This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa
File:                     dba7885d-04f4-44b6-8fa7-310271019cc6.roa (raw, json)
Hash identifier:          5K+arXBz/GBZf7uEKIrUNZDY9U0E8Ri//XMqDgTyJGU=
Subject key identifier:   41:7B:39:DC:57:B7:61:2C:F5:40:72:6C:57:10:5A:07:F0:DD:39:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       09039177E5D5ECA0440E5B39B2D6808CDE2B5A9B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa
Signing time:             Sun 07 Dec 2025 02:31:08 +0000
ROA not before:           Sun 07 Dec 2025 02:31:08 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        158.151.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:03:91:77:e5:d5:ec:a0:44:0e:5b:39:b2:d6:80:8c:de:2b:5a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 02:31:08 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=be641e229da1c07c0e5b01703dd77c13e956787f512d720cfb9e3ba6caa14d27, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:42:fa:eb:4f:b6:62:0a:3f:46:b2:8a:b4:
                    61:2a:db:ae:ef:11:b8:12:0f:0e:19:73:7d:e8:50:
                    02:ba:6e:27:24:56:6f:cd:27:bc:08:39:fc:4a:1e:
                    8a:00:2c:b2:59:db:75:46:37:31:54:73:ae:1c:33:
                    cc:48:e5:a0:e5:3e:68:49:8d:4b:93:5b:ea:78:58:
                    15:16:4d:e2:31:a0:49:ea:95:0c:60:2b:91:87:eb:
                    a3:9b:ef:c7:2e:d8:c9:3c:c8:e5:24:82:15:5b:b8:
                    77:dd:7f:28:0d:96:16:63:5b:4f:3d:f6:e7:84:36:
                    a3:34:fb:45:05:a0:60:19:38:0d:df:46:8f:bd:aa:
                    84:40:e4:dd:5d:ae:48:3a:59:c7:a9:e8:52:39:5e:
                    44:c0:7d:99:1f:bc:82:0c:79:d0:04:9b:2b:86:b1:
                    41:e2:9b:a0:14:7b:a6:8d:1e:3a:38:f9:7f:21:ef:
                    6d:7a:2d:9a:fb:46:30:94:82:8b:b2:61:bc:5b:47:
                    29:28:79:44:66:64:70:27:9e:58:1b:09:28:18:44:
                    31:99:71:8f:7c:4c:0d:d6:cb:a2:65:57:4a:db:49:
                    cb:5e:51:b0:ac:a4:cb:d8:67:ee:bd:34:c2:01:f8:
                    18:f3:1c:dd:73:77:ed:a4:68:76:cd:d2:9f:f4:c2:
                    ec:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7B:39:DC:57:B7:61:2C:F5:40:72:6C:57:10:5A:07:F0:DD:39:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba7885d-04f4-44b6-8fa7-310271019cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:de:ff:e0:81:1f:cb:84:ed:30:a2:dd:1d:45:34:cd:9f:82:
         48:ab:27:0e:0a:62:83:83:a6:ff:01:3f:4b:0e:c9:99:c1:a5:
         39:ad:7f:63:4b:cc:7d:ac:d9:33:60:58:a3:33:f2:c4:c3:cd:
         12:b8:f8:ff:ef:7f:90:c6:40:e4:60:9a:fb:62:d9:72:49:40:
         14:87:7f:67:3f:85:91:ce:23:17:f8:4f:d7:bb:ca:56:66:ce:
         e8:e5:8d:c8:23:78:0f:3f:95:3c:de:3b:a6:65:c7:68:69:e4:
         f2:8f:ef:cd:ec:97:d1:51:15:df:0a:d9:86:01:24:0a:71:49:
         88:a9:6c:9d:38:db:2c:69:db:32:40:a3:36:42:62:24:21:99:
         d7:65:aa:2b:38:99:24:2e:ff:0e:ee:92:a5:a5:b1:29:5b:0f:
         4c:44:cc:54:75:09:a0:8f:26:a1:a5:ad:68:42:77:c9:95:92:
         e7:a6:07:b2:28:fc:f8:45:3e:fe:5a:6f:1c:82:b5:82:2a:ad:
         80:50:ea:c5:78:69:06:0b:e4:8a:f8:9d:54:83:83:3c:ea:f8:
         dd:84:93:a9:2e:1b:c0:1f:b9:ad:2e:23:d8:cf:d9:7f:0c:56:
         21:6e:17:52:2d:e0:1b:7f:26:db:2d:e0:de:4d:b2:79:7c:fa:
         e0:2e:d0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:43:49 2025 by rpki-client