This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b459dde2-4ea8-4683-a8ce-4b2ae5cc7146.roa
File:                     b459dde2-4ea8-4683-a8ce-4b2ae5cc7146.roa (raw, json)
Hash identifier:          DD/uQTMufRdv8NmwroAXDWnZi90tueIl4MhsI3jL8Pc=
Subject key identifier:   85:8D:1C:49:3D:AA:A1:79:2F:54:99:B9:FD:9F:5C:DF:7E:08:81:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5FFC3E94340F34EF134EB7220019E6AD4E88E9D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b459dde2-4ea8-4683-a8ce-4b2ae5cc7146.roa
Signing time:             Sun 07 Dec 2025 01:50:57 +0000
ROA not before:           Sun 07 Dec 2025 01:50:57 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.39.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fc:3e:94:34:0f:34:ef:13:4e:b7:22:00:19:e6:ad:4e:88:e9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 01:50:57 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=2cec11bf6b3d6c91d136b28140b7ad0c8430a4887028194f3a45909dac570dbd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:d2:0f:ee:19:7d:80:4e:fa:95:6a:1b:de:
                    98:d8:59:b6:5a:db:a7:f8:43:dc:ed:e3:f8:71:15:
                    2a:b8:cc:83:24:e7:d1:91:c1:0a:b5:99:68:c8:06:
                    66:61:b6:09:6f:d6:2c:1f:0d:d1:4d:08:5d:a3:0c:
                    52:b2:c3:28:20:44:40:56:8a:e2:d5:92:af:25:bc:
                    e9:00:d1:85:44:d3:30:c5:26:ae:78:c4:f7:7b:d7:
                    b0:5e:8f:9e:1f:e8:e9:33:fb:05:86:56:e5:27:be:
                    e5:f6:0b:58:2d:92:b7:09:5a:f4:18:e8:3e:0f:8c:
                    a8:ea:3d:e1:49:32:00:86:cc:29:fa:77:6f:a2:04:
                    60:b5:59:b8:65:e0:ed:43:4f:a0:cf:a1:d3:58:2b:
                    7f:66:7c:14:cb:1b:29:5e:9b:5d:d1:76:e9:92:34:
                    5e:59:5f:df:cd:5b:ac:04:0c:ad:85:57:80:a9:4c:
                    fa:99:05:69:66:8d:53:33:31:0b:94:41:ed:4f:2d:
                    1b:97:8e:c3:19:3e:34:da:47:d2:b3:9a:c4:5e:da:
                    6e:9d:2a:53:7e:20:b1:6c:6a:4e:e6:ea:5f:df:c6:
                    32:ac:18:e7:a5:59:14:db:a8:25:25:24:e6:68:0f:
                    32:73:40:b2:b3:5e:9c:0f:ea:d2:f0:4d:5b:96:9b:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8D:1C:49:3D:AA:A1:79:2F:54:99:B9:FD:9F:5C:DF:7E:08:81:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b459dde2-4ea8-4683-a8ce-4b2ae5cc7146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         85:51:e3:19:a3:24:23:b0:d9:b6:45:57:95:6d:ad:3c:9e:77:
         5c:80:73:21:6a:2d:8c:22:b2:dd:dd:50:5d:c6:24:02:7c:bc:
         78:ee:d3:e5:da:0d:bd:b7:e9:50:1c:db:09:6d:e1:94:dd:58:
         bc:8f:49:45:82:96:23:b7:43:05:7b:fa:2d:dd:0b:9a:07:eb:
         0c:48:80:61:20:7d:8b:7d:b0:a1:86:ed:33:3d:0c:9c:f9:dd:
         d3:2d:08:60:1b:20:2d:49:1b:e8:65:df:50:ef:e0:1f:6c:a2:
         49:df:80:87:1d:91:16:ed:e7:42:f7:01:80:44:b1:73:8f:5d:
         4e:29:b7:e3:49:df:5f:e5:04:17:8b:c3:de:ac:cb:6d:37:e2:
         c4:8d:55:f7:3c:d5:3f:34:63:18:cc:3b:78:b9:ff:d2:7f:df:
         f3:e0:be:42:62:ae:db:ae:fe:9b:d8:8a:e4:0e:16:2d:28:88:
         3e:20:ea:9c:ad:f3:8b:1b:c9:63:e4:22:95:ff:a1:55:f9:83:
         a0:ac:15:37:95:9c:a2:95:52:7e:74:4b:62:70:d5:a9:e7:1a:
         5a:53:94:2e:9d:d3:b6:95:49:12:4e:f4:6d:a6:16:89:3f:99:
         28:82:20:a9:28:04:4b:60:64:a9:99:48:00:b5:45:bc:fe:08:
         7b:d1:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:17:36 2025 by rpki-client