This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab208a5-141a-4207-a424-ef8f78b7dc77.roa
File:                     7ab208a5-141a-4207-a424-ef8f78b7dc77.roa (raw, json)
Hash identifier:          XtXwatxtNkn5tCbj51FQo/5BJ1FXamrWi5XzTXVSo5E=
Subject key identifier:   E5:CF:A5:FC:65:6A:76:6D:75:10:F4:FB:18:CD:EC:D7:35:F1:1D:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A5BB0AC1A87B99582FC97F9C89EEF13CFF5F21F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab208a5-141a-4207-a424-ef8f78b7dc77.roa
Signing time:             Wed 10 Dec 2025 00:31:20 +0000
ROA not before:           Wed 10 Dec 2025 00:31:20 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        136.18.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5b:b0:ac:1a:87:b9:95:82:fc:97:f9:c8:9e:ef:13:cf:f5:f2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:31:20 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=c3286499b03ddbb49d696cac1c90199b6bacadeac700401cfe9682e501a329fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:75:ce:16:55:32:06:7f:5f:ff:b4:12:26:df:
                    41:5d:53:10:f5:cc:12:a5:2a:11:3f:61:63:52:b8:
                    b6:88:0e:fb:7b:9a:96:4a:7f:b8:69:92:81:b1:77:
                    d5:6f:9f:c4:f6:e6:eb:03:f5:72:01:4b:d6:4c:6c:
                    12:97:19:43:12:6d:e4:0e:8c:ca:39:c7:45:e9:bf:
                    89:91:29:de:a9:9b:93:b4:99:61:42:49:bd:c9:40:
                    bc:77:49:f4:db:3c:2d:34:55:fc:d3:80:01:8d:fa:
                    40:25:51:4d:3b:88:13:92:af:54:69:13:72:be:58:
                    6e:c8:e0:cc:a8:eb:95:03:44:d6:d9:34:5c:59:6b:
                    9a:3b:db:07:4a:e3:17:81:5a:07:9f:c8:d2:f5:db:
                    09:ef:51:6e:dd:c1:35:3a:01:ee:27:0e:e5:c0:71:
                    29:2a:99:b1:65:d7:d4:54:ae:7e:5d:0b:e6:d4:2b:
                    5a:60:8e:c0:9f:b5:0f:66:90:89:79:38:08:fd:ac:
                    be:53:c8:2b:6b:70:cd:03:b4:b4:f8:5f:57:30:95:
                    be:51:b9:94:f6:4d:f1:a8:56:7e:a9:70:1c:8c:2c:
                    a1:55:e8:79:3d:b3:0d:c3:51:04:4b:26:9a:9e:60:
                    00:84:17:42:2b:45:c0:0e:8d:d3:aa:f4:27:82:9b:
                    96:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:A5:FC:65:6A:76:6D:75:10:F4:FB:18:CD:EC:D7:35:F1:1D:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab208a5-141a-4207-a424-ef8f78b7dc77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:a2:35:fa:4a:f3:28:a3:df:45:de:a1:75:b8:58:6c:99:
         d4:5f:3e:48:03:41:9d:7a:0d:fa:ba:99:90:b3:e1:87:b4:b0:
         b6:8d:c7:74:77:27:3b:db:9b:95:5e:f4:35:b0:40:1d:a5:43:
         d2:dc:0d:a3:7d:27:a6:21:c5:a7:3c:04:3d:b0:5f:3a:5f:df:
         2b:16:86:6a:88:d0:23:f1:e3:68:03:f1:03:01:dd:a0:f6:7c:
         d9:61:be:ee:7d:df:38:69:31:69:fc:7b:14:5b:6e:ec:af:a0:
         de:01:ae:c1:a6:a7:d2:74:32:84:9a:cc:8b:c9:ce:dd:f3:23:
         24:c1:eb:e0:7e:c1:1e:32:11:74:ed:ef:98:5e:e8:5e:e2:61:
         aa:95:2e:03:00:2a:d8:f3:b6:9a:f0:8f:78:cf:b1:2c:75:c6:
         40:05:1d:69:55:81:32:71:73:56:f1:7e:22:01:11:7d:31:ef:
         fd:f9:ff:ec:39:cf:35:61:75:23:5b:53:e1:51:b3:f7:0d:62:
         cf:c5:85:5b:0d:95:a6:82:13:cf:ec:63:1b:cd:b9:1d:c6:18:
         8c:22:3b:2f:9a:68:55:4a:d0:05:d3:ec:d7:0b:93:d4:0f:31:
         57:e5:d9:d5:89:56:44:70:b0:a9:24:7e:44:d4:8b:23:7f:9d:
         99:13:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:17:30 2025 by rpki-client