This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa
File:                     44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa (raw, json)
Hash identifier:          yA9fnm5b7rcWgRGRY/WFhZL3DaANeux8aWLL8znJYb8=
Subject key identifier:   69:23:10:54:28:36:FD:FF:9E:A9:3B:5B:10:70:16:4D:93:4E:9A:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AF3272070A68E14B2F85331038332E0A2655815
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa
Signing time:             Mon 08 Dec 2025 00:10:08 +0000
ROA not before:           Mon 08 Dec 2025 00:10:08 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.101.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f3:27:20:70:a6:8e:14:b2:f8:53:31:03:83:32:e0:a2:65:58:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:10:08 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=f1d804c224d3ee35888f42fa4f2eff2da3470577cb9948564bff3641e7b7fc57, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:a0:1b:98:bf:10:e5:ef:ee:c9:21:7d:dc:
                    6a:6a:23:9e:67:5e:cd:18:55:49:b1:82:8f:5a:56:
                    a2:4e:10:70:64:4e:b4:67:7c:06:b2:7e:54:28:c8:
                    ae:fc:1e:ce:a3:91:ea:e8:55:35:dc:73:e0:47:46:
                    ef:c2:f6:0e:e1:2c:0b:14:02:82:f8:93:0f:8d:51:
                    a0:ca:b5:b8:62:07:c8:9f:c5:a7:74:40:df:72:32:
                    80:3a:2b:3f:a0:ae:e9:99:23:5f:01:98:1e:ad:d3:
                    d9:8c:88:36:3c:a5:9f:4f:11:86:bc:79:86:3c:96:
                    85:ec:dc:19:49:b3:d8:0f:0b:ee:16:2d:d8:ac:66:
                    81:09:de:00:60:93:5f:a0:55:e6:0e:73:96:8d:94:
                    df:6d:bf:83:8a:39:2a:e2:94:64:f0:48:81:3d:96:
                    4c:dc:82:1e:fa:5d:37:f4:6c:cb:d2:ec:fe:81:d8:
                    78:8d:83:64:fe:ef:e7:47:ef:bd:15:64:b8:9f:46:
                    d8:60:19:c0:2f:d4:8d:3f:b6:5b:c3:f2:86:7b:3f:
                    06:bd:95:05:99:e2:89:e9:e2:77:ea:c5:0f:10:e0:
                    4f:bb:72:09:0a:33:8d:c3:d5:b9:f6:de:ef:28:9a:
                    66:71:97:e3:53:f2:d9:5b:c4:d1:a8:46:e7:56:87:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:23:10:54:28:36:FD:FF:9E:A9:3B:5B:10:70:16:4D:93:4E:9A:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:35:16:0a:24:19:25:36:6c:e1:15:1e:27:da:31:83:b7:ac:
         d1:5f:45:24:3b:fb:8f:0b:5e:a8:06:18:65:a8:4e:1f:9c:6e:
         db:f0:7f:64:61:f8:c3:e2:db:09:e5:d9:22:bf:b3:4e:71:a6:
         ed:c2:b1:39:a7:41:1c:62:72:d4:2c:88:c0:99:b6:86:a8:46:
         58:48:01:97:cc:30:79:9e:8b:74:ec:3d:43:9a:ea:2f:a5:29:
         b8:b5:51:b4:a7:28:79:5f:f0:51:67:6f:b6:8c:11:3e:9b:83:
         c7:9c:4a:14:ba:0c:1e:ba:cd:1d:31:49:69:67:bf:77:2a:39:
         22:af:34:0a:19:f2:4b:1a:60:8c:fb:a9:fd:ce:a8:1a:08:94:
         41:f2:2e:c8:69:54:e2:8b:47:f7:38:48:a5:10:ac:38:e5:98:
         6b:d1:ab:24:df:07:6e:90:51:6b:99:76:56:7a:94:0c:fb:29:
         4c:a6:cf:a9:40:7b:76:be:1c:d1:89:41:12:8e:7e:36:42:09:
         d1:5e:36:97:12:b2:cf:c6:db:6f:4f:d8:3c:55:d2:4d:b2:59:
         c1:50:35:3c:58:18:cf:02:80:9c:df:f2:1f:72:56:8d:15:40:
         a1:d4:b9:65:2b:53:f0:f7:af:28:8d:77:29:38:9f:11:e2:e5:
         f5:ca:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 12:42:14 2025 by rpki-client