This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa
File:                     3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa (raw, json)
Hash identifier:          fJxlSHciHi3gfpxKy0HE0NK/6cCDGWZkzSoMXuhTVLs=
Subject key identifier:   CF:AA:EF:A8:76:A4:A7:7B:02:9C:35:BA:F7:EB:8D:20:84:FA:A6:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       221B60EE3959B5DA5BCD80A1450E6C0BB5A152C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa
Signing time:             Mon 08 Dec 2025 00:30:14 +0000
ROA not before:           Mon 08 Dec 2025 00:30:14 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        75.101.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1b:60:ee:39:59:b5:da:5b:cd:80:a1:45:0e:6c:0b:b5:a1:52:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:30:14 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=c92ffa47335be2c0a21315bc9aabfe3088036f651627832324388b043071e4a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:21:40:97:73:ea:54:e5:1f:49:66:61:90:
                    27:75:9d:45:13:da:e0:b7:b9:71:b2:39:2b:03:f1:
                    d1:90:42:80:46:53:f0:b9:af:4f:7b:76:5d:93:86:
                    f1:43:41:fd:45:12:d8:11:b1:ed:95:c4:13:00:4c:
                    40:b5:71:dd:51:e9:6b:e1:97:66:85:f0:78:e7:6e:
                    b0:a8:a3:79:be:98:f8:d1:2d:26:5c:32:0f:c0:9c:
                    a1:02:ab:fa:3c:c6:0d:4a:9c:a3:54:b9:37:00:38:
                    a0:93:c8:84:42:f6:e5:bd:2b:f0:62:e9:61:73:55:
                    59:d1:6e:bd:95:5a:bd:54:ce:86:9f:6b:ed:33:42:
                    eb:88:7f:03:e5:7d:07:44:c9:dd:0b:51:31:b7:e5:
                    7d:4a:58:b0:e1:9c:9e:ef:b4:91:3e:79:c3:6d:b4:
                    6d:44:62:bd:8b:c8:0b:77:f4:5d:ed:3c:58:5f:64:
                    05:6d:a6:fc:d1:a8:7a:f9:3e:06:0a:ef:2c:38:65:
                    3e:2f:ad:4b:78:01:17:94:af:67:b4:47:f6:91:bb:
                    24:e5:33:41:4e:cb:b1:80:35:e4:7c:a7:cd:bb:5a:
                    8d:ea:d7:1b:73:64:f5:80:f8:12:d7:3c:74:cc:21:
                    36:f3:bb:74:2c:f9:49:2f:a4:ca:9a:4c:2a:68:a5:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AA:EF:A8:76:A4:A7:7B:02:9C:35:BA:F7:EB:8D:20:84:FA:A6:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:7c:0c:b7:cb:dd:e3:ba:5b:5b:6d:37:09:a0:16:6f:90:91:
         9b:9e:75:fe:2f:38:b8:4b:77:90:81:c5:7c:8f:18:ce:eb:5f:
         46:f5:25:5f:66:11:f5:79:6a:a8:e7:da:ea:47:70:c4:98:70:
         df:9a:60:83:c7:45:a9:62:1c:17:1e:3e:09:4d:79:27:8f:66:
         53:90:ee:df:5a:77:6b:b3:95:0e:83:75:5d:a5:df:aa:ce:38:
         f3:25:f5:27:ed:a1:cc:16:13:df:86:d1:28:dd:38:1b:35:fa:
         8c:cb:84:6f:26:bf:d3:5b:69:65:60:31:69:f1:4e:3f:90:02:
         f1:83:2d:9d:84:b5:7a:30:9c:c3:d0:c8:8c:c6:86:a9:95:70:
         ae:ca:b5:e4:7e:4f:e3:7a:a3:d8:0f:3e:4f:9e:46:19:88:76:
         da:40:68:52:a0:31:9a:fd:98:ac:0f:4f:1d:79:18:d0:a1:6b:
         d5:6e:35:8b:20:39:0f:7c:87:74:75:56:a7:70:03:83:12:3b:
         5d:a9:5d:04:71:63:eb:87:47:67:2d:ca:69:94:ec:04:21:83:
         f4:d8:7d:58:e0:5c:0c:48:01:1f:3b:5b:e2:ed:69:64:79:1c:
         2d:25:61:ca:06:78:82:6e:c0:d3:b0:69:17:f8:ee:6c:a8:57:
         c6:be:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:38:24 2025 by rpki-client