This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eaefb9e-609a-4802-b06c-b7139eb4af45.roa
File:                     4eaefb9e-609a-4802-b06c-b7139eb4af45.roa (raw, json)
Hash identifier:          hMfjWUE545tvEfphlG+fcQaXJ6DfBVD6sl/di8vS5LA=
Subject key identifier:   E9:BA:7D:A1:3A:D7:AF:57:1F:A9:EB:68:2C:57:88:EF:0D:D4:D2:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69CA416401CF9497F21E7FA9F28785E24B2C5C3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eaefb9e-609a-4802-b06c-b7139eb4af45.roa
Signing time:             Thu 11 Dec 2025 00:40:19 +0000
ROA not before:           Thu 11 Dec 2025 00:40:19 +0000
ROA not after:            Wed 11 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.57.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ca:41:64:01:cf:94:97:f2:1e:7f:a9:f2:87:85:e2:4b:2c:5c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 11 00:40:19 2025 GMT
            Not After : Mar 11 23:59:59 2026 GMT
        Subject: serialNumber=73b4b5fab1a735dccd2e06b8f6f7f0a54d6367299b7b245d1c4eda678d610af5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:d9:d3:04:29:36:ee:a8:2c:0b:f5:5f:1b:
                    f4:b0:7f:e8:3f:6b:2f:79:da:4e:e4:00:df:e6:70:
                    b1:83:aa:9d:15:24:3d:c7:75:61:cc:cb:f7:b0:b7:
                    01:bc:17:ef:0e:3b:0c:20:b2:ba:a6:3c:0a:27:b5:
                    d1:e2:3d:be:e7:56:0c:77:d0:3c:12:86:a1:d6:c4:
                    a0:b9:9c:eb:3a:4a:8b:3a:b1:e9:5f:70:49:22:18:
                    81:46:a7:7f:7b:51:93:ae:bb:be:3f:5f:2d:52:ae:
                    51:1e:08:bd:5b:63:e8:08:bf:c1:88:36:35:83:41:
                    c2:35:da:56:d4:76:d0:9c:9f:bc:e1:9b:21:3e:97:
                    e2:93:f1:5b:9d:60:b7:76:ea:ff:2f:51:6a:bc:c8:
                    d0:84:81:93:b2:5e:db:61:51:d2:3e:11:38:88:38:
                    dc:de:cc:87:91:e0:b3:ed:b3:08:06:6c:87:b7:40:
                    71:2e:f8:89:f2:64:2b:a3:85:ba:d9:10:20:55:f8:
                    ff:cc:01:51:5a:36:ee:29:6d:f0:87:a8:35:5d:00:
                    c1:7d:84:b1:a8:11:91:20:a7:56:43:3c:66:8c:7e:
                    25:f3:0a:6a:bb:71:b4:4b:ac:9a:5e:16:c3:30:1a:
                    e2:55:c5:68:34:0c:7a:17:2c:69:05:4a:ad:93:25:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BA:7D:A1:3A:D7:AF:57:1F:A9:EB:68:2C:57:88:EF:0D:D4:D2:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eaefb9e-609a-4802-b06c-b7139eb4af45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.57.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c9:d3:13:f5:70:cc:fe:41:55:bb:68:86:4b:44:f5:9a:d2:1d:
         be:8e:fc:43:ee:51:f9:3e:64:c6:c1:8f:8b:56:b8:67:1d:1e:
         cc:92:24:43:20:fb:bf:5b:72:dc:30:ae:51:3f:60:e9:c3:a0:
         58:fc:56:e3:fb:19:75:90:ef:e6:11:50:d2:57:5b:7f:fe:3a:
         1d:38:14:da:75:2f:f0:0f:a7:2a:47:48:ad:1d:2d:53:34:62:
         ac:3c:b3:4d:1f:0d:c5:a8:a1:e9:4f:c6:a8:60:6c:6e:f6:c7:
         13:1f:0b:cc:c5:ae:3e:f7:35:a8:71:4c:69:14:46:19:a2:57:
         49:28:56:54:a1:70:9e:63:36:06:53:fa:4f:91:e0:e1:07:91:
         3b:13:bb:83:46:b7:a6:84:70:85:db:da:0f:0a:a4:8a:0c:98:
         32:91:71:5c:8b:8f:b4:e6:2a:e8:4f:bd:b1:0f:85:3c:5d:01:
         b6:f3:5a:25:a6:64:6d:e2:a0:fa:03:e3:04:2e:17:a9:09:bc:
         60:46:30:fe:46:27:11:8b:40:a8:de:58:95:d3:8a:50:a9:8d:
         a6:80:fb:4b:c7:1c:db:a7:db:f3:8c:fd:33:95:a1:33:df:56:
         dc:13:da:cb:f5:df:ab:33:ce:90:d7:c3:5d:fe:4b:bd:98:c0:
         54:53:dd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:16:47 2025 by rpki-client