This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa
File:                     1e6fc649-df21-49e2-a93e-321e5fc8451b.roa (raw, json)
Hash identifier:          wU1uz+cXn1IRxO4OSNXCnIaqm1TsmGdlFx0VbPqhW7c=
Subject key identifier:   C0:A9:30:E8:B1:E4:F2:68:D4:DD:3D:71:D7:A8:8B:01:95:A3:31:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02DD0E9B2A11B2AFA1803C4EA82BBF08A3BB0075
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa
Signing time:             Mon 08 Dec 2025 00:20:47 +0000
ROA not before:           Mon 08 Dec 2025 00:20:47 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        220.157.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:dd:0e:9b:2a:11:b2:af:a1:80:3c:4e:a8:2b:bf:08:a3:bb:00:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:20:47 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=a58e4322e3332dd72212a63d8fad4ce6b0b6227d34bbbaa570647c88258bdd9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f5:c5:a1:b4:ff:49:ba:1d:38:46:ce:3e:37:
                    0b:a0:52:2a:09:fe:98:2c:b1:fd:e1:16:18:fc:bc:
                    ce:9d:b2:62:9b:a5:30:ae:87:73:00:20:0b:f8:30:
                    cd:c2:4d:e5:20:ff:08:6c:ac:35:70:ff:da:da:50:
                    84:53:36:3c:47:15:e2:e2:b8:5f:3b:19:53:d4:b0:
                    74:28:7a:88:67:29:e8:de:92:7e:71:5f:2c:ca:35:
                    a9:5a:ef:66:c5:fc:fb:ae:1a:71:61:2a:60:ff:ba:
                    7f:39:6e:32:cf:6a:bc:31:94:a2:49:5d:b2:68:46:
                    ac:2d:03:05:33:6d:e6:be:2f:4c:52:91:4c:c5:d4:
                    1e:1b:ef:bd:e5:de:92:d2:ff:8c:bc:5e:f7:3a:ce:
                    be:3d:12:4f:a0:29:6f:f9:50:18:68:aa:59:7b:58:
                    ca:eb:34:c7:a3:e4:4c:0d:6b:db:75:1f:4c:da:6e:
                    69:34:0f:35:3e:5f:7a:de:71:04:a8:37:ff:ff:28:
                    fd:01:c9:f9:73:20:c0:e1:14:ab:7a:39:11:71:6f:
                    c1:37:80:13:8a:80:25:9b:4f:50:fc:67:7f:2a:53:
                    8a:1b:fe:a6:74:29:d2:87:f2:dc:4f:e6:ea:11:06:
                    8a:53:b7:dd:3a:af:8e:78:14:f5:4b:ae:ef:e2:bc:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A9:30:E8:B1:E4:F2:68:D4:DD:3D:71:D7:A8:8B:01:95:A3:31:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.157.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:fc:9d:a1:24:15:4e:de:e1:a8:02:bb:13:8e:1e:ca:c8:14:
         15:32:48:06:c9:4d:ed:eb:37:af:1b:c6:45:fc:60:7c:8a:1a:
         9b:33:ef:20:70:d3:03:59:96:48:0d:40:7f:1e:e7:61:ab:2d:
         5a:d2:64:eb:40:47:79:4b:99:a2:2b:5c:7b:fa:36:d1:0f:35:
         e5:4a:83:23:44:10:92:00:ea:0a:3d:6b:42:96:b8:d8:22:ac:
         fd:de:04:cb:e8:c8:52:ca:fc:8e:7e:ca:41:b2:a5:59:cd:eb:
         f9:1b:f4:af:94:1f:ab:63:d4:4b:12:7c:05:86:5d:06:ab:8c:
         7b:b4:6b:4c:ec:48:fc:6f:f5:bc:83:d3:b7:f6:54:03:e7:71:
         c3:b0:4c:72:c4:d7:30:74:03:83:0f:35:c8:5e:ec:c2:d1:61:
         95:6c:8e:9e:37:c5:8e:cc:c3:d1:2e:72:aa:6f:62:c7:f4:7d:
         35:cf:93:42:4a:93:a0:e0:06:28:18:ec:f4:99:84:b6:01:df:
         d6:8a:50:62:97:01:15:ae:a1:ab:0a:67:a7:80:18:1a:bf:85:
         bf:bf:62:b9:ae:e6:04:28:8f:4d:99:cb:4f:f7:58:6c:92:c3:
         a9:1e:db:ec:90:36:5c:95:67:06:e5:35:6d:ff:23:b7:a5:a9:
         aa:a8:e1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:02:50 2025 by rpki-client