This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50f68e79-dceb-4d6c-b0b9-8f4eb96b81db.roa
File:                     50f68e79-dceb-4d6c-b0b9-8f4eb96b81db.roa (raw, json)
Hash identifier:          L7JCo96lICQRnijt+F7cIgzATwavummOpYTS7bptAnE=
Subject key identifier:   16:DB:66:EB:A7:FD:C3:37:77:40:5B:0D:15:3A:F0:52:87:26:74:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D874A14B12A9A5729F614ED214C6CF9DA0E25E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50f68e79-dceb-4d6c-b0b9-8f4eb96b81db.roa
Signing time:             Sun 07 Dec 2025 00:10:54 +0000
ROA not before:           Sun 07 Dec 2025 00:10:54 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.47.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:87:4a:14:b1:2a:9a:57:29:f6:14:ed:21:4c:6c:f9:da:0e:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:10:54 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=6a71eb9ca573271d1d75fb2eb57071de41857c7723d05a5b7762ecfb38d00645, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8e:08:67:55:51:47:3e:23:70:70:16:0b:63:
                    5d:f6:b7:01:88:2a:1c:4f:c2:23:6d:1d:4d:35:0d:
                    40:8d:3f:93:71:d0:48:6e:bf:c5:6f:46:de:82:84:
                    4d:c3:e8:8d:4c:c1:a4:35:84:fe:2d:49:85:6c:ae:
                    e9:65:99:05:88:e7:ec:cb:7c:24:87:da:b0:75:92:
                    44:05:7a:71:22:5d:f0:c8:ca:13:0c:82:9e:65:10:
                    24:e9:24:94:9b:69:c0:2b:3e:7c:56:08:bc:49:a0:
                    e8:b2:fb:1a:77:8d:c0:eb:2d:88:d1:c0:f4:47:ca:
                    33:69:65:6e:c8:ec:f5:02:48:18:fe:8f:fa:cd:b2:
                    88:5f:3c:ae:2d:d6:e8:08:16:04:33:03:72:0f:99:
                    29:98:b9:18:35:6a:7e:44:4b:85:be:9b:29:22:1d:
                    89:cc:73:b3:4a:a4:8c:5e:d8:1b:9e:91:e7:29:f0:
                    98:55:ed:24:77:ca:b3:8d:5a:19:84:f6:6b:f5:8c:
                    1a:de:bc:d6:31:eb:35:82:e9:df:14:6e:1a:c6:92:
                    1c:5a:1d:74:71:19:93:28:c1:0a:34:42:a9:63:06:
                    23:2b:eb:3b:aa:a3:da:ea:97:4d:a1:2d:34:92:9c:
                    02:07:fd:ca:e2:9f:a8:bb:e4:6d:68:8e:07:e3:98:
                    43:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DB:66:EB:A7:FD:C3:37:77:40:5B:0D:15:3A:F0:52:87:26:74:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50f68e79-dceb-4d6c-b0b9-8f4eb96b81db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:f4:85:80:b5:77:8a:58:5d:0d:6b:a2:a5:d8:5a:2c:54:
         97:f7:3d:45:c1:08:31:08:ef:05:c0:87:90:e2:76:08:e7:3d:
         98:29:f1:e1:e2:5a:3a:20:29:5f:b9:30:bd:31:15:9c:42:48:
         95:eb:c1:a0:e4:60:1b:9f:ed:4e:6a:8d:38:89:01:9e:9b:1a:
         98:2e:9a:cb:25:89:a9:49:83:33:fe:82:e3:20:07:1b:a8:12:
         c7:3b:af:66:83:be:33:d3:90:c0:8c:9a:92:5c:da:08:9d:16:
         a1:77:76:5a:00:96:67:46:d9:21:da:e8:34:88:8e:dc:cf:de:
         96:68:06:fe:e6:70:f5:1c:7e:c2:16:43:95:25:7b:93:1b:b7:
         be:9d:35:6a:66:b3:37:d9:ac:cc:22:ff:00:6b:50:53:a2:e2:
         6a:b9:de:36:ac:e6:44:9a:4f:1d:c0:d0:1b:9a:e2:d1:1a:02:
         6e:61:ed:e7:14:a6:6e:9e:03:c1:af:31:2a:f1:10:9d:e9:52:
         1b:a0:35:04:da:f5:60:be:32:7e:0b:56:44:82:fd:66:3d:0e:
         5a:d5:c5:6d:6d:8b:e9:67:59:04:a8:2d:21:ae:14:a1:88:6b:
         f7:0e:a5:05:bd:fd:b9:46:ff:f6:0b:50:03:55:5c:81:9b:ea:
         6a:a9:3e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:26:40 2025 by rpki-client