This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9846244a-41d6-4a61-bc45-ec42cedff928.roa
File:                     9846244a-41d6-4a61-bc45-ec42cedff928.roa (raw, json)
Hash identifier:          Q/yFP9jkXwj0/WIZ1+No11mWKcvz3bhPg7OXrWBBDt4=
Subject key identifier:   2C:78:B0:7A:99:6E:D4:A4:A4:AA:39:F5:F8:E8:C0:66:B0:B0:17:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       033B07DAD2D010696CABAC0C68012A3A718DAF7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9846244a-41d6-4a61-bc45-ec42cedff928.roa
Signing time:             Sun 07 Dec 2025 00:41:10 +0000
ROA not before:           Sun 07 Dec 2025 00:41:10 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        40.208.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3b:07:da:d2:d0:10:69:6c:ab:ac:0c:68:01:2a:3a:71:8d:af:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:41:10 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=70af8797e2f1007fa242f6a62080f55d99532975450d49b9b88adbdeedf9cd87, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:e2:d8:0d:13:92:5d:85:78:1b:f8:34:32:
                    fc:cd:66:b9:50:3d:c1:68:62:bb:b4:f7:df:bc:ef:
                    8e:18:7c:50:be:d5:92:39:e0:6d:5f:36:37:04:ef:
                    d4:84:c9:e6:40:27:be:5f:89:27:93:b4:c8:4b:8e:
                    31:91:03:23:d6:2f:cd:6a:b4:ad:43:8f:9e:4b:df:
                    c4:4b:4b:54:70:c7:05:18:37:03:f4:8d:ad:39:1b:
                    bd:85:75:88:23:fe:ca:df:cd:6b:ca:8c:85:c8:53:
                    9e:0b:17:6c:b5:21:4d:c1:e7:54:25:b4:8c:e7:7b:
                    df:4f:48:3e:a0:0d:43:53:69:3b:e0:13:9b:ef:d8:
                    73:f1:8a:a1:cf:a7:cb:94:39:72:1f:30:a5:d8:8c:
                    96:83:ba:da:1b:4f:df:1b:87:04:7f:7b:ad:41:e2:
                    70:83:dc:b7:a2:69:f9:46:87:72:bb:8a:c8:e5:cc:
                    7d:77:38:3f:ae:6a:d6:ea:c3:5e:48:b5:ba:13:f8:
                    ad:59:95:5b:4a:db:99:2d:75:7e:d1:e4:2d:b4:cc:
                    27:c3:0d:da:87:30:1a:a3:75:00:6d:37:ca:e0:1a:
                    08:92:3c:b1:d1:76:da:45:8e:36:85:eb:12:e2:fa:
                    de:81:cf:01:11:61:91:0c:b2:e3:48:16:7b:9f:9f:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:78:B0:7A:99:6E:D4:A4:A4:AA:39:F5:F8:E8:C0:66:B0:B0:17:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9846244a-41d6-4a61-bc45-ec42cedff928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:38:44:79:4f:ac:fe:75:44:27:b6:0a:a5:2d:11:88:0a:
         ed:69:dc:cc:84:3b:21:50:73:a0:04:bb:66:74:1c:eb:d5:53:
         ee:ae:f4:8d:7d:27:81:bf:39:36:b4:90:34:91:55:70:20:0b:
         e3:8a:94:55:f1:a0:11:68:cf:39:6a:74:a1:8f:c1:04:44:93:
         d0:8f:4b:3a:f8:81:9e:f0:e5:33:18:fe:ff:52:91:68:74:4f:
         e8:1f:66:cc:e5:1c:69:75:98:2d:f7:2e:9e:05:77:5a:e4:9b:
         ee:91:d6:3e:d9:c1:6b:21:3d:b2:74:74:29:57:8f:ee:7a:71:
         3e:55:ec:2c:7f:36:cb:45:27:f3:ec:7e:93:1e:cb:36:f9:8d:
         8a:a1:c8:06:27:60:04:f9:ef:f2:6b:c2:34:66:1b:2f:c2:89:
         45:37:50:b7:62:4a:0c:6d:6a:69:00:11:9a:d1:65:03:e4:49:
         a3:1e:94:9b:4d:3f:c5:a9:55:ff:09:cf:09:9a:5e:3a:2c:63:
         55:dc:d7:07:5b:49:54:50:a9:50:23:a8:14:a7:b5:3a:51:a1:
         50:9e:f4:47:3f:9d:a2:8a:db:7c:7c:ae:0f:23:b5:5c:0d:42:
         de:57:78:d9:a9:11:90:b3:82:d9:17:53:64:f8:1b:9a:fe:54:
         ad:40:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:04:56 2025 by rpki-client