This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0eeadd97-00fe-4bb9-ae64-34d965484079.roa
File:                     0eeadd97-00fe-4bb9-ae64-34d965484079.roa (raw, json)
Hash identifier:          GbsbJGW6nvnLLyOfmrEF/W2WqU1pV7O3yiTCXQCA88w=
Subject key identifier:   DE:E4:DD:8F:D8:64:A9:7B:2A:11:24:6D:4B:26:62:A2:A2:C2:4B:E0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       58264BCC20D84E28EFB3387C40D2B1E885366255
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0eeadd97-00fe-4bb9-ae64-34d965484079.roa
Signing time:             Wed 26 Nov 2025 01:11:09 +0000
ROA not before:           Wed 26 Nov 2025 01:11:09 +0000
ROA not after:            Tue 24 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.220.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:26:4b:cc:20:d8:4e:28:ef:b3:38:7c:40:d2:b1:e8:85:36:62:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 26 01:11:09 2025 GMT
            Not After : Feb 24 23:59:59 2026 GMT
        Subject: serialNumber=88f143852f82950a5f93dcd121816a551fe1173cd8d27d79aeedca3d6f5c5fa7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:ee:ae:54:69:1c:0f:bf:52:6d:c8:4e:9d:
                    db:9e:ff:56:fb:50:a6:d7:af:2e:f5:3a:4a:e6:21:
                    a0:ae:4a:8f:aa:70:2c:a2:44:1d:da:30:40:e1:5d:
                    fe:ac:30:60:ed:28:b6:44:f4:b7:52:1e:01:5b:df:
                    35:d4:e6:06:99:11:0e:05:7c:75:51:da:57:d9:7d:
                    f9:67:6c:5a:92:45:75:83:89:27:8e:df:56:10:d6:
                    55:2a:0e:cf:5e:e3:88:df:c2:9e:b9:0a:8d:19:3d:
                    a0:e8:f4:e3:a5:d4:a5:b3:37:a5:f1:1f:cc:05:b6:
                    d8:0d:ef:c0:c4:21:ea:ec:4b:6d:73:da:5f:f0:b7:
                    ab:b1:c6:4c:35:54:3d:3e:19:62:17:95:65:f1:31:
                    94:8f:cd:3d:9c:43:5c:2b:cf:69:4c:02:d2:e6:fa:
                    81:3e:83:be:ba:52:25:a6:a0:cb:d7:6e:7b:83:b6:
                    39:2d:53:fa:21:61:c1:1f:29:97:80:74:e7:a0:7f:
                    d6:ba:5b:d6:14:93:64:04:e2:eb:fc:c1:10:c8:69:
                    68:a2:81:e2:21:9d:c5:39:16:5b:56:79:db:31:d3:
                    f3:03:1c:8d:dc:55:50:2d:b3:12:3a:8c:d1:7b:16:
                    78:1c:9a:87:84:d5:70:e3:48:30:71:2c:8f:67:fa:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E4:DD:8F:D8:64:A9:7B:2A:11:24:6D:4B:26:62:A2:A2:C2:4B:E0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0eeadd97-00fe-4bb9-ae64-34d965484079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.220.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:43:5a:70:cb:0c:35:0f:7f:b0:96:16:95:1a:d5:04:0b:
         5a:51:e3:16:1a:13:84:f8:5a:1f:68:f3:4e:44:12:b4:5b:2c:
         ec:3b:bd:a0:59:9a:54:56:1a:13:9d:55:1b:c1:e6:4f:75:fa:
         2a:65:d4:05:73:17:b8:14:31:f9:bc:b5:8e:59:3a:33:cf:66:
         25:f3:f1:0b:de:11:d0:c0:2b:07:d4:ca:d3:8a:99:8c:0c:cf:
         a0:d7:bd:87:b2:4c:a7:47:f9:e7:86:f0:ea:5c:c4:bd:1c:dc:
         64:bc:57:ab:a5:8b:0d:3a:55:69:ba:5a:27:b5:05:fd:ab:95:
         05:44:3e:e4:d9:35:ba:89:7b:ff:06:71:03:55:5c:56:55:87:
         3d:fd:b2:4d:31:0f:ca:50:6e:bd:7e:23:6d:58:45:7a:8e:61:
         e4:e9:62:ff:8b:30:cc:50:a1:3b:29:53:a3:19:b8:24:85:af:
         88:14:87:58:e7:d2:80:a8:21:9b:a5:7f:86:bc:c5:86:5e:6c:
         c3:84:32:4c:47:5a:7f:84:79:75:32:d8:a7:f9:40:92:ba:a4:
         75:e5:f0:86:71:ad:1d:85:0a:a9:f1:99:fa:f5:51:bb:1e:1e:
         24:87:f9:cc:d3:42:2e:f9:61:58:82:17:1b:8a:87:ab:21:e6:
         bf:8c:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:38:13 2025 by rpki-client