This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeffd414-e038-4f94-8262-5f843fa8634d.roa
File:                     aeffd414-e038-4f94-8262-5f843fa8634d.roa (raw, json)
Hash identifier:          X7As4XhArXuuRF5eZr5Zq14PF1ad3QTNm42o6DVPB3U=
Subject key identifier:   BF:40:D6:C7:1F:7E:D8:3B:DE:74:99:95:5B:11:23:0F:8F:9F:A5:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       266CB95AA9F3F8F68E7D8334E021F2456069DBEC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeffd414-e038-4f94-8262-5f843fa8634d.roa
Signing time:             Sun 07 Dec 2025 01:31:02 +0000
ROA not before:           Sun 07 Dec 2025 01:31:02 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        23.20.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6c:b9:5a:a9:f3:f8:f6:8e:7d:83:34:e0:21:f2:45:60:69:db:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:31:02 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=7e4cc322d11ae84265526d5a5eeaa9fb85adfad3663be952f3827f0418dd51d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:53:85:8e:a9:f2:5c:e3:09:40:88:11:65:
                    fc:ef:2f:ae:4f:91:66:29:e1:97:89:0d:6d:fd:a1:
                    71:b3:c4:3e:a5:22:ff:b4:a8:f7:f3:ef:4b:f2:9d:
                    97:f9:0a:b4:d6:23:f2:27:02:9c:36:3d:34:81:ab:
                    53:e3:ec:e5:dd:1b:ed:f7:af:14:82:85:de:3e:ee:
                    19:17:11:c3:0d:87:17:68:db:7a:37:8d:b7:68:5e:
                    42:29:ba:f8:c7:61:1a:cd:c7:69:30:e5:24:3a:ce:
                    07:bf:69:ab:d4:c8:68:97:f3:68:41:fc:88:7c:65:
                    34:1e:8c:ab:3a:4f:36:4e:b6:0c:4b:fb:fd:81:f7:
                    70:63:87:a2:0f:5f:bb:7f:4e:2a:0e:89:ec:13:9f:
                    29:a3:5f:fe:22:0e:fd:b8:da:5a:a9:c4:c1:e5:1b:
                    61:3e:4b:14:d4:c0:8b:ae:da:82:cf:df:b7:39:b6:
                    a2:14:1f:12:c7:46:df:f3:f3:3c:02:5f:a5:59:0e:
                    1e:cb:fe:9b:74:6d:b4:fd:3e:b3:95:76:d3:6d:1d:
                    b3:f9:57:d8:7b:d1:bf:4e:9e:0c:df:df:1c:90:d7:
                    17:6a:56:a4:82:ec:65:c0:54:82:e1:db:6e:cf:7b:
                    22:b1:a3:5e:1b:a2:5b:ad:6b:f7:5f:6a:6c:5d:93:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:40:D6:C7:1F:7E:D8:3B:DE:74:99:95:5B:11:23:0F:8F:9F:A5:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeffd414-e038-4f94-8262-5f843fa8634d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.20.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         7b:39:08:0e:24:ef:dd:7f:5a:67:fe:82:11:21:3e:2c:f2:bc:
         a0:ad:42:56:58:8b:05:c7:48:b0:de:e3:c0:03:83:ab:36:b4:
         a6:b7:4d:75:45:f4:3d:94:0b:75:3f:7e:b5:75:88:bf:1e:58:
         a4:d9:ed:32:4f:ee:8f:cc:59:d4:40:13:34:35:56:7b:bc:70:
         61:65:b5:7a:4a:2d:79:6b:00:c3:a2:d6:e1:d3:ad:10:23:cb:
         aa:a2:e0:9e:81:8d:dd:62:25:fc:a5:87:cd:f0:a1:16:7e:6e:
         d3:cb:86:65:75:93:f3:a8:f2:f7:cb:ca:cd:ca:c6:02:da:83:
         20:37:f7:64:25:cf:f8:69:b7:3c:3c:55:7b:e3:e2:9d:e1:95:
         bf:91:19:97:db:77:95:36:26:63:fc:ec:13:3c:25:1c:05:02:
         c9:59:1e:78:7e:37:9e:41:8c:b3:65:f9:e6:41:47:06:98:04:
         e0:74:28:01:70:a8:98:1f:59:75:37:81:80:fd:bf:de:f8:51:
         27:3e:9e:d2:32:d9:8b:6b:1a:e0:ad:24:ad:85:11:9d:c8:30:
         3f:43:03:7a:35:f8:21:34:90:db:f5:e7:c6:18:cf:84:2e:42:
         09:68:e6:32:88:c7:59:e3:92:22:93:99:55:17:de:6f:77:f1:
         91:07:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:43:25 2025 by rpki-client