This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa
File:                     a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa (raw, json)
Hash identifier:          EUSNdySEy2Gs+aIZ6UL09P6/Rixyt8q29xC4+VoVxi4=
Subject key identifier:   88:3E:D9:61:3B:AD:2A:52:76:36:EF:4E:9A:B8:DB:60:47:04:ED:3D
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       0B0F246E99BF620351CCD2613371FF1A8102B2E0
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa
Signing time:             Mon 08 Dec 2025 00:00:04 +0000
ROA not before:           Mon 08 Dec 2025 00:00:04 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        216.221.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0f:24:6e:99:bf:62:03:51:cc:d2:61:33:71:ff:1a:81:02:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Dec  8 00:00:04 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=53ce765f681249fffdd163ac87f8a5a7cbc4115c3245daf31cda37c1ba785f8a, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:98:a3:a5:c4:f9:75:6f:94:2c:71:ea:9e:70:
                    29:65:25:d3:a1:70:17:7d:61:93:27:20:b8:2e:ad:
                    08:45:07:77:82:33:3d:8c:97:bb:1b:35:85:df:a3:
                    78:3b:b6:89:c0:3f:5c:4c:5c:a3:be:0a:0b:14:56:
                    29:e6:e0:a7:49:4a:87:2f:d4:77:4c:2c:80:ac:8c:
                    13:ce:73:5c:b7:ff:99:d7:c1:0d:fc:e7:dc:5c:d8:
                    b4:7e:a9:f0:3c:e8:ea:08:a6:81:a5:69:74:f6:37:
                    14:47:13:5d:08:62:99:d2:7e:c7:13:f5:0c:5e:70:
                    12:b4:a2:20:e5:d3:9a:37:04:2a:1a:b7:62:0e:7d:
                    16:e3:b9:cb:25:de:4e:6b:05:98:e6:a7:1f:63:8b:
                    c4:7c:2a:9d:0b:0a:4e:1a:82:73:27:95:a8:e9:75:
                    99:47:cc:41:7b:10:ba:86:48:49:45:9f:77:cd:92:
                    fa:93:2a:8d:40:67:13:50:8b:93:1f:2f:0c:90:16:
                    a7:34:0f:fd:af:f7:d6:6e:28:77:64:ab:d9:73:58:
                    0d:ff:03:fa:b5:ee:50:a2:f4:4b:2e:34:c1:92:86:
                    8c:f6:f9:80:4d:7c:51:79:eb:ba:7f:6d:50:22:14:
                    de:20:82:10:c8:2f:46:0d:ea:49:a9:1d:c3:20:a9:
                    dd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3E:D9:61:3B:AD:2A:52:76:36:EF:4E:9A:B8:DB:60:47:04:ED:3D
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.221.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:61:49:08:dc:b5:e8:52:67:92:49:25:4b:82:ad:b6:96:07:
         03:ff:7d:18:83:d6:13:a7:0f:9c:22:3e:82:8d:1e:cc:46:f7:
         10:f4:9a:d2:0a:aa:53:17:7c:9a:6b:12:a8:55:24:e1:9a:45:
         97:44:87:4f:6a:f3:ae:ca:a6:fb:c4:59:f0:44:01:42:87:f1:
         d9:1f:2c:6b:c9:8c:44:66:d0:bf:d8:a0:a7:f7:1b:6d:8b:1b:
         a1:09:a7:b3:51:be:92:c8:14:37:47:88:a4:1f:e6:a3:9a:bd:
         0c:fd:a9:d9:11:bd:97:9f:a3:0d:96:a6:2d:a6:e4:61:53:1d:
         23:9b:de:f0:86:50:e5:bf:a9:07:58:1f:81:92:0c:c7:b8:4e:
         b4:73:da:44:47:e7:78:63:d0:0e:e5:a4:22:62:5d:cb:a7:05:
         4b:cc:26:0d:17:68:0f:53:02:70:04:5c:f5:c0:e5:89:3e:5a:
         c5:f1:60:ba:75:3c:da:7e:08:b9:cb:9f:67:94:c0:5b:ec:1d:
         18:43:59:77:12:63:f7:b5:38:2b:c8:9e:c1:af:b9:56:7c:78:
         d8:c1:11:87:2f:ec:9b:77:06:1d:07:85:96:9e:1b:4a:ac:a2:
         9c:68:36:da:19:a0:ef:84:c8:ce:29:17:c1:8a:21:b4:6a:7b:
         88:94:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 16:29:01 2025 by rpki-client