This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703459b2-ae55-466c-a7c4-c1fb57f7704e.roa
File:                     703459b2-ae55-466c-a7c4-c1fb57f7704e.roa (raw, json)
Hash identifier:          xv+yYKnIt9XxojvHw6Zuuzld0j0tR5KKdqLi3ur/buQ=
Subject key identifier:   1B:26:03:B4:F1:4A:7F:68:6E:AA:02:1C:A2:BD:23:62:22:B7:13:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53C47AAC7CA072CFB07204996A74E441D3E22C25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703459b2-ae55-466c-a7c4-c1fb57f7704e.roa
Signing time:             Mon 08 Dec 2025 00:30:14 +0000
ROA not before:           Mon 08 Dec 2025 00:30:14 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.161.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c4:7a:ac:7c:a0:72:cf:b0:72:04:99:6a:74:e4:41:d3:e2:2c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:30:14 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=c7b1345b1730ac1f60a0bd328e22bb99eab8591db27e4cafe7e4a306bf8e8a9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:76:a3:05:07:68:ad:57:b8:c8:ec:17:e8:
                    cd:2a:15:8c:99:ad:9f:69:28:be:0f:57:b4:7d:b8:
                    04:0d:37:94:ce:b8:2d:ed:6c:ac:60:88:99:27:19:
                    64:b1:17:62:b9:e9:de:c7:43:d6:5f:2f:09:f6:c0:
                    8f:2d:49:90:43:05:34:4a:86:b7:ed:33:d3:47:8b:
                    41:32:8a:21:10:bd:94:36:58:f2:87:88:65:c8:68:
                    29:ba:a4:bc:b3:76:ad:e3:21:11:c0:58:9d:1d:f9:
                    b3:cb:05:be:0a:d6:4f:65:d4:74:07:e5:f0:53:90:
                    f9:df:24:83:d7:f0:45:7e:fb:ca:b8:5a:e7:2d:59:
                    89:23:63:c1:71:1f:8b:f1:40:ab:ef:56:c1:d7:26:
                    e1:f8:5e:45:17:f2:b4:29:8c:59:ad:9e:1b:23:19:
                    98:6f:32:bb:5a:dc:6e:21:1b:0f:f7:7b:95:29:ec:
                    ed:42:96:f7:87:31:1f:b3:25:c7:58:08:ad:1f:3b:
                    29:43:84:00:e8:72:3e:12:69:38:7a:c6:cd:e7:e1:
                    d7:a7:f0:de:3f:4e:00:11:2a:87:3d:d2:f3:df:97:
                    4b:8d:2a:6d:b5:e4:b6:72:35:57:03:56:ef:04:1b:
                    31:d7:80:6a:0a:3b:5a:c8:45:aa:9d:48:0a:6a:93:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:26:03:B4:F1:4A:7F:68:6E:AA:02:1C:A2:BD:23:62:22:B7:13:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703459b2-ae55-466c-a7c4-c1fb57f7704e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.161.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         58:f5:7a:67:17:29:34:3a:d0:46:bc:8c:e8:99:31:e2:cb:2e:
         a7:52:a5:ab:6e:1b:25:0b:b6:ea:9f:91:cf:62:82:df:82:f4:
         1a:15:aa:df:57:f4:31:b2:67:6a:ac:26:cf:fc:02:ae:99:67:
         bb:ff:51:c5:7f:db:c0:e1:f4:7f:1b:e6:02:b0:e2:35:91:37:
         4b:ae:af:8d:f1:86:f9:e7:26:18:cc:b7:21:d7:32:c5:95:32:
         96:ff:42:dc:99:17:31:db:75:54:4b:9e:16:88:b1:92:3b:13:
         e9:39:63:07:af:3f:ff:04:f4:68:a2:03:ce:ce:1e:d5:b2:e0:
         71:b5:38:c8:51:43:4a:d2:c9:0e:3d:af:81:db:56:aa:ea:c2:
         ba:16:16:6d:6b:c4:2f:1f:13:ec:c2:3c:87:30:be:1a:70:53:
         52:dd:39:a5:29:d3:74:69:8a:d7:0f:3d:42:e7:c7:d6:ba:7b:
         26:ff:22:d7:b5:fb:7b:83:16:4a:31:b9:52:9e:b7:1a:70:45:
         c1:4f:16:72:de:f6:17:89:a0:b1:bc:d2:f0:33:92:e1:9f:d0:
         09:5c:01:e3:e5:fc:db:e7:56:e5:0e:fe:4b:02:23:e5:71:f0:
         f4:03:ad:ac:97:f0:2b:9a:ce:12:11:fb:dc:52:29:25:1a:ee:
         cd:7d:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:42:58 2025 by rpki-client