This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa
File:                     591acf32-d365-4f92-a730-b14202d5b086.roa (raw, json)
Hash identifier:          Lmwjm1Xclrsj+FA6+8eMmludN63ZsvyYZd7OnvYvkqQ=
Subject key identifier:   84:4E:15:26:1E:A9:C4:55:2E:C8:06:A9:77:89:BE:B4:F3:73:34:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38B8B27A5D9A0D43017EE621ECFAEC2D15ADBA95
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa
Signing time:             Wed 10 Dec 2025 00:20:38 +0000
ROA not before:           Wed 10 Dec 2025 00:20:38 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        129.224.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b8:b2:7a:5d:9a:0d:43:01:7e:e6:21:ec:fa:ec:2d:15:ad:ba:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:20:38 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=af44ca79aacda02c48dc91ee55395218d8467a9ab73ae1f6e49d4ffa1b316c9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:f0:40:83:a2:48:6a:2f:03:95:b0:0a:99:
                    f8:7e:0b:c0:d9:d8:16:26:85:9d:59:0b:61:b0:45:
                    a8:24:61:34:89:f8:6e:22:b2:51:43:68:6d:38:76:
                    6b:1d:e6:b3:e0:5b:e9:03:7b:fa:13:95:1e:d5:c4:
                    38:19:11:8d:7d:3f:ea:ef:1e:0a:0b:ad:e9:8b:81:
                    3d:8d:cb:47:bb:ae:bb:87:b8:88:32:ae:89:9b:ce:
                    07:3d:cd:ba:ff:f6:ac:84:de:7b:18:cc:87:02:d1:
                    25:eb:2b:a1:99:65:4a:25:d9:3d:17:04:3a:96:f8:
                    f7:3c:f4:de:c2:73:a4:f0:8d:2f:c3:09:5d:33:0e:
                    54:7c:37:7a:7f:6b:3f:d5:12:5d:d8:52:b2:37:2a:
                    61:83:20:2c:50:27:56:59:b0:53:b6:23:03:7c:a2:
                    9e:2b:88:8a:1f:7c:cd:7b:8d:37:fa:dc:fa:44:98:
                    bc:69:75:60:8e:94:55:a9:8b:61:e0:72:d6:6e:b4:
                    71:a0:82:1f:03:b9:78:f9:a4:57:cc:c6:d4:3f:41:
                    6a:09:74:79:71:f2:4b:8b:97:d2:20:0c:42:be:dd:
                    e9:db:e2:79:fb:67:ab:cf:ef:1d:87:04:81:66:c2:
                    b8:d4:ad:1e:3e:cf:a0:5a:cd:4c:9a:dd:43:f6:4d:
                    bc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:15:26:1E:A9:C4:55:2E:C8:06:A9:77:89:BE:B4:F3:73:34:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.224.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c1:0b:f0:4c:6a:c6:e6:66:99:3d:35:d6:dd:ab:c0:ea:cc:50:
         4b:92:af:eb:00:0e:12:e2:12:f1:c5:38:f9:78:a3:5b:73:87:
         63:ca:55:24:15:be:12:9b:f1:ea:0d:32:b7:09:06:c4:36:f2:
         c6:f1:b2:f7:9c:47:7e:92:1a:df:eb:07:c3:01:fb:a8:2b:d0:
         1c:4e:66:4a:48:29:ad:a8:b2:8c:70:a1:d9:1a:38:4f:96:52:
         ca:c5:5e:3b:e9:a4:4a:ae:d1:85:4a:14:80:76:15:30:c5:8b:
         8b:f6:82:5f:ce:d4:7a:48:8d:89:0d:bf:45:fa:54:15:bc:0c:
         ad:48:0d:e1:b4:fb:47:6d:7d:ff:dc:43:47:fd:67:18:5e:87:
         c4:3c:02:c6:15:cb:b4:01:0e:36:d5:e4:c0:ca:ad:41:ba:5f:
         5b:6e:6f:62:63:fe:5d:a4:5c:f2:2b:69:1d:11:0b:41:d4:f4:
         6c:11:cf:b2:68:2a:5a:1c:54:ad:72:93:38:99:58:bd:40:03:
         51:0e:79:12:bf:7f:ac:f1:0a:39:83:e9:83:79:5e:69:c0:09:
         d7:28:88:5e:f2:24:98:93:f0:84:66:fd:a8:f7:9e:d5:74:7e:
         a1:4f:3b:aa:9f:6e:30:e5:cf:53:19:01:4f:d4:51:42:54:3d:
         d0:ee:5c:f2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOLiyel2aDUMBfuYh7PrsLRWtupUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAyMDM4WhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZjQ0Y2E3OWFhY2RhMDJjNDhkYzkxZWU1NTM5NTIxOGQ4
NDY3YTlhYjczYWUxZjZlNDlkNGZmYTFiMzE2YzlkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5K/BAg6JIai8DlbAKmfh+C8DZ2BYmhZ1ZC2GwRagkYTSJ
+G4islFDaG04dmsd5rPgW+kDe/oTlR7VxDgZEY19P+rvHgoLremLgT2Ny0e7rruH
uIgyrombzgc9zbr/9qyE3nsYzIcC0SXrK6GZZUol2T0XBDqW+Pc89N7Cc6TwjS/D
CV0zDlR8N3p/az/VEl3YUrI3KmGDICxQJ1ZZsFO2IwN8op4riIoffM17jTf63PpE
mLxpdWCOlFWpi2HgctZutHGggh8DuXj5pFfMxtQ/QWoJdHlx8kuLl9IgDEK+3enb
4nn7Z6vP7x2HBIFmwrjUrR4+z6BazUya3UP2Tby5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhE4VJh6pxFUuyAapd4m+tPNzNAUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU5MWFjZjMyLWQzNjUtNGY5Mi1hNzMwLWIxNDIwMmQ1YjA4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAaB4IAwDQYJKoZIhvcNAQELBQADggEBAMEL8ExqxuZmmT011t2rwOrMUEuS
r+sADhLiEvHFOPl4o1tzh2PKVSQVvhKb8eoNMrcJBsQ28sbxsvecR36SGt/rB8MB
+6gr0BxOZkpIKa2osoxwodkaOE+WUsrFXjvppEqu0YVKFIB2FTDFi4v2gl/O1HpI
jYkNv0X6VBW8DK1IDeG0+0dtff/cQ0f9Zxheh8Q8AsYVy7QBDjbV5MDKrUG6X1tu
b2Jj/l2kXPIraR0RC0HU9GwRz7JoKlocVK1ykziZWL1AA1EOeRK/f6zxCjmD6YN5
XmnACdcoiF7yJJiT8IRm/aj3ntV0fqFPO6qfbjDlz1MZAU/UUUJUPdDuXPI=
-----END CERTIFICATE-----
Generated at Fri Dec 26 07:48:31 2025 by rpki-client