This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa
File:                     f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (raw, json)
Hash identifier:          GX6D4EMLfoaMnpBeGAjAjszZFBVsp1t7Dy13B+dgmSg=
Subject key identifier:   89:7B:55:27:74:C1:C2:F2:D1:EC:C9:75:86:02:13:14:4E:40:C8:88
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       6863481BEFA884B196397EEED2853569AB302014
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa
Signing time:             Sun 07 Dec 2025 00:10:05 +0000
ROA not before:           Sun 07 Dec 2025 00:10:05 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        198.41.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:63:48:1b:ef:a8:84:b1:96:39:7e:ee:d2:85:35:69:ab:30:20:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Dec  7 00:10:05 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=1724f0f608a27cd742deb830050f2135fbe04137e6941d3f3ead18b5cb002463, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:b9:63:95:5f:f3:53:7c:70:cd:0a:55:36:
                    cf:73:00:c8:cb:ea:58:db:ec:d2:d0:f2:24:b4:27:
                    00:36:e4:2d:e6:6f:d8:b5:38:92:79:a9:85:df:68:
                    ab:2d:b3:3b:10:05:ed:0b:00:9d:6d:fb:62:bf:5a:
                    f2:da:d9:08:35:66:4e:9d:82:7a:d1:3c:47:2b:88:
                    8a:64:a3:f7:76:79:65:dd:79:91:12:c6:db:c2:bb:
                    45:06:f6:3b:cd:10:a7:07:7a:b8:66:03:ec:92:24:
                    0e:46:46:95:64:2b:26:53:78:e9:82:0c:4e:2b:dd:
                    07:b3:ad:10:85:2e:7d:c5:b5:f0:b4:ba:da:58:06:
                    29:a4:aa:c4:73:8e:5f:5c:7d:85:98:21:66:4f:d2:
                    71:8b:a7:e5:39:7d:ec:a9:14:8d:a4:fc:ce:27:d3:
                    97:4e:35:7c:40:fc:7b:85:59:b2:b7:87:e9:03:d5:
                    5b:37:4f:14:96:d3:3a:8b:4a:0a:29:39:ff:b2:db:
                    d7:78:98:17:23:9f:e5:78:8e:89:85:a5:58:56:8f:
                    90:39:7d:d0:06:42:9e:19:ad:10:bc:e6:c2:08:9b:
                    7b:b0:28:9f:32:5d:8c:1c:a6:ab:c1:16:6f:d7:e8:
                    b2:fa:49:a9:0c:35:39:72:6f:27:2c:47:4f:1d:27:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7B:55:27:74:C1:C2:F2:D1:EC:C9:75:86:02:13:14:4E:40:C8:88
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:8e:eb:4c:c6:67:14:c3:18:23:d4:9e:d4:e1:99:a2:e7:ac:
         1e:78:20:da:6f:b7:9e:7d:3c:07:a1:cd:b4:f0:a5:40:35:13:
         9c:f7:0f:4e:c4:e0:73:03:3f:eb:ee:63:3d:f7:59:9e:e0:e5:
         4f:99:0f:3f:71:10:a6:70:38:c5:9e:31:c7:c1:12:a6:82:42:
         21:f2:1f:c3:c8:84:07:fb:e4:d3:67:ec:e2:21:05:d9:31:e7:
         38:5f:6d:8f:d1:9b:e4:08:5c:d8:eb:53:71:16:14:28:78:aa:
         b7:36:4b:27:c8:be:37:ba:d0:da:aa:26:e3:7e:fb:65:bb:3f:
         6d:36:85:f5:70:74:e0:6a:67:20:6b:b1:be:28:a3:ab:57:83:
         aa:65:d9:79:4b:d6:ef:ba:ef:bf:99:70:56:ec:ff:41:c6:54:
         e8:d0:bd:31:d4:2d:ab:3d:0c:6e:c2:ae:a0:08:1f:8d:ec:42:
         59:74:9f:96:27:c2:9d:94:23:69:f0:eb:30:6d:1c:e0:5c:d5:
         71:56:8e:5e:fa:94:f1:94:14:40:9a:72:de:f8:ff:54:6d:d2:
         0c:92:bd:d3:45:58:67:9b:d9:54:cd:5b:98:fb:1f:ba:56:a3:
         48:0e:73:f2:1a:75:7b:55:13:3f:d3:18:71:0a:06:c0:13:1e:
         f9:f9:f1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:47:53 2025 by rpki-client