This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f26251c-d2e5-4db4-a254-a9e1f2b9180b.roa
File:                     8f26251c-d2e5-4db4-a254-a9e1f2b9180b.roa (raw, json)
Hash identifier:          uhKEHkIcN8J+EZ/VCVTz+Wed2e7ybIvvgeLQWgAJjBk=
Subject key identifier:   9F:DA:A5:EB:F7:F5:88:CA:89:6E:BB:10:6C:36:39:A1:D7:9E:CC:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46B065116C8B2F7EEF8E686EA6E297EB4EA280BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f26251c-d2e5-4db4-a254-a9e1f2b9180b.roa
Signing time:             Mon 08 Dec 2025 00:10:05 +0000
ROA not before:           Mon 08 Dec 2025 00:10:05 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.135.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b0:65:11:6c:8b:2f:7e:ef:8e:68:6e:a6:e2:97:eb:4e:a2:80:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:10:05 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=522689d1972c8c79b8cd181ca684f9312a419ac8c9f4304b22206ca9371d9541, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:0c:08:31:aa:e8:39:b0:89:c0:a1:e0:9a:
                    a9:4e:71:c8:a7:3c:7d:a4:4b:8b:a6:f4:ab:37:15:
                    b7:47:f5:0f:dc:86:ad:18:6b:45:5c:09:78:ba:68:
                    a4:fa:46:8c:38:af:2b:f1:56:a3:da:52:47:ab:86:
                    4f:50:e6:7b:8c:b8:d0:40:b9:9b:04:75:8b:32:12:
                    c0:fd:d9:f9:d4:1d:91:62:bf:6b:9b:1e:f0:e1:f6:
                    a1:9b:20:70:b7:e7:87:e8:21:38:e5:64:54:5e:01:
                    69:04:76:a7:69:e5:c7:40:d9:a6:c9:67:c6:c9:f4:
                    c9:fb:d0:19:97:25:06:90:45:d8:bd:ac:1c:f8:1f:
                    00:db:0c:cf:68:8d:1f:43:3a:44:00:04:f8:b3:c5:
                    2c:b7:1f:21:84:3e:5b:e5:c0:26:2c:3c:f9:6c:2d:
                    c4:17:af:c6:17:6f:1e:f3:e1:10:26:69:19:97:e0:
                    9b:93:6f:b7:e2:fb:5e:00:ed:54:88:4c:5a:ba:c9:
                    8a:57:e1:30:90:c6:e5:27:0a:e8:e0:a8:85:e7:df:
                    12:ff:c5:23:87:ff:9d:88:e4:5b:26:d7:94:98:b6:
                    cd:d7:a4:08:86:fe:eb:c6:44:77:de:d9:af:8d:b5:
                    38:d0:8b:b9:8b:f7:76:dd:c6:df:ce:5b:2c:11:e8:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DA:A5:EB:F7:F5:88:CA:89:6E:BB:10:6C:36:39:A1:D7:9E:CC:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f26251c-d2e5-4db4-a254-a9e1f2b9180b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.135.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c3:18:0f:05:ab:a3:ca:a5:6e:a6:4c:ea:a9:21:9a:92:10:62:
         26:6e:67:f2:5e:93:ec:aa:04:6b:e5:4f:fa:5e:01:2c:94:87:
         29:7f:3e:82:b6:7c:22:50:05:5f:9e:b7:c0:43:a4:24:4c:77:
         d5:f5:29:5b:29:59:ed:4d:d7:a0:5d:ae:0e:19:74:3f:02:7e:
         55:ff:3e:8a:7e:7a:24:d4:fd:5d:70:84:05:f0:2e:a9:ec:32:
         86:bc:ab:53:63:96:88:4d:ba:4a:0e:51:67:b0:c5:bc:17:26:
         91:24:07:dd:92:ab:16:bc:dc:5c:31:33:d3:51:2c:2f:ee:c6:
         20:82:e1:45:5b:2e:dc:1d:c1:5c:00:a9:fa:53:82:45:a6:95:
         dc:80:c7:80:a2:95:79:2f:4e:79:ed:54:07:14:53:56:fb:65:
         bb:22:d3:3d:80:9b:f3:ed:46:68:ec:c5:87:40:2b:2b:23:5b:
         6e:d9:b4:f4:b4:7f:2b:31:ac:8e:7f:7c:1c:5f:57:1e:fe:e2:
         dd:8d:2d:be:61:e8:b6:98:91:46:cd:ac:b6:15:d3:17:48:f0:
         05:1d:e3:67:18:5d:85:5b:1b:7d:e6:b9:6f:be:0f:9e:d3:c9:
         83:18:45:a8:42:ac:ef:7e:93:ba:c2:6b:5f:ad:9b:f1:79:18:
         3e:7c:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:20:37 2025 by rpki-client