Fn9WZXYnzzgL4/F3nbTNpu
wfgQo03PNIUfvXUIDZYzgH3nL48Wk/nHnaT6ncw9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAtwM2JeBon1tXBE2k2eUzJFlTLowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U1MTFjM2FiLWEzZDQtNDM0NC05ZTE5LWRkZDViOGMwZTEwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUQOOAwDQYJKoZIhvcNAQELBQADggEBAInaM/iuGP1NokgkdQ6EAvcghN1+
CahsOIrKU51x7d9ofA4S9+CTVaYN9CaSmy9A0DnqcZq02+Hy4brwOeDT4qy1JJnp
u8NRHor+PyB9qsDFcaCCLMtdds4daCr/UK2EWv5eBnapNtoGPZghEC5sHVF/06Pa
U7MNgQbosw1toTzg9xAJzz/OsQa8A8/uIUGCEojdmkcjrbGroHL6vnAAfCeE4hPh
IP0PRosMNu63Z0vO/P/XPENeZevhdJ9H6oICW7E7P8hQ9t77KlDdbzy+M/t6zFZw
u1GTYmprPBfadIQeP14mtD/AoB63nyDIflaPixD+MFsVtnnzyDzoJM1oW8M=
-----END CERTIFICATE-----
Generated at Fri Jan 9 16:48:14 2026 by rpki-client