This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a8dc4-07b0-4ecb-9ae4-7f0a45a014f1.roa
File:                     d52a8dc4-07b0-4ecb-9ae4-7f0a45a014f1.roa (raw, json)
Hash identifier:          XCD0XuoyIB3ao4tsNtfQwaD7tu8VqJA69BkwsCQNwas=
Subject key identifier:   76:12:24:FD:B6:FA:21:17:DF:0B:63:6A:16:AB:EF:68:65:39:67:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75C858AA6B945D135756228303E8ED3E1B40887B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a8dc4-07b0-4ecb-9ae4-7f0a45a014f1.roa
Signing time:             Mon 08 Dec 2025 00:11:07 +0000
ROA not before:           Mon 08 Dec 2025 00:11:07 +0000
ROA not after:            Sun 08 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.49.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c8:58:aa:6b:94:5d:13:57:56:22:83:03:e8:ed:3e:1b:40:88:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  8 00:11:07 2025 GMT
            Not After : Mar  8 23:59:59 2026 GMT
        Subject: serialNumber=e233efc1991d2c75a8485469a61dc1f98c07cdf372c914bb45890595d5473264, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:70:68:ef:16:74:c3:e7:dd:ed:27:5c:30:21:
                    37:84:2b:ba:fc:d5:3f:25:4b:0f:08:0f:90:d1:5e:
                    5f:85:6e:cd:97:ba:da:f5:3f:81:8e:29:72:20:9b:
                    62:ae:b3:c2:b3:6b:19:01:2b:ee:53:67:38:28:e9:
                    57:97:f7:6c:03:d7:6f:df:00:6a:c1:0b:0a:e9:ed:
                    8b:de:04:e5:27:4b:4c:0d:ee:2f:d9:f0:db:59:15:
                    46:e9:c4:49:f0:07:e1:b8:f0:53:9f:60:fc:da:b5:
                    4a:5b:c8:29:b6:63:3b:9d:ec:48:cb:c6:38:02:27:
                    1f:24:5a:d1:89:e8:47:6a:bd:40:37:ca:a6:34:e8:
                    53:65:2b:5d:00:60:f4:fb:d6:a4:22:e6:b6:a5:fa:
                    a4:f6:e6:d5:d5:05:53:6b:bc:54:4a:ab:6c:e8:1a:
                    fa:aa:29:29:1d:2e:8e:10:14:0d:5b:97:cd:52:36:
                    b1:3a:00:5c:f9:15:d0:8f:d5:6e:93:fe:a1:23:64:
                    6f:6e:90:35:24:5c:e8:09:cf:d3:d4:01:d4:f8:de:
                    de:bc:cd:72:2d:a3:87:32:83:f1:f3:00:f4:78:6c:
                    cb:47:7d:01:c6:71:48:c6:d4:52:71:9c:52:1e:fb:
                    b3:f6:c7:7c:15:35:02:5e:b2:f2:ec:ca:e9:40:1a:
                    5c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:12:24:FD:B6:FA:21:17:DF:0B:63:6A:16:AB:EF:68:65:39:67:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a8dc4-07b0-4ecb-9ae4-7f0a45a014f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.49.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:62:c6:7c:2e:28:38:35:b1:b2:11:6b:b0:e5:b3:fd:b4:85:
         16:54:d8:53:1e:f5:77:e6:8c:81:4c:94:fb:c6:82:18:a2:aa:
         d9:60:23:e9:13:01:d8:92:44:a6:a8:3b:d9:66:61:8a:26:c5:
         fd:18:a1:f4:81:53:68:1a:dc:b1:f3:c3:6e:33:e8:5f:b5:51:
         ac:de:41:9c:c2:58:cc:54:bb:36:ac:47:0b:e6:94:22:f4:e4:
         63:7f:8f:32:b0:53:24:d9:85:32:62:d0:6f:5e:45:bf:ef:a3:
         96:bf:6c:e5:3e:82:34:90:b6:6d:cb:d5:78:90:87:9a:fd:89:
         4e:ce:9d:70:a8:a2:08:73:55:4f:64:a2:0a:05:17:13:28:fb:
         c3:0e:52:27:bb:fc:2d:f1:dc:f2:2f:f7:ed:f6:6b:21:61:fe:
         4e:87:ec:4e:e7:6c:68:69:36:9b:ac:83:ae:15:63:94:e1:bc:
         7b:ff:a8:4a:bc:5c:c4:4c:ed:50:ca:d2:3c:ab:93:39:38:57:
         c5:03:44:e1:e9:f9:93:0f:27:1b:03:18:c1:96:d1:eb:ee:ad:
         15:bb:fc:a9:7e:6d:89:12:bd:6e:e4:7a:b0:32:0e:29:2e:1c:
         08:ac:7e:1b:7c:e0:3e:d7:d2:fa:c2:36:59:39:bc:92:d5:be:
         7a:5c:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:06:25 2025 by rpki-client