This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05e8d37c-5311-441c-8850-3573d172165c.roa
File:                     05e8d37c-5311-441c-8850-3573d172165c.roa (raw, json)
Hash identifier:          luWuyJwDw1sb4vXVcGCy/ZnClVAnxAjPdNJGgCXIsg4=
Subject key identifier:   97:D3:B0:E1:BB:EC:1D:C8:2B:83:C0:4D:CF:CB:E5:44:32:D7:AB:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74682B69313CC3C07D7E3D2D62F525A09CD62EE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05e8d37c-5311-441c-8850-3573d172165c.roa
Signing time:             Thu 11 Dec 2025 00:10:59 +0000
ROA not before:           Thu 11 Dec 2025 00:10:59 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        40.182.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:68:2b:69:31:3c:c3:c0:7d:7e:3d:2d:62:f5:25:a0:9c:d6:2e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 11 00:10:59 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=8055e4ad02ba9929c416da2eee166a53f69dd0296354669a859e945b0e82a2d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:e1:e7:42:57:be:9a:91:fa:fc:3b:6e:e8:
                    bc:a4:b2:ab:4e:54:73:40:fb:fa:b0:19:46:99:39:
                    14:cf:4e:e0:08:cf:32:20:dd:5a:bd:50:a4:3f:ae:
                    90:eb:34:6e:5f:8e:f1:a2:25:67:97:1f:8c:d2:5a:
                    3e:0d:26:fa:ba:6b:ae:e7:8b:4f:84:16:47:4a:1a:
                    38:02:b4:16:f7:5f:77:06:af:2f:af:ef:f3:f4:b5:
                    71:cf:65:29:73:f9:57:37:42:ab:74:eb:24:c9:e9:
                    98:e8:5a:0c:ce:45:91:87:7e:c0:bf:e4:02:8a:2e:
                    22:10:74:c8:77:76:78:e7:a7:03:b0:f8:3f:80:4c:
                    a7:eb:d1:d7:d0:1c:b5:9e:2c:bc:c3:ae:46:0b:38:
                    08:57:1c:e1:1f:b2:22:00:3b:02:8e:aa:e8:05:32:
                    ba:2f:33:a6:22:dc:69:86:c9:48:5a:47:8a:91:72:
                    c5:64:24:95:d7:a2:89:76:66:75:2a:e2:d7:49:e4:
                    c3:34:c4:9a:f6:17:dd:f1:5d:3b:fa:42:a3:17:62:
                    bf:a4:b6:90:b6:be:52:05:d3:6a:f6:99:5d:c7:b6:
                    a3:3d:10:1f:12:ea:08:b9:a7:f8:95:6e:c6:57:34:
                    ec:25:15:61:d5:a7:91:3a:1b:97:b8:94:12:93:3f:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D3:B0:E1:BB:EC:1D:C8:2B:83:C0:4D:CF:CB:E5:44:32:D7:AB:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05e8d37c-5311-441c-8850-3573d172165c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:b3:5c:98:a3:72:f5:74:13:3b:7a:d8:20:a4:d5:55:5a:c9:
         7d:4c:d2:80:2a:91:e8:df:dd:ab:9b:ce:91:13:a3:9e:63:04:
         a6:ed:34:b5:ff:7d:35:86:80:b8:cf:db:6c:06:7d:b4:32:b9:
         31:04:21:72:99:0f:53:6e:7f:65:d0:3f:e7:b9:d1:91:79:8f:
         ac:3b:8e:8d:f8:a4:4f:37:f2:1a:e3:82:a4:4d:56:21:f8:de:
         80:28:55:40:e2:0f:e6:97:40:ea:7b:37:23:3d:35:ad:21:fc:
         bd:d4:38:bf:e8:37:75:1a:e7:f4:74:7d:28:8c:d2:8c:e6:f6:
         ec:39:20:4f:a1:66:3e:da:9b:d2:1d:f5:72:cc:16:df:24:33:
         46:01:20:92:f0:d7:fa:00:bd:01:4b:02:66:fa:ab:7a:b9:ef:
         ee:84:d5:7f:cb:9b:ac:87:0e:06:41:9f:34:08:aa:5d:53:4e:
         06:90:a2:c7:a1:f6:fc:02:c2:6e:78:9b:4d:f0:37:c4:b2:7e:
         29:d7:84:11:24:2a:7b:5e:00:ff:22:3d:22:42:fc:2c:bf:75:
         88:74:fe:13:5f:45:96:42:6d:92:40:48:3d:c2:98:3f:1b:2a:
         a1:1e:be:12:0b:53:ca:95:9a:47:6b:60:6d:0d:9b:5f:cb:a6:
         7f:b5:8e:02
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUdGgraTE8w8B9fj0tYvUloJzWLuQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjExMDAxMDU5WhcNMjYwMzExMjM1OTU5
WjB6MUkwRwYDVQQFE0A4MDU1ZTRhZDAyYmE5OTI5YzQxNmRhMmVlZTE2NmE1M2Y2
OWRkMDI5NjM1NDY2OWE4NTllOTQ1YjBlODJhMmQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfq+HnQle+mpH6/Dtu6LyksqtOVHNA+/qwGUaZORTPTuAI
zzIg3Vq9UKQ/rpDrNG5fjvGiJWeXH4zSWj4NJvq6a67ni0+EFkdKGjgCtBb3X3cG
ry+v7/P0tXHPZSlz+Vc3Qqt06yTJ6ZjoWgzORZGHfsC/5AKKLiIQdMh3dnjnpwOw
+D+ATKfr0dfQHLWeLLzDrkYLOAhXHOEfsiIAOwKOqugFMrovM6Yi3GmGyUhaR4qR
csVkJJXXool2ZnUq4tdJ5MM0xJr2F93xXTv6QqMXYr+ktpC2vlIF02r2mV3HtqM9
EB8S6gi5p/iVbsZXNOwlFWHVp5E6G5e4lBKTP2yHAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUl9Ow4bvsHcgrg8BNz8vlRDLXq8MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA1ZThkMzdjLTUzMTEtNDQxYy04ODUwLTM1NzNkMTcyMTY1Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAotjANBgkqhkiG9w0BAQsFAAOCAQEAALNcmKNy9XQTO3rYIKTVVVrJfUzS
gCqR6N/dq5vOkROjnmMEpu00tf99NYaAuM/bbAZ9tDK5MQQhcpkPU25/ZdA/57nR
kXmPrDuOjfikTzfyGuOCpE1WIfjegChVQOIP5pdA6ns3Iz01rSH8vdQ4v+g3dRrn
9HR9KIzSjOb27DkgT6FmPtqb0h31cswW3yQzRgEgkvDX+gC9AUsCZvqrernv7oTV
f8ubrIcOBkGfNAiqXVNOBpCix6H2/ALCbnibTfA3xLJ+KdeEESQqe14A/yI9IkL8
LL91iHT+E19FlkJtkkBIPcKYPxsqoR6+EgtTypWaR2tgbQ2bX8umf7WOAg==
-----END CERTIFICATE-----
Generated at Wed Dec 24 10:31:13 2025 by rpki-client