This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa
File:                     f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa (raw, json)
Hash identifier:          xt1plLXzkymiJ0gn02hAmszvPUn3NaJPN8fL1jJM/a4=
Subject key identifier:   44:6B:61:B1:D7:E4:7F:4E:C7:93:59:0C:BA:86:7A:C0:6B:1F:3E:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       465E072D366C81C087175B83C8449795BDB8C28D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa
Signing time:             Sun 07 Dec 2025 01:21:15 +0000
ROA not before:           Sun 07 Dec 2025 01:21:15 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        216.182.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5e:07:2d:36:6c:81:c0:87:17:5b:83:c8:44:97:95:bd:b8:c2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:21:15 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=6f57cc031d0e6ae3892f2a7bba1ab676fffb6742608f527dda172468d88c9186, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:ea:f8:c7:bd:16:92:ae:7c:98:9d:1f:ad:
                    19:f9:51:4e:b4:31:3e:bd:15:21:d7:4e:07:a7:b5:
                    c8:40:d8:30:74:3a:7d:8f:e5:3a:0d:cd:6d:61:39:
                    22:07:6d:85:bd:3b:9a:37:7c:f0:f9:38:c3:23:00:
                    9b:c6:4c:53:8a:34:af:35:59:cc:c7:4a:9e:d4:ef:
                    61:70:ab:eb:d1:1e:19:e9:9e:3a:14:bd:9d:03:88:
                    70:9e:b7:e5:4e:b1:c4:27:03:80:88:5d:6b:3d:f7:
                    df:a6:f3:72:27:b8:dd:6f:85:41:8c:6d:3a:dd:bf:
                    cc:89:50:6d:e7:b5:db:4f:11:b5:bf:e6:38:9f:cb:
                    57:40:d7:76:11:e4:6f:92:33:af:2e:05:ef:e8:15:
                    4f:9d:10:cc:9b:87:91:fb:90:28:9d:55:db:8c:bc:
                    fa:43:6c:76:5d:0d:36:3d:30:a9:1b:59:6e:e5:b8:
                    7e:fa:96:f4:02:fb:88:4f:d6:8f:85:52:f0:30:f1:
                    21:e1:50:98:56:52:25:e8:12:d2:08:78:99:2e:5e:
                    e8:f8:12:95:9a:2f:32:4f:9f:be:da:e5:3c:e6:10:
                    bd:c9:c4:cd:f7:1b:b9:30:ac:cd:d7:ef:1a:88:a4:
                    78:a2:95:3d:b0:97:24:8c:b5:71:6f:c9:48:7c:de:
                    16:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6B:61:B1:D7:E4:7F:4E:C7:93:59:0C:BA:86:7A:C0:6B:1F:3E:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.182.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:09:ce:1b:b0:fc:71:99:81:33:32:d0:24:05:cb:13:e1:f3:
         bf:ef:b8:1c:9a:11:a7:67:4e:de:0f:85:7f:40:3e:fc:68:0b:
         99:0f:0c:d4:9f:01:82:82:39:52:a9:ec:30:63:3e:73:61:42:
         dd:61:e9:e4:04:c0:a0:ab:f7:be:e1:39:c4:cc:95:9c:52:f7:
         ea:85:75:ba:59:b6:66:16:a7:61:73:97:6b:f2:db:71:33:41:
         c7:7d:b5:8b:94:c6:42:e4:7b:da:fc:de:24:a4:98:75:20:b4:
         40:3c:dc:05:8d:25:68:7f:1a:a3:34:e5:58:67:d0:2e:2b:85:
         a7:10:ad:90:7d:54:12:fc:be:84:63:35:74:40:de:82:b5:1e:
         bd:38:7e:2a:6f:b8:4d:32:4e:10:8b:29:d4:11:2d:02:29:ae:
         f7:56:a4:13:19:e2:00:96:e7:04:69:c2:e2:48:d5:a7:14:31:
         f6:88:ba:07:88:2b:f4:f9:13:a9:2c:25:2d:fa:28:ce:5a:fe:
         6b:f7:0b:4b:b0:55:30:03:3d:bc:05:33:6a:f1:9e:ff:52:4b:
         60:94:27:eb:40:6e:23:01:d5:2e:cd:2a:b6:f6:67:62:25:0f:
         94:51:21:77:96:68:9f:21:37:a1:78:dd:21:d0:2d:8b:59:52:
         e0:05:b8:a7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURl4HLTZsgcCHF1uDyESXlb24wo0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA3MDEyMTE1WhcNMjYwMzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZjU3Y2MwMzFkMGU2YWUzODkyZjJhN2JiYTFhYjY3NmZm
ZmI2NzQyNjA4ZjUyN2RkYTE3MjQ2OGQ4OGM5MTg2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOrer4x70Wkq58mJ0frRn5UU60MT69FSHXTgentchA2DB0
On2P5ToNzW1hOSIHbYW9O5o3fPD5OMMjAJvGTFOKNK81WczHSp7U72Fwq+vRHhnp
njoUvZ0DiHCet+VOscQnA4CIXWs999+m83InuN1vhUGMbTrdv8yJUG3ntdtPEbW/
5jify1dA13YR5G+SM68uBe/oFU+dEMybh5H7kCidVduMvPpDbHZdDTY9MKkbWW7l
uH76lvQC+4hP1o+FUvAw8SHhUJhWUiXoEtIIeJkuXuj4EpWaLzJPn77a5TzmEL3J
xM33G7kwrM3X7xqIpHiilT2wlySMtXFvyUh83hYJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURGthsdfkf07Hk1kMuoZ6wGsfPjAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y2ZGYwOTM5LTdjYzMtNDE5Ni1iNGVhLWQ0MWQ0ZmI0NDMxYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALYtugwDQYJKoZIhvcNAQELBQADggEBAL4Jzhuw/HGZgTMy0CQFyxPh87/v
uByaEadnTt4PhX9APvxoC5kPDNSfAYKCOVKp7DBjPnNhQt1h6eQEwKCr977hOcTM
lZxS9+qFdbpZtmYWp2Fzl2vy23EzQcd9tYuUxkLke9r83iSkmHUgtEA83AWNJWh/
GqM05Vhn0C4rhacQrZB9VBL8voRjNXRA3oK1Hr04fipvuE0yThCLKdQRLQIprvdW
pBMZ4gCW5wRpwuJI1acUMfaIugeIK/T5E6ksJS36KM5a/mv3C0uwVTADPbwFM2rx
nv9SS2CUJ+tAbiMB1S7NKrb2Z2IlD5RRIXeWaJ8hN6F43SHQLYtZUuAFuKc=
-----END CERTIFICATE-----
Generated at Fri Jan 9 16:46:41 2026 by rpki-client