This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c031f9-6d40-4ba7-bd96-b1eb485d6adb.roa
File:                     a4c031f9-6d40-4ba7-bd96-b1eb485d6adb.roa (raw, json)
Hash identifier:          e9MkIiLfwGnMlRFMZSGUe1OPE86JHh3cAAjZtiz8N2M=
Subject key identifier:   6F:46:2D:A2:4E:85:A8:58:70:AA:F4:96:B0:60:D9:C3:E3:B1:08:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CBE4B3F119082D4CE16143305D2E603CDBC849D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c031f9-6d40-4ba7-bd96-b1eb485d6adb.roa
Signing time:             Wed 10 Dec 2025 00:30:18 +0000
ROA not before:           Wed 10 Dec 2025 00:30:18 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.43.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:be:4b:3f:11:90:82:d4:ce:16:14:33:05:d2:e6:03:cd:bc:84:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:30:18 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=9420b9d9a4e4c2d76c4ca188694ec1b5db63fecc21fc05c2fdd2f536a964844f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d3:6b:23:f8:56:36:98:63:d2:ca:28:40:48:
                    ed:0f:39:59:e3:bf:40:69:99:ac:85:11:fb:2c:9b:
                    e3:53:f5:e0:68:02:1b:71:59:62:57:8b:9a:2d:d7:
                    8f:ff:ba:0d:4f:51:bf:07:a2:20:f9:66:1b:e7:35:
                    4e:19:7c:f2:55:17:b2:80:78:74:9d:b9:a7:1e:cb:
                    09:08:5a:28:ad:55:ab:7b:1d:20:f6:53:7e:e8:4c:
                    b9:38:99:7b:9c:4e:e2:15:91:b7:90:51:d2:f3:07:
                    15:8f:b3:48:95:38:38:bd:6f:88:92:52:e5:e1:0a:
                    b4:3d:cb:71:a9:1d:61:66:7f:69:3e:cc:7f:dd:9a:
                    e7:a1:e6:15:52:60:82:fc:0c:8b:fa:6a:d4:bc:35:
                    13:fd:24:ad:70:5a:aa:33:1a:fd:64:54:c2:6a:3b:
                    ab:63:c3:00:2b:64:d1:78:35:e7:91:f9:a6:ac:4b:
                    37:9d:7d:df:d0:9f:9e:27:49:5b:e3:da:89:6e:41:
                    5f:6a:b8:76:77:b2:cb:af:63:28:43:00:ab:aa:e7:
                    62:99:37:4b:73:3f:07:3f:77:f9:eb:17:1d:95:1c:
                    d6:bf:66:c6:02:6b:9d:65:6c:6f:4e:4d:0d:77:a9:
                    39:5c:ed:d1:3f:f2:89:c8:a8:61:c6:af:94:ce:c8:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:46:2D:A2:4E:85:A8:58:70:AA:F4:96:B0:60:D9:C3:E3:B1:08:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c031f9-6d40-4ba7-bd96-b1eb485d6adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:65:24:31:1b:1b:ff:8a:90:79:00:1a:58:9b:1f:09:ce:ff:
         f9:c8:86:56:f1:8d:ef:96:81:ee:85:3f:db:08:29:13:fc:d5:
         7b:d6:b7:68:ff:11:87:71:a3:33:55:8f:71:71:90:4e:2e:c1:
         76:ae:b8:59:a0:78:74:61:75:2b:eb:6e:40:c4:a5:00:49:97:
         93:f2:05:d5:eb:5a:3f:cf:97:ba:e8:04:59:6d:fe:7e:b3:e9:
         7e:68:7f:32:01:a5:84:64:22:5f:1e:2e:dc:23:7b:ab:e9:81:
         80:49:5f:5d:39:38:ef:50:28:7d:58:f2:6d:02:f5:11:64:59:
         95:1f:4b:cc:1e:0e:95:ba:0e:5f:95:84:c2:90:8b:8d:71:11:
         70:f9:48:5e:5e:c6:f3:2b:67:c8:86:90:8a:a0:39:19:86:89:
         50:32:f1:6d:fe:29:ac:64:79:5d:c0:a0:3f:00:0a:93:59:bc:
         90:53:c9:be:b9:54:02:15:0b:64:0f:3e:e5:9c:19:7d:90:cb:
         72:9b:c9:b4:5e:ac:08:6b:03:4c:d7:f1:53:3a:ac:ee:7d:da:
         77:fb:9e:2f:d9:33:2e:8f:04:40:ee:5f:89:2f:0f:d5:11:e0:
         bd:21:58:e7:67:af:96:58:79:69:96:58:18:8c:90:74:70:ee:
         9b:57:dd:da
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHL5LPxGQgtTOFhQzBdLmA828hJ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAzMDE4WhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDIwYjlkOWE0ZTRjMmQ3NmM0Y2ExODg2OTRlYzFiNWRi
NjNmZWNjMjFmYzA1YzJmZGQyZjUzNmE5NjQ4NDRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCO02sj+FY2mGPSyihASO0POVnjv0BpmayFEfssm+NT9eBo
AhtxWWJXi5ot14//ug1PUb8HoiD5ZhvnNU4ZfPJVF7KAeHSduaceywkIWiitVat7
HSD2U37oTLk4mXucTuIVkbeQUdLzBxWPs0iVODi9b4iSUuXhCrQ9y3GpHWFmf2k+
zH/dmueh5hVSYIL8DIv6atS8NRP9JK1wWqozGv1kVMJqO6tjwwArZNF4NeeR+aas
Szedfd/Qn54nSVvj2oluQV9quHZ3ssuvYyhDAKuq52KZN0tzPwc/d/nrFx2VHNa/
ZsYCa51lbG9OTQ13qTlc7dE/8onIqGHGr5TOyM3vAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUb0Ytok6FqFhwqvSWsGDZw+OxCBYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E0YzAzMWY5LTZkNDAtNGJhNy1iZDk2LWIxZWI0ODVkNmFkYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAjKzANBgkqhkiG9w0BAQsFAAOCAQEAvmUkMRsb/4qQeQAaWJsfCc7/+ciG
VvGN75aB7oU/2wgpE/zVe9a3aP8Rh3GjM1WPcXGQTi7Bdq64WaB4dGF1K+tuQMSl
AEmXk/IF1etaP8+XuugEWW3+frPpfmh/MgGlhGQiXx4u3CN7q+mBgElfXTk471Ao
fVjybQL1EWRZlR9LzB4OlboOX5WEwpCLjXERcPlIXl7G8ytnyIaQiqA5GYaJUDLx
bf4prGR5XcCgPwAKk1m8kFPJvrlUAhULZA8+5ZwZfZDLcpvJtF6sCGsDTNfxUzqs
7n3ad/ueL9kzLo8EQO5fiS8P1RHgvSFY52evllh5aZZYGIyQdHDum1fd2g==
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:55:40 2025 by rpki-client