This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f0bc47b-12d7-4615-81db-4751f9b68409.roa
File:                     6f0bc47b-12d7-4615-81db-4751f9b68409.roa (raw, json)
Hash identifier:          hSorCqemrCk2ViUIGN5U4nty8/lyX020jsVSExKSy0Q=
Subject key identifier:   3D:EE:1D:12:1D:45:93:0B:71:99:0A:81:D5:E4:28:5B:AC:A3:8B:21
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50828EA3E9E7DAB308102B50461DE6EB23D7460C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f0bc47b-12d7-4615-81db-4751f9b68409.roa
Signing time:             Mon 08 Dec 2025 00:10:40 +0000
ROA not before:           Mon 08 Dec 2025 00:10:40 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:82:8e:a3:e9:e7:da:b3:08:10:2b:50:46:1d:e6:eb:23:d7:46:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:10:40 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=3b78e76c3faaa858465244a92f96f39f2a7397acc5dc235ee4dc5b6c71c7b1aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:27:39:68:ff:6e:9b:eb:e4:95:74:d8:94:
                    49:a1:ea:16:0f:79:ff:91:40:64:55:ab:08:89:0c:
                    19:59:1a:7d:2c:27:81:45:58:6f:47:b2:7a:79:03:
                    63:11:d9:49:0e:01:3b:7a:8f:2a:46:86:18:51:64:
                    cb:fb:39:00:a5:ee:03:86:de:5d:63:ed:29:e4:98:
                    c5:09:b6:54:2f:2b:7e:59:fd:79:f3:65:65:3e:25:
                    bf:d8:f7:2d:fb:e3:19:20:18:7a:c6:99:ec:b6:0b:
                    61:54:26:20:ff:89:4b:42:6f:e3:1c:d5:ba:0a:3e:
                    89:59:74:8e:30:fc:e2:bb:2b:e3:d1:3b:a1:fe:21:
                    26:67:5e:8e:57:03:5b:ee:32:93:a9:c6:ef:f8:c4:
                    a9:b5:28:52:a9:da:46:49:5b:a8:9c:df:fe:d4:e6:
                    f1:7b:1e:6b:3f:a8:c0:43:87:2e:8b:7f:ad:8e:a3:
                    58:ea:42:d6:74:fb:69:90:69:ca:1a:1f:82:a3:cb:
                    0c:0e:cf:07:b3:d9:e4:f0:f9:86:e1:d8:f7:7a:93:
                    d3:9e:08:97:bb:69:d1:43:80:04:31:0b:b5:af:a1:
                    c6:f3:52:42:88:ea:cd:39:3f:66:2e:b7:4d:a8:38:
                    61:ac:77:25:6c:fc:bc:d8:48:1f:99:c7:83:c5:d5:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EE:1D:12:1D:45:93:0B:71:99:0A:81:D5:E4:28:5B:AC:A3:8B:21
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f0bc47b-12d7-4615-81db-4751f9b68409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:41:1f:e5:a4:9e:25:5b:d4:40:6c:31:63:2c:2f:bc:54:9e:
         9b:42:41:99:d2:f6:e5:a2:52:db:3a:36:b9:09:aa:fd:f7:4a:
         16:14:ed:39:3a:33:c7:ff:92:4d:89:b4:92:5d:34:f5:39:76:
         ed:ab:6e:52:49:46:c1:e8:78:5a:41:7f:77:36:af:b2:45:30:
         ab:f2:bd:2a:57:cf:d0:dc:dd:ca:29:44:65:b9:ff:6f:4e:98:
         74:78:7f:5b:ab:3b:1b:94:e9:48:d6:11:f2:c7:6d:9b:a7:e8:
         7a:40:a4:fc:39:c2:92:4f:bb:22:6f:59:73:ad:29:ab:9d:df:
         81:07:7b:a9:75:71:83:79:f6:36:a0:65:55:f1:b5:a3:42:b7:
         cd:4a:65:00:2b:16:f8:07:d3:90:4a:c8:d8:6c:44:89:4e:14:
         e9:14:f0:cb:58:b2:c3:5d:e6:42:61:4b:7f:89:7e:f9:b7:b8:
         53:0d:03:f5:22:32:58:1e:56:de:c9:e1:fb:f0:1a:49:6d:16:
         84:67:b5:30:4d:86:14:2d:1c:3c:65:f7:2f:dc:8e:a5:d5:da:
         ba:4f:dc:73:78:d3:32:0e:89:de:74:90:cc:bf:dc:dc:e9:9f:
         63:c3:5b:18:35:6c:6a:e3:19:5c:9d:07:3d:1f:29:a7:47:f5:
         ab:f2:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:40:17 2025 by rpki-client